Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/DVpfxe0rDPwUVQvKcJAJ7X-lfjc.roa
File: DVpfxe0rDPwUVQvKcJAJ7X-lfjc.roa (raw, json)
Hash identifier: k5mVn5SWg3gLsNqYEIa8BMUIQMLb62n/t0zN/XnUEj0=
Subject key identifier: 0D:5A:5F:C5:ED:2B:0C:FC:14:55:0B:CA:70:90:09:ED:7F:A5:7E:37
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01861C9CE61457D11EF7A0C6BEF019E0104F
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/DVpfxe0rDPwUVQvKcJAJ7X-lfjc.roa
Signing time: Sat 04 Feb 2023 13:28:09 +0000
ROA not before: Sat 04 Feb 2023 13:28:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24881
IP address blocks: 193.111.156.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Nov 2023 11:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1c:9c:e6:14:57:d1:1e:f7:a0:c6:be:f0:19:e0:10:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Feb 4 13:28:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d5a5fc5ed2b0cfc14550bca709009ed7fa57e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a8:66:f4:a2:dc:cc:8f:cd:80:b9:d6:3e:15:
a0:5a:13:2b:79:be:1f:2e:ef:3f:70:2b:fa:1b:76:
87:55:d9:59:26:39:ca:b9:66:b5:8f:c6:c8:9b:d0:
f4:2b:10:0d:f5:0e:f6:34:f6:b0:c6:40:f2:b5:e5:
b7:fa:3d:3b:50:12:72:62:e4:11:18:9d:4f:90:53:
40:2d:7b:a0:62:30:a1:a8:d6:a2:2c:da:77:bf:31:
ec:30:9c:d7:47:82:16:50:12:41:fa:6d:bc:97:59:
a0:71:52:22:ae:20:e8:c5:da:c4:37:5c:8a:bd:11:
f5:ba:67:4e:0d:ec:75:11:9e:b9:a0:19:8f:3b:8c:
83:4f:35:bd:42:ec:97:46:98:37:f6:9b:6c:3a:aa:
be:89:07:24:6c:a0:2b:66:95:8e:43:f1:71:92:c9:
a3:49:d7:91:96:93:09:2d:1c:2c:32:1f:ba:46:78:
c1:36:d7:22:cb:5a:49:74:1b:40:32:17:4f:05:5c:
fe:de:48:e2:97:33:92:0c:d3:11:dc:95:7e:1c:39:
53:70:39:c7:7c:98:40:c0:f4:62:8c:31:2a:5f:a1:
a4:b0:88:00:da:8b:2b:c1:b6:5b:db:86:70:dd:0b:
7f:4b:7e:c3:d1:87:95:72:d4:ba:3f:9c:44:3e:8c:
b8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5A:5F:C5:ED:2B:0C:FC:14:55:0B:CA:70:90:09:ED:7F:A5:7E:37
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/DVpfxe0rDPwUVQvKcJAJ7X-lfjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.156.0/22
Signature Algorithm: sha256WithRSAEncryption
47:83:74:1c:c5:0c:4f:c7:f0:3d:c3:1b:b6:7f:c3:25:28:49:
09:8a:83:52:8f:fd:f4:bf:dc:45:d5:7d:9e:47:34:2f:21:5e:
7d:71:86:79:26:9f:72:4e:ff:13:f6:27:7f:bb:16:28:64:df:
10:12:df:e7:c7:05:d8:9f:70:b1:db:94:41:09:ff:9d:87:62:
1c:aa:97:cb:1d:4b:b8:34:6c:8a:24:c8:22:77:26:bc:62:33:
22:b7:1c:c8:b5:f2:bb:45:77:ca:08:bb:29:82:76:e9:17:98:
93:37:e6:a1:0c:84:63:3b:5e:62:f0:e9:a9:27:7c:5c:14:09:
6e:ed:c2:3a:0c:d2:9d:60:97:96:e0:40:31:8b:2c:0d:a0:c3:
d6:e5:d9:36:99:9e:19:7d:c3:12:ac:5b:f3:3d:39:5a:ea:49:
24:06:ae:0c:6b:79:91:ab:4b:7e:0c:d6:ec:28:9a:48:82:b8:
6b:c8:48:f6:33:c5:e0:90:25:c9:fb:6c:c8:99:76:40:74:03:
b3:22:5b:54:3a:46:95:8e:52:fd:ee:41:df:f2:be:b5:2a:20:
39:a8:4f:ca:49:1a:79:c9:51:34:82:9d:f5:04:1a:69:5f:05:
54:ed:82:13:80:b7:40:3d:85:8f:d5:e0:ea:2f:27:83:19:6b:
d7:29:af:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org