Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/xdjVqr7L_33tivu6aVJRQF95UyE.roa
File: xdjVqr7L_33tivu6aVJRQF95UyE.roa (raw, json)
Hash identifier: rNeZVg+HSUWZ5kJvKRxtMlpdWxJOQPxCWAdFgG4J1qc=
Subject key identifier: C5:D8:D5:AA:BE:CB:FF:7D:ED:8A:FB:BA:69:52:51:40:5F:79:53:21
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01861C9B10956FB4148DA39FA0D319773771
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/xdjVqr7L_33tivu6aVJRQF95UyE.roa
Signing time: Sat 04 Feb 2023 13:26:09 +0000
ROA not before: Sat 04 Feb 2023 13:26:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57460
IP address blocks: 193.43.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1c:9b:10:95:6f:b4:14:8d:a3:9f:a0:d3:19:77:37:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Feb 4 13:26:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5d8d5aabecbff7ded8afbba695251405f795321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b3:12:04:89:40:81:5d:50:2c:4a:61:b8:a8:
a1:a4:b2:49:be:cf:86:c4:9d:9d:65:1e:41:f9:26:
25:46:c6:0b:50:13:a3:bb:38:21:1a:27:05:21:32:
83:88:69:70:a8:b0:e9:c7:4c:45:02:aa:43:6e:f0:
1a:b4:f0:a3:e9:5d:c3:c7:ec:ab:2c:ff:94:d7:25:
39:ad:a9:ba:fa:1d:89:b4:18:32:56:48:58:1c:ae:
48:d2:70:c3:63:8b:70:2c:b7:d8:86:aa:81:0b:e6:
6b:dc:b3:60:9d:79:02:70:1f:00:e9:8d:62:28:ea:
e1:1e:cd:5c:01:3d:4d:7f:c5:43:29:0a:90:9a:f5:
5c:99:a0:bf:84:f8:cd:bf:01:0e:2c:a9:79:47:4c:
6e:ea:a3:f7:ad:45:aa:c2:2b:fb:be:5c:48:27:d9:
89:6d:a6:34:43:95:fb:4e:27:48:59:2f:0c:50:a0:
09:c5:7a:26:f9:5c:b8:b5:7a:3f:c9:c8:96:3e:d8:
84:a5:62:e0:a6:b2:76:21:ab:6f:b6:26:4a:83:71:
1f:08:a4:0e:4d:53:af:f6:93:bd:d3:88:01:6c:c5:
97:24:8f:69:01:43:3d:81:3f:38:01:ea:d5:c9:45:
bf:51:e1:25:b7:64:43:bc:38:8f:bb:4d:84:df:52:
25:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D8:D5:AA:BE:CB:FF:7D:ED:8A:FB:BA:69:52:51:40:5F:79:53:21
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/xdjVqr7L_33tivu6aVJRQF95UyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.252.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:25:af:e2:d4:19:2f:ef:80:b9:24:b0:c6:5c:88:39:89:03:
af:21:9e:d4:d8:ab:88:9d:e6:af:16:2e:91:c5:be:8d:3f:fd:
ad:c8:20:b1:93:f4:d1:2f:9b:88:81:96:2d:ad:8b:0c:e4:e4:
c5:75:43:1c:2b:ce:50:1b:ad:6a:b5:63:1a:46:19:bf:8b:cc:
3a:81:df:14:f4:be:87:c9:c6:d4:43:6c:84:ad:1d:a8:9f:08:
52:5e:e8:49:33:9f:c6:27:c6:76:55:c4:a2:5c:22:9e:37:c2:
d3:a5:a5:e0:79:99:6e:9c:23:be:76:c7:e9:f1:35:8b:91:44:
83:df:ec:d7:6b:7f:94:f3:70:d9:d6:fd:3d:eb:49:81:c3:b3:
9d:ac:39:70:59:59:f7:ec:41:fa:26:b2:a8:b2:4a:c0:68:3e:
0a:55:bb:c2:f3:9a:df:a0:fb:c5:74:28:f9:c7:92:4f:4f:3b:
14:dc:30:d6:da:72:76:02:8a:17:54:72:95:4a:c1:21:93:88:
e1:44:9a:fc:70:bc:b7:88:83:a4:ae:58:fa:52:91:62:5a:7e:
47:81:af:f5:23:31:5e:f9:e3:2a:37:dc:32:c3:9b:01:84:bc:
94:13:5b:20:59:fb:e1:74:05:61:54:e8:e1:89:65:bd:10:0c:
01:80:a5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org