Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/KWe6y_xDhepFTR29NQAh0WaTiNo.roa
File: KWe6y_xDhepFTR29NQAh0WaTiNo.roa (raw, json)
Hash identifier: mQyoAUHtT2W+7nnO64arQtgvIROdPS2gVkm85iJd7OQ=
Subject key identifier: 29:67:BA:CB:FC:43:85:EA:45:4D:1D:BD:35:00:21:D1:66:93:88:DA
Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial: 01857082B8799EA70F0E45D3B85C72A8F703
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/KWe6y_xDhepFTR29NQAh0WaTiNo.roa
Signing time: Mon 02 Jan 2023 03:24:53 +0000
ROA not before: Mon 02 Jan 2023 03:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 789
IP address blocks: 193.48.100.0/24 maxlen: 24
193.48.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:b8:79:9e:a7:0f:0e:45:d3:b8:5c:72:a8:f7:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
Validity
Not Before: Jan 2 03:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2967bacbfc4385ea454d1dbd350021d1669388da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f6:fb:57:ac:96:0e:35:5e:f0:e7:b7:a8:fc:
13:ab:6a:c8:82:25:35:6f:7d:28:d1:db:99:77:19:
56:16:8e:b6:92:5b:16:b3:dd:08:a9:31:15:26:fe:
45:02:03:94:61:ed:85:fc:e0:5a:1e:a7:ed:59:4e:
6f:81:31:58:17:a9:a4:b0:12:2c:31:a1:c8:55:83:
3c:65:e2:1d:9d:a9:76:2e:38:46:80:2a:9c:7a:46:
9d:a6:4e:e3:6d:f6:82:90:a8:17:42:bb:37:30:21:
73:e9:5b:98:6a:fe:2d:cc:b1:96:75:c4:72:37:d1:
2b:e6:b5:13:23:60:14:67:ae:d7:d1:f0:20:60:f4:
1b:c5:57:a8:84:0a:66:91:89:06:2b:80:5f:c7:8f:
5a:a8:3f:9a:65:8f:55:a0:c7:9d:5d:c9:42:d6:a8:
ef:b1:be:d8:b0:60:f0:9c:fb:30:30:92:6d:a3:92:
f4:8f:3f:af:b7:1a:40:95:12:c7:76:51:7d:fb:b8:
11:28:63:31:f6:e7:d3:dd:60:0f:fa:4d:b6:d0:83:
94:f4:a9:e0:d9:e4:a4:15:bd:9f:40:c1:bf:eb:2b:
35:1a:f1:39:65:95:9b:56:d7:96:64:4b:e5:12:52:
ff:1f:79:a9:e4:d0:43:99:73:97:3d:0a:85:a3:68:
46:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:67:BA:CB:FC:43:85:EA:45:4D:1D:BD:35:00:21:D1:66:93:88:DA
X509v3 Authority Key Identifier:
keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/KWe6y_xDhepFTR29NQAh0WaTiNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.48.99.0-193.48.100.255
Signature Algorithm: sha256WithRSAEncryption
3b:e3:e0:37:2a:b5:4f:38:ee:e0:ff:a0:a0:78:75:0e:32:8b:
9b:06:63:8d:45:6e:d1:e4:db:d6:db:c1:af:7a:24:5e:fa:9d:
37:0e:2e:36:97:3c:d0:fb:5b:93:93:2c:37:ae:c4:c7:3f:cd:
86:dd:b3:37:98:8e:f1:75:23:fc:76:c4:c0:85:67:fa:ca:dc:
30:81:39:7a:96:e9:d7:cc:d6:55:63:65:1e:4e:c7:cc:68:be:
6b:1c:c5:dc:ff:9d:01:47:ce:f5:c8:e7:44:f9:1a:90:ab:2f:
d5:4c:39:df:db:bb:0d:e2:eb:b7:62:cf:33:31:6e:25:ee:58:
53:7b:37:62:72:47:e0:4e:c4:b4:bb:ad:5b:06:06:bf:ab:b4:
06:f7:65:2c:6b:b8:93:54:4c:21:be:d9:39:49:b3:3a:58:62:
7e:26:26:b7:2c:fe:34:08:1e:52:35:36:a3:df:d6:7a:60:d1:
8f:41:0b:41:e7:d1:14:86:21:78:4d:79:4a:ae:a5:9c:13:0e:
d9:41:99:74:50:ea:4c:1f:43:f8:aa:09:ff:20:3a:55:6c:7c:
20:65:b1:97:43:c6:14:b2:31:1f:de:03:80:e2:e1:0a:a2:62:
67:f6:a1:e5:e1:16:6f:90:a3:51:ec:61:fd:66:ab:5d:c2:06:
41:4d:eb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:27 2024 by rpki-client on console-fra.rpki-client.org