Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/p8w37-gQRnXz2aM-h4oVkEPLi6Y.roa
File: p8w37-gQRnXz2aM-h4oVkEPLi6Y.roa (raw, json)
Hash identifier: KH711Zp0Hid8snpXqpyP25L26RJ8gHW8wtd6CW1HeJ8=
Subject key identifier: A7:CC:37:EF:E8:10:46:75:F3:D9:A3:3E:87:8A:15:90:43:CB:8B:A6
Certificate issuer: /CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
Certificate serial: 01856D01BC95B6D9F9BEAF2C9095E69C5875
Authority key identifier: 6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/p8w37-gQRnXz2aM-h4oVkEPLi6Y.roa
Signing time: Sun 01 Jan 2023 11:05:08 +0000
ROA not before: Sun 01 Jan 2023 11:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16077
IP address blocks: 193.41.180.0/23 maxlen: 23
193.108.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:bc:95:b6:d9:f9:be:af:2c:90:95:e6:9c:58:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
Validity
Not Before: Jan 1 11:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7cc37efe8104675f3d9a33e878a159043cb8ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:b3:17:f8:45:11:38:3d:cb:52:42:53:66:
4c:a9:11:72:1a:e8:53:70:d3:d9:29:60:9d:6d:cd:
3c:64:23:e1:fd:fc:b1:fa:01:9d:d5:02:18:80:2e:
5a:32:4e:18:90:83:9b:70:82:fd:41:ee:95:19:ac:
51:70:79:f4:a0:b3:e2:ca:03:8b:04:ba:e8:52:04:
66:72:2e:8c:97:d0:b5:73:33:56:bc:8a:7f:a1:9a:
9e:64:2b:dc:a2:87:fe:fd:c2:e1:d7:23:8d:9d:67:
63:2d:67:8c:40:5c:e6:6a:69:3f:da:95:98:1e:f3:
9e:d5:30:02:d4:0e:30:88:14:f3:6a:f8:e8:02:3b:
19:58:2c:da:3f:65:77:f3:e9:cd:64:aa:00:84:a4:
50:67:71:2f:3c:b0:af:51:f6:02:7e:dc:af:67:0d:
b9:49:5b:4b:98:f3:10:7d:28:16:8b:bc:fd:a0:89:
ef:72:62:b1:06:79:27:4f:4a:3b:2b:33:c5:1a:30:
eb:99:e1:af:a3:70:8d:5c:0c:68:79:9f:c9:dc:f3:
eb:3c:76:21:7b:57:a2:fa:43:6e:81:80:bb:d8:50:
59:b2:a1:2e:dd:3a:44:ba:70:7b:e8:55:01:48:1f:
55:79:72:ed:c4:85:5d:16:08:bb:92:fa:91:56:f2:
5b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CC:37:EF:E8:10:46:75:F3:D9:A3:3E:87:8A:15:90:43:CB:8B:A6
X509v3 Authority Key Identifier:
keyid:6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/p8w37-gQRnXz2aM-h4oVkEPLi6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.180.0/23
193.108.203.0/24
Signature Algorithm: sha256WithRSAEncryption
92:75:67:6f:8b:c0:a9:6c:65:4e:ab:72:42:3b:a9:d1:50:64:
2f:24:05:76:30:7a:4f:1a:45:99:f1:c0:11:29:a7:b2:c2:db:
22:23:5f:6d:a3:8b:4d:98:0d:4a:f2:2e:bd:eb:d5:a7:0b:6b:
90:ba:c5:7b:12:9e:a2:b3:02:d0:2a:7c:82:01:85:48:99:25:
ed:12:ed:03:ea:ef:33:05:8b:01:a2:9b:73:76:94:cb:6b:c2:
33:ba:cf:61:35:7a:6d:c5:b5:04:32:65:eb:d1:3d:4e:9b:72:
21:ff:12:d8:f8:12:fb:46:43:6c:4b:74:fd:20:8a:e7:9d:b7:
ea:98:9c:e4:88:c1:05:09:83:7d:da:44:8b:27:11:38:d1:5e:
47:bd:76:a6:7e:02:43:c6:b8:51:ec:12:8a:20:59:02:7d:34:
ec:c2:74:08:04:a6:7d:f6:b5:bc:f4:bc:93:dc:a2:a9:1e:76:
49:e4:d3:21:7c:14:39:7d:58:84:a1:21:37:bd:47:87:1f:74:
93:15:12:8f:7a:aa:b0:69:2a:55:84:c4:d8:79:bb:da:86:a1:
7d:2f:cc:27:fe:9a:be:bb:fb:25:89:9b:c6:9e:3c:ab:58:40:
67:7d:67:6e:86:d8:40:32:c1:70:34:9d:cb:7f:95:0d:9b:c9:
d9:3e:87:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:39 2024 by rpki-client on console-ams.rpki-client.org