Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Wq1SAZ0p9O2jGrS9bfqfROr3p8s.roa
File: Wq1SAZ0p9O2jGrS9bfqfROr3p8s.roa (raw, json)
Hash identifier: pVIxMQpp/r6yokttQFjINAvzzQO0ERg27G0qqYhiNh4=
Subject key identifier: 5A:AD:52:01:9D:29:F4:ED:A3:1A:B4:BD:6D:FA:9F:44:EA:F7:A7:CB
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018570F0B3FBA6008DFAAFAD9017202E4636
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Wq1SAZ0p9O2jGrS9bfqfROr3p8s.roa
Signing time: Mon 02 Jan 2023 05:25:00 +0000
ROA not before: Mon 02 Jan 2023 05:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400040
IP address blocks: 193.37.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:b3:fb:a6:00:8d:fa:af:ad:90:17:20:2e:46:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 2 05:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5aad52019d29f4eda31ab4bd6dfa9f44eaf7a7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f0:d4:1f:4a:9d:b6:a4:dd:a0:eb:bf:fe:a5:
7e:1a:99:c2:14:91:15:af:16:ae:58:2b:84:e2:e3:
b8:fe:7a:87:83:9e:26:85:22:fa:55:19:e7:a2:c4:
47:c6:a9:38:f8:b6:46:33:f7:2a:dd:3e:28:ab:ad:
42:59:55:2d:38:3c:ee:00:a1:21:f1:26:e1:d7:c0:
83:7d:b8:14:61:ef:2b:98:14:c1:38:a9:a8:4f:91:
c3:25:f4:99:09:53:b9:4f:c0:10:3e:49:40:d1:4b:
d4:dc:ab:1e:dc:77:52:b2:34:f7:9f:ed:9c:3c:85:
47:7e:dd:fe:88:7e:00:4d:79:45:50:c6:fd:27:39:
d8:b7:82:b2:a1:e8:8d:93:8e:d3:4c:b5:58:8c:dd:
1d:d0:d5:8b:39:a2:68:7b:7b:51:4f:b7:5c:b3:a1:
b4:fc:cf:80:10:c6:01:ec:e9:79:43:1d:81:7d:e6:
02:d1:b9:0a:da:5b:cc:60:1a:b6:f1:bc:6e:97:78:
21:7a:fc:dc:08:7e:0d:87:7f:9f:07:15:a4:fb:10:
91:01:7c:2d:e7:a9:aa:f6:6a:2d:cf:ce:12:d4:4e:
3a:f3:cd:4a:f0:0f:a2:88:5a:09:5c:3b:40:6c:3d:
49:42:9d:b8:ba:38:63:57:e8:d4:c8:2c:0a:00:8a:
08:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AD:52:01:9D:29:F4:ED:A3:1A:B4:BD:6D:FA:9F:44:EA:F7:A7:CB
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Wq1SAZ0p9O2jGrS9bfqfROr3p8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.198.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:30:81:ec:ab:25:b9:29:d3:ab:c1:7f:03:55:66:10:06:c2:
ff:a0:2b:43:9c:13:db:a8:92:e4:4f:5a:8f:55:0b:fd:b9:ac:
97:61:d9:ee:34:40:c8:d1:24:f1:e1:64:a1:1e:3b:3c:86:a2:
c9:23:65:f3:fd:74:4b:3e:7f:d4:5c:6a:43:11:0b:cd:df:17:
34:8d:e3:6a:47:b0:70:9c:91:50:f6:70:eb:37:0b:54:f1:90:
7d:42:57:47:fe:cb:0c:2f:56:f3:9e:43:8f:18:61:21:2f:5c:
aa:28:d0:0c:69:54:ff:a8:f9:63:04:38:c1:8c:91:b5:ab:92:
e2:cb:e1:10:74:c5:14:96:f4:c8:49:45:98:b3:a8:e1:7b:5b:
a0:c3:9c:c0:c3:34:a9:c1:38:a4:3f:8f:fd:b8:4f:db:43:8a:
45:b5:2d:d7:1c:45:24:a0:a2:6d:55:6c:96:51:ca:69:bb:b0:
2b:06:c0:84:35:0c:73:34:63:dc:67:02:07:2a:47:77:62:35:
12:fa:51:1c:82:df:c7:78:6b:27:ab:a5:d9:35:b8:5d:03:93:
c4:32:5d:e6:78:d8:ff:64:60:0f:a2:b9:a2:d7:81:02:2f:7c:
c6:fa:4b:f0:9b:95:46:6e:8c:a3:49:6c:30:39:77:8c:cd:a3:
b6:05:12:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:47 2024 by rpki-client on console-ams.rpki-client.org