Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/cjP2oMSgivNxYjpuv4-NauQi4HI.roa
File: cjP2oMSgivNxYjpuv4-NauQi4HI.roa (raw, json)
Hash identifier: VD5WvnSnluM/R0mD/NVYNdZewSzEI+S6r5R3zDVF6jo=
Subject key identifier: 72:33:F6:A0:C4:A0:8A:F3:71:62:3A:6E:BF:8F:8D:6A:E4:22:E0:72
Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial: 018570397B7E58B47CBB5BDF21CC2329A91F
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/cjP2oMSgivNxYjpuv4-NauQi4HI.roa
Signing time: Mon 02 Jan 2023 02:04:53 +0000
ROA not before: Mon 02 Jan 2023 02:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45000
IP address blocks: 193.0.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:7b:7e:58:b4:7c:bb:5b:df:21:cc:23:29:a9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Validity
Not Before: Jan 2 02:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7233f6a0c4a08af371623a6ebf8f8d6ae422e072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:14:80:79:10:4e:21:ab:e1:f6:36:55:c9:
c5:df:f1:2e:59:85:44:aa:38:43:48:d2:88:a0:a8:
fb:08:85:b5:4c:53:0b:69:4c:05:7f:e6:0b:e1:75:
bf:3b:70:37:51:02:77:7c:5d:b5:60:07:c7:66:6e:
72:69:5c:2a:33:d9:ef:4c:a9:c1:a6:0a:15:ef:99:
79:53:5b:ed:5e:05:46:2f:34:95:49:8c:8f:14:8c:
00:83:dc:f8:a2:8b:a2:d1:5d:fc:24:d5:92:00:5d:
76:61:48:1b:ac:e8:b5:cb:ed:d3:18:45:30:86:16:
fe:41:e5:c9:05:34:e3:a8:5e:08:42:0d:9f:3a:bb:
26:6e:eb:a5:9d:aa:74:ab:4a:8c:d0:e3:08:f3:6c:
b8:3d:bc:a6:4f:94:39:10:05:ee:fe:15:17:fd:71:
12:b5:db:68:18:23:c4:a5:d1:7b:b9:24:69:83:71:
ab:25:87:fd:55:c9:29:93:cf:a4:cc:cd:bb:48:6a:
25:57:d0:14:67:36:05:68:3f:f9:7a:50:9d:fa:ac:
1c:53:3a:d6:19:d6:98:4e:ce:a3:51:7c:42:d1:d6:
fe:38:a5:00:65:53:6a:c7:a8:46:45:fd:64:40:14:
f6:07:e3:5d:92:ac:6e:79:40:e2:0f:3a:f2:2c:41:
07:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:33:F6:A0:C4:A0:8A:F3:71:62:3A:6E:BF:8F:8D:6A:E4:22:E0:72
X509v3 Authority Key Identifier:
keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/cjP2oMSgivNxYjpuv4-NauQi4HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.185.0/24
Signature Algorithm: sha256WithRSAEncryption
97:b1:fe:a7:21:3a:fe:84:66:6f:82:75:76:09:9f:cb:5d:25:
83:69:97:8d:6d:a7:00:1a:29:4e:29:98:a4:08:57:0a:65:e6:
de:d0:8e:49:67:f8:47:55:17:15:ed:4a:fd:e4:92:21:11:46:
fe:01:9e:55:d8:bb:5e:01:56:c2:fe:b9:66:19:5d:1d:07:9e:
93:ee:bd:41:56:6e:df:bf:af:fc:00:1c:83:c7:df:77:30:5a:
28:9e:19:a3:ec:0e:17:dd:0b:81:af:c8:6f:fa:a3:2e:a8:9a:
09:96:5f:a1:73:29:a6:6f:77:c6:c0:eb:64:eb:df:19:a4:15:
89:c2:71:a4:d2:28:53:77:0c:a6:a4:19:e7:11:63:e6:e1:3f:
e0:1c:f7:54:c0:b1:a4:ab:bc:c3:40:b0:d4:7e:a3:0b:16:4a:
a0:0f:2d:6e:24:9a:41:f2:c2:22:86:69:27:82:07:af:d6:bf:
5c:27:ca:02:3d:95:16:47:b0:7a:33:1f:4a:ef:6e:1d:cf:c4:
0f:23:7b:49:64:9a:10:50:02:b7:dc:be:c1:7c:75:c3:43:c3:
4e:d3:33:9a:7d:b7:e0:9b:2d:82:9b:dd:0a:5c:f0:87:31:9a:
6e:70:25:47:52:db:40:cf:30:29:c6:40:52:1f:bb:91:c5:aa:
b4:35:d9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:27 2024 by rpki-client on console-fra.rpki-client.org