Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/9tZ7DOjZVtQ7c4VH8gWRxc4W_-M.roa
File: 9tZ7DOjZVtQ7c4VH8gWRxc4W_-M.roa (raw, json)
Hash identifier: jpu16J1k1YpzBLmqamVML5r5YhMlJq1H6BlY/1MCK3o=
Subject key identifier: F6:D6:7B:0C:E8:D9:56:D4:3B:73:85:47:F2:05:91:C5:CE:16:FF:E3
Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143
Certificate serial: 018572A6F35A04E5B68EC164B7B571C05224
Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/9tZ7DOjZVtQ7c4VH8gWRxc4W_-M.roa
Signing time: Mon 02 Jan 2023 13:23:41 +0000
ROA not before: Mon 02 Jan 2023 13:23:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16013
IP address blocks: 193.92.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:a6:f3:5a:04:e5:b6:8e:c1:64:b7:b5:71:c0:52:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143
Validity
Not Before: Jan 2 13:23:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6d67b0ce8d956d43b738547f20591c5ce16ffe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:98:01:8e:48:a5:e6:1b:c4:42:a5:03:8e:
5d:79:28:dc:c1:9c:67:8c:bc:f0:32:b0:51:b5:20:
2f:1f:ed:f1:a5:ec:7c:5b:4f:63:92:f4:6f:ec:e9:
a4:37:02:62:ec:78:f3:29:4d:c4:73:ef:b4:a0:91:
92:cf:89:fd:f9:64:05:88:f8:a8:fc:45:16:21:f0:
16:33:81:c3:ee:81:2b:12:56:fa:64:82:cc:71:43:
9a:30:03:51:8e:ac:aa:26:aa:ec:ae:8f:e1:b4:5d:
64:11:13:d3:80:49:3b:7d:3e:2d:8c:82:72:7a:10:
e9:09:6d:46:c6:a7:c5:75:92:ec:9d:e6:1e:50:df:
87:1c:6d:4d:1f:73:af:b4:a0:0e:5c:df:96:2d:88:
a3:1f:32:07:df:00:95:26:b3:e2:c1:af:6f:ff:e5:
1c:3a:91:75:8e:9a:d5:5c:93:da:d1:26:64:dd:ea:
a3:dc:56:ac:95:a9:e1:7c:90:5f:e3:82:26:f0:29:
19:86:0f:b1:ba:df:52:94:4d:ac:11:82:96:75:68:
4d:24:f9:b2:65:08:9a:a6:06:00:f2:af:40:39:90:
b3:16:be:e2:2e:3d:8e:fb:d3:06:72:fc:e1:cf:33:
e4:30:15:f8:39:11:27:9a:17:6b:61:d7:3d:ee:80:
bd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D6:7B:0C:E8:D9:56:D4:3B:73:85:47:F2:05:91:C5:CE:16:FF:E3
X509v3 Authority Key Identifier:
keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/9tZ7DOjZVtQ7c4VH8gWRxc4W_-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.92.173.0/24
Signature Algorithm: sha256WithRSAEncryption
81:ac:1b:18:ea:5f:c5:ac:dc:b5:da:3c:0e:82:7d:44:1a:47:
8b:60:d0:89:65:3d:ac:70:39:79:78:ee:56:e0:43:57:d6:f0:
28:8c:31:b4:cc:7b:90:27:db:af:ed:ec:bf:30:b8:7c:c5:eb:
2d:76:c7:76:2a:00:f2:ba:2e:b8:49:31:71:77:f4:f8:ce:05:
88:d3:2b:e1:f6:0a:09:9b:57:e1:28:0d:1e:77:7e:31:45:02:
c3:a8:9c:bb:6d:dd:d8:f8:fd:35:52:07:10:42:e3:67:d6:29:
fb:17:89:81:35:e8:fc:42:9d:2a:b0:0d:0c:91:6c:f0:30:99:
36:96:86:28:0e:8d:fa:5d:4e:9c:0c:ad:1f:6e:96:69:3a:da:
f0:ad:4a:e2:d8:77:dc:4b:4f:1e:3c:9f:f8:d8:58:9b:0f:78:
f0:03:e4:0d:07:a7:ff:db:10:86:ff:d0:fe:70:ad:38:2d:f6:
ee:7d:1f:01:b8:75:e2:11:8b:66:20:0b:c6:8a:77:bf:89:4b:
ef:7b:29:5d:56:50:6e:74:6a:c8:8e:bd:1e:65:4d:6b:7b:a4:
9a:21:b2:9b:a8:69:e4:4a:f7:c2:a5:ad:a8:b8:70:64:45:36:
89:eb:bb:ba:73:98:8c:3b:de:78:43:ec:0c:a2:ac:7c:08:23:
db:fb:29:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:32 2024 by rpki-client on console-ams.rpki-client.org