Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/rJxItyJjvEqaMswIb3T_diQ6k1E.roa
File: rJxItyJjvEqaMswIb3T_diQ6k1E.roa (raw, json)
Hash identifier: s+CIueMYWKt2LDRd0NHvXT9KokU4Qfl2lnvrrhFa/00=
Subject key identifier: AC:9C:48:B7:22:63:BC:4A:9A:32:CC:08:6F:74:FF:76:24:3A:93:51
Certificate issuer: /CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
Certificate serial: 01856FC27E883C10BDDDAF720677F7603818
Authority key identifier: EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/rJxItyJjvEqaMswIb3T_diQ6k1E.roa
Signing time: Sun 01 Jan 2023 23:54:55 +0000
ROA not before: Sun 01 Jan 2023 23:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29551
IP address blocks: 193.25.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:7e:88:3c:10:bd:dd:af:72:06:77:f7:60:38:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
Validity
Not Before: Jan 1 23:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac9c48b72263bc4a9a32cc086f74ff76243a9351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:57:80:b0:a1:2b:3b:db:b7:70:eb:78:48:d3:
26:f9:f2:c8:1e:62:d0:0a:fb:f5:d4:c2:26:5d:d8:
d8:87:6a:a9:99:5b:98:4b:a6:8d:7a:8f:8a:22:2f:
f0:31:0e:58:5d:1a:79:26:99:c7:4e:d6:99:06:22:
64:a1:ed:ff:b0:49:19:01:c7:b5:81:80:a0:b3:b6:
68:16:2e:c0:65:7e:c5:2c:c9:de:01:20:80:04:07:
64:fb:28:cc:36:d9:76:28:d4:5c:e2:29:20:ac:45:
74:6c:c1:5f:ce:ee:39:4d:56:2b:2f:f3:d1:2e:d3:
2c:93:4b:e3:f3:6f:89:e2:40:f5:af:d7:30:53:e0:
df:c1:50:a3:5e:68:b0:a8:48:5a:4c:4c:0c:f3:3a:
fb:3b:77:59:1d:d4:1f:c0:b2:0a:76:12:39:f9:60:
6f:41:66:3a:bf:a5:bd:e1:f8:ac:26:e2:4f:f7:23:
5f:ff:92:5e:63:e4:33:1c:fb:75:20:6b:19:b0:9b:
5d:98:9e:6a:fb:f3:4f:74:1c:28:c1:3d:bb:29:f1:
ff:25:c8:8b:8c:1f:53:61:25:25:80:e4:bc:1a:0d:
dd:db:b1:5b:02:30:88:5c:38:25:0d:92:59:ae:0e:
67:3e:f8:ad:a3:c3:63:62:49:50:73:4a:5e:49:65:
09:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9C:48:B7:22:63:BC:4A:9A:32:CC:08:6F:74:FF:76:24:3A:93:51
X509v3 Authority Key Identifier:
keyid:EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/rJxItyJjvEqaMswIb3T_diQ6k1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.173.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:a7:62:56:7a:cb:27:a8:b3:55:ca:b5:09:16:6c:c6:4d:4a:
2e:70:3f:e6:10:4b:67:f8:a6:56:83:2e:c9:d2:b8:5d:e2:8d:
b6:88:7d:25:6c:ad:83:32:55:26:d4:5d:c5:84:c2:0a:7a:02:
4f:a2:c1:8c:43:c3:79:2e:d4:c9:42:f4:0d:18:fd:28:77:3f:
36:f3:3b:49:9d:be:81:ec:60:6c:47:bd:bc:3d:23:1e:ea:ea:
c5:f9:38:f4:91:0a:ef:a8:99:6e:6a:a2:d8:4d:b3:41:fd:e8:
c2:3a:1a:77:b8:68:56:d8:f0:c0:b9:9d:19:db:20:77:42:36:
66:ad:3a:a3:69:6a:65:a6:9e:9d:f3:65:0a:0e:69:2d:83:13:
23:29:c7:cf:14:9b:4d:f5:bb:3f:f3:73:2d:3a:9e:9c:0c:63:
4f:75:7b:4a:77:2d:dd:82:cb:06:95:9a:e3:15:dc:3c:80:4d:
b2:22:46:f5:fd:56:b4:1d:03:d1:87:29:6a:21:55:63:69:ed:
73:ea:bc:73:4e:d0:11:c6:81:79:69:b4:5f:34:7b:67:57:b9:
8a:62:42:4f:e7:c5:8f:9b:cf:f0:40:74:70:df:c3:a9:2b:77:
e2:73:a6:07:cc:4a:ab:ee:ca:f7:9c:be:c3:b0:ed:08:53:d2:
bf:79:5e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:48 2024 by rpki-client on console-ams.rpki-client.org