Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/drECtYAFi35t2ijuCwRheXcHaFs.roa
File: drECtYAFi35t2ijuCwRheXcHaFs.roa (raw, json)
Hash identifier: ql8kf/xFWZuKGj5RJDCpArmr/H8ippaaUGsK6wPFo/o=
Subject key identifier: 76:B1:02:B5:80:05:8B:7E:6D:DA:28:EE:0B:04:61:79:77:07:68:5B
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0188B41F80DDF03B92B6DDCFBDD3D55C8693
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/drECtYAFi35t2ijuCwRheXcHaFs.roa
Signing time: Tue 13 Jun 2023 09:39:03 +0000
ROA not before: Tue 13 Jun 2023 09:39:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21859
IP address blocks: 193.58.147.0/24 maxlen: 24
193.58.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Jul 2023 15:51:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b4:1f:80:dd:f0:3b:92:b6:dd:cf:bd:d3:d5:5c:86:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 13 09:39:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76b102b580058b7e6dda28ee0b0461797707685b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e8:5e:75:f5:79:0a:d5:73:f2:41:f7:40:fe:
57:2f:2c:3c:f6:4e:f3:73:26:9d:29:34:38:7f:b1:
bb:fc:b0:61:07:e6:af:7d:c7:ed:31:93:73:d5:3b:
91:9b:9c:d9:ca:cc:05:e4:fb:ba:1e:9a:a6:6a:84:
a5:9e:04:be:2f:4b:75:55:dc:66:13:fe:ee:1f:3e:
bd:a6:c6:a2:ba:b2:21:c4:6d:27:3e:33:be:53:32:
2b:ac:4c:36:d0:c0:00:49:da:03:4a:a6:3d:85:f4:
47:c0:3a:4c:14:6a:46:dd:87:db:d8:30:bf:d4:1e:
d1:29:fa:f4:df:10:ae:a5:11:26:a0:6f:7e:76:b8:
cd:29:10:be:8f:19:19:9d:92:ff:fd:e7:a6:88:5c:
5b:bb:cb:29:b6:97:77:32:ff:f4:41:3b:90:dd:3e:
e1:8c:c6:78:99:c1:84:72:6e:0a:9b:6c:4f:0b:1d:
42:7d:59:28:f4:54:73:e1:f9:9e:19:b2:c8:70:dd:
38:4e:26:ca:5b:d6:93:00:c9:20:1a:3b:e1:08:70:
3f:3a:0e:27:35:82:c6:95:47:b6:6c:00:05:c3:01:
f8:7f:40:33:d7:e4:0c:3e:05:7d:b3:84:a9:90:ac:
fb:be:64:5d:a1:0d:1e:e0:13:b8:ed:b3:3b:69:a6:
24:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B1:02:B5:80:05:8B:7E:6D:DA:28:EE:0B:04:61:79:77:07:68:5B
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/drECtYAFi35t2ijuCwRheXcHaFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
33:99:cd:ca:78:7f:85:6e:d5:f1:13:f2:5f:6b:ad:42:d7:71:
63:85:be:38:b0:52:bd:20:2d:50:15:9e:88:b1:aa:a2:a1:4d:
6f:5d:af:90:18:b9:38:b3:a2:22:27:5f:19:29:3a:87:e7:db:
30:c4:b5:84:63:95:93:d3:d0:8f:ad:82:4a:ee:d9:e6:37:d2:
c6:70:22:17:57:2c:1b:92:0c:a9:25:8e:0a:4b:58:75:7c:d1:
ad:13:64:1c:25:60:39:ed:8b:d3:37:bb:16:66:72:a2:09:7d:
03:22:c1:7c:e0:4c:e0:02:5e:13:a4:bd:80:c6:f5:c3:ab:10:
81:c4:08:a3:27:8b:16:20:b7:4e:d1:c8:e5:d9:7b:d7:c5:87:
3e:3f:fd:e6:39:a5:cb:de:e0:08:79:97:81:3d:05:f0:66:3e:
f9:4f:8b:c8:2d:5c:c8:0e:e8:b3:cb:7c:54:02:2d:76:89:8f:
f7:22:01:f3:bc:46:7f:4f:5b:71:b4:a8:9d:92:d6:0a:a1:8e:
8a:e5:3a:d5:78:1c:70:bf:d2:5d:fe:e0:3f:fd:2b:f4:01:86:
3c:ec:ef:f8:5d:2e:49:ab:21:b3:c9:f2:a7:e9:eb:6c:b1:45:
36:8d:ce:60:8b:14:db:99:6e:b9:fb:7c:23:d4:a1:8b:69:46:
18:ce:ed:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:28 2024 by rpki-client on console-ams.rpki-client.org