Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/oAkF7OPz7dc6nEUIhXqTCSgvVyY.roa
File: oAkF7OPz7dc6nEUIhXqTCSgvVyY.roa (raw, json)
Hash identifier: BmEBzeTcwK2psZHE7oQN3VocKJvtezH6PoCMbDC420E=
Subject key identifier: A0:09:05:EC:E3:F3:ED:D7:3A:9C:45:08:85:7A:93:09:28:2F:57:26
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01878EB027A69535FD6F6CE6A710D765C78B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/oAkF7OPz7dc6nEUIhXqTCSgvVyY.roa
Signing time: Mon 17 Apr 2023 10:08:41 +0000
ROA not before: Mon 17 Apr 2023 10:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 193.58.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 May 2023 12:18:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8e:b0:27:a6:95:35:fd:6f:6c:e6:a7:10:d7:65:c7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 17 10:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a00905ece3f3edd73a9c4508857a9309282f5726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4c:23:b5:f4:6e:7e:7f:7e:05:97:22:e7:5d:
32:8e:8b:77:5d:e6:0f:65:9b:ca:b4:a4:b4:43:2e:
3c:73:27:40:87:b0:ac:85:90:f2:2a:d9:c1:1d:7a:
f1:3f:4a:44:e2:b4:6d:2b:f1:99:f9:09:98:6f:7a:
31:b2:3e:6c:3e:fb:62:c5:4c:19:1b:26:ba:23:7f:
3c:9d:8d:53:80:a1:5c:a7:c9:02:c0:54:af:96:8f:
d5:5d:1c:4f:40:be:97:51:72:a3:13:7b:18:89:7e:
8e:9d:ab:84:07:29:cf:68:bc:97:36:02:ab:a1:c1:
eb:58:40:1d:92:f7:86:6c:c2:34:4c:70:33:45:4f:
28:17:98:82:28:00:1d:d1:44:8e:41:39:4e:6d:bb:
de:e9:6e:be:83:01:1d:41:1e:a9:29:46:67:be:a3:
c5:28:d9:58:cc:e6:9f:9a:8b:23:30:c0:2e:1f:04:
68:3f:7f:d5:f4:2e:54:b9:41:ca:c0:1f:20:40:e5:
b8:d7:68:70:ca:a6:34:22:5d:a3:0a:a1:59:fe:27:
e2:17:e5:f3:63:7f:e5:61:a5:d2:cc:de:0d:83:a0:
99:41:24:b0:93:1c:e6:85:4d:df:de:1e:ff:81:14:
6f:1b:08:8b:f1:82:c4:81:32:5a:f0:5a:01:43:e5:
5c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:09:05:EC:E3:F3:ED:D7:3A:9C:45:08:85:7A:93:09:28:2F:57:26
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/oAkF7OPz7dc6nEUIhXqTCSgvVyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.144.0/24
Signature Algorithm: sha256WithRSAEncryption
52:16:3a:ca:b6:7a:65:45:82:54:1a:ca:be:6e:0b:d4:5a:85:
45:e2:70:fc:44:4c:bc:be:02:26:2b:b9:c3:30:b7:2b:fc:1d:
5c:72:b5:c2:48:e0:f6:82:20:0e:e6:3d:9b:b6:1b:7e:49:8e:
4f:6f:8b:d2:ee:e9:f7:60:b3:8a:29:43:66:31:2e:4e:fa:cd:
71:e4:b8:cd:1f:df:1b:60:46:38:9a:2d:d7:76:1b:48:77:5d:
79:cc:b6:54:c9:8c:e4:de:fa:13:bc:42:fc:63:6c:0e:66:88:
a5:68:21:db:6f:29:85:be:39:c5:2b:66:eb:b7:06:9e:77:de:
4a:29:93:b8:f8:69:19:40:a6:1e:fd:de:b0:73:57:af:1c:6b:
d3:40:b2:14:3a:71:3b:88:08:05:13:a5:91:c6:3d:2a:77:3a:
3d:b1:f2:8e:fa:5d:bf:34:73:44:23:8f:b2:ad:db:9c:f1:b8:
9b:9d:22:77:7d:a4:87:72:d1:dc:35:4a:47:a0:f0:4c:f1:f4:
54:97:05:6b:88:ce:c3:d3:76:78:eb:67:63:2b:ca:e0:08:54:
8f:dd:47:27:73:9e:f3:b5:d1:ee:0a:7e:a1:3d:37:24:f2:ab:
77:a0:f9:47:d7:55:3a:5a:54:37:72:73:bd:9b:0a:db:50:a6:
b6:5a:c9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org