Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/CXWpHq49F0rR6WZx2Pfswa4dPF4.roa
File: CXWpHq49F0rR6WZx2Pfswa4dPF4.roa (raw, json)
Hash identifier: 7Wuldo80j27/oaXMPfe2wfjYKaAfEki/SRKmHrp2zs8=
Subject key identifier: 09:75:A9:1E:AE:3D:17:4A:D1:E9:66:71:D8:F7:EC:C1:AE:1D:3C:5E
Certificate issuer: /CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6
Certificate serial: 01856E2F90954548F1FECCD46FE380A8CDDE
Authority key identifier: 89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/CXWpHq49F0rR6WZx2Pfswa4dPF4.roa
Signing time: Sun 01 Jan 2023 16:34:48 +0000
ROA not before: Sun 01 Jan 2023 16:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3215
IP address blocks: 193.222.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:90:95:45:48:f1:fe:cc:d4:6f:e3:80:a8:cd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6
Validity
Not Before: Jan 1 16:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0975a91eae3d174ad1e96671d8f7ecc1ae1d3c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d7:f9:35:97:a9:bc:5f:22:9a:07:a9:81:8d:
ab:97:65:18:ab:81:25:b6:a0:28:b0:a6:2e:b3:e6:
17:8f:68:7b:68:69:1c:27:9f:19:a6:6c:38:8e:7d:
28:be:ca:9c:bc:01:92:77:e7:92:0b:f4:43:03:a9:
9e:4c:bf:06:72:4e:77:d8:42:b6:43:ca:0b:89:5f:
f2:a9:38:4d:5c:8d:1d:c0:aa:aa:f6:db:f7:f5:04:
55:db:b6:49:47:4e:3a:67:f0:a5:5c:4f:8f:e3:57:
77:22:39:e5:d6:e9:a9:da:66:17:8a:34:2b:d5:ac:
3c:98:38:9c:07:68:35:de:43:b1:c3:dd:d9:dd:a2:
e6:27:7b:31:cb:90:c1:d3:64:c0:52:fa:ca:2b:cb:
c4:82:4f:c4:be:60:09:0e:70:27:56:5c:5b:06:1d:
ed:33:49:af:d7:85:bb:a6:e0:f5:d8:c2:93:60:7c:
f3:50:04:d9:dc:54:ec:f6:da:de:6f:c7:74:1b:c9:
47:7f:0d:b6:74:a9:62:1a:f6:f1:13:22:99:9e:30:
95:1f:bf:e2:e6:7b:b4:c5:27:a1:ac:b3:0b:3f:7b:
e6:7b:d2:ec:bb:93:bf:fd:0f:f8:7e:9a:4a:53:b7:
ed:f5:2e:dc:aa:a6:0e:2e:1a:c7:94:be:2d:d6:fe:
5b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:75:A9:1E:AE:3D:17:4A:D1:E9:66:71:D8:F7:EC:C1:AE:1D:3C:5E
X509v3 Authority Key Identifier:
keyid:89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/CXWpHq49F0rR6WZx2Pfswa4dPF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.134.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:20:60:cf:b0:8b:9c:cf:3a:cd:df:b6:00:0f:43:56:1f:5e:
74:0b:89:0b:55:6c:f4:3b:3c:4c:4b:53:1c:5b:a7:31:2d:94:
6f:c1:12:fd:9b:dc:e9:c5:f7:30:10:4c:bc:be:62:cd:05:23:
f7:85:3c:60:b6:c5:2a:50:6b:00:0d:f2:d6:fe:54:c0:8c:d7:
41:bc:84:32:af:1b:d2:de:bd:25:b8:8d:58:20:09:83:be:f7:
93:2e:ce:46:07:6e:c3:17:e1:ee:68:34:3b:ce:95:19:0f:15:
f9:cd:a4:84:80:38:b8:59:9b:99:82:1d:15:f4:f1:3f:94:58:
35:6c:b0:b0:35:75:e1:4c:4b:15:5a:ce:02:5f:82:e2:72:75:
c4:f0:e8:57:f4:a0:f6:ad:1d:bd:32:89:04:93:bb:91:c4:94:
dd:e5:ab:12:eb:64:b4:0b:fc:e1:35:0d:cc:a3:a0:4d:bb:67:
82:4e:fb:cf:d9:38:6f:56:d8:88:09:ce:b0:22:4b:6e:ed:d6:
6b:8e:f6:4f:a2:84:2c:c8:6f:12:c4:f5:65:4c:7e:d1:0a:96:
ac:8f:29:31:87:02:13:48:84:60:ec:97:6a:d8:7a:34:6b:02:
c5:d2:9b:00:a2:75:cd:4b:04:93:c6:4e:b6:36:47:30:d6:05:
d9:95:b3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:36 2024 by rpki-client on console-ams.rpki-client.org