Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/d8cdTOYMh5_dOB9j9uxi14sddO4.roa
File: d8cdTOYMh5_dOB9j9uxi14sddO4.roa (raw, json)
Hash identifier: j6k4cRcP8VCJlkKWze6Joi067bMcoM1RJwTqOELyP1E=
Subject key identifier: 77:C7:1D:4C:E6:0C:87:9F:DD:38:1F:63:F6:EC:62:D7:8B:1D:74:EE
Certificate issuer: /CN=78c580769d521c89cc797ff699cacf0ba43da9bf
Certificate serial: 018B3D5A8D2E53A96E66DA09A1CD7969EAC0
Authority key identifier: 78:C5:80:76:9D:52:1C:89:CC:79:7F:F6:99:CA:CF:0B:A4:3D:A9:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMWAdp1SHInMeX_2mcrPC6Q9qb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/d8cdTOYMh5_dOB9j9uxi14sddO4.roa
Signing time: Tue 17 Oct 2023 11:17:06 +0000
ROA not before: Tue 17 Oct 2023 11:17:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 193.24.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:5a:8d:2e:53:a9:6e:66:da:09:a1:cd:79:69:ea:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78c580769d521c89cc797ff699cacf0ba43da9bf
Validity
Not Before: Oct 17 11:17:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77c71d4ce60c879fdd381f63f6ec62d78b1d74ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:93:33:f0:74:6f:42:3d:18:c1:14:51:41:d7:
dc:c5:33:25:d3:a4:2f:21:06:c4:08:d6:01:3a:02:
0a:19:a3:e6:b2:60:52:55:1a:ef:06:08:ef:bc:86:
cf:22:b3:55:09:dd:4c:9b:76:a7:d8:ab:57:97:66:
ef:63:ea:d1:db:84:d4:d5:ab:4e:21:b1:c6:0f:1a:
02:ff:fd:76:37:6f:8f:7b:1c:e0:3b:97:f4:dc:e1:
e8:56:86:7a:c6:c5:a1:7e:6c:eb:24:83:f3:d3:80:
12:fa:84:b8:2c:8b:92:75:d2:3e:66:d7:af:d4:b6:
71:c7:50:63:82:c7:1d:0f:33:db:7f:47:d9:b5:8d:
85:d6:cf:ec:e9:a7:f0:db:29:7e:38:d4:f1:c1:aa:
9b:29:e2:b3:3d:c5:1e:86:8d:55:fc:9b:61:cf:92:
2b:b8:13:1d:95:3e:f0:3a:58:42:64:50:7c:41:0b:
93:cc:0e:89:bb:15:dd:13:c7:46:b2:f6:7d:db:e5:
8d:bf:0b:43:8d:f9:8f:5d:05:f7:28:b4:a5:fe:11:
9e:0f:bc:e3:24:ec:9b:82:1c:86:75:99:a5:0f:8c:
ac:d0:f0:b8:07:58:5a:3c:4d:4a:21:16:88:b8:35:
8b:e2:fe:6b:96:6f:f0:ab:61:f7:ce:56:ef:9e:ff:
7a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C7:1D:4C:E6:0C:87:9F:DD:38:1F:63:F6:EC:62:D7:8B:1D:74:EE
X509v3 Authority Key Identifier:
keyid:78:C5:80:76:9D:52:1C:89:CC:79:7F:F6:99:CA:CF:0B:A4:3D:A9:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMWAdp1SHInMeX_2mcrPC6Q9qb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/d8cdTOYMh5_dOB9j9uxi14sddO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.44.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c9:6a:37:4f:8c:67:71:04:27:8d:69:ea:61:68:41:a2:6c:
25:03:bc:2c:42:7e:60:01:2b:f2:a7:d8:e9:34:08:e8:a0:86:
52:cc:94:29:a1:24:4b:ad:88:77:61:44:da:53:4d:86:26:6a:
1f:06:2b:18:c5:52:0c:07:1f:7b:71:98:4c:0d:28:07:1f:9a:
23:49:06:2a:ee:26:54:d7:fa:23:93:88:9c:8c:ef:e7:41:56:
9e:89:2a:d4:18:1a:f8:98:39:20:46:aa:32:30:f2:2f:eb:67:
25:d3:f3:b5:ed:39:cb:16:1d:51:86:eb:ec:e5:bd:13:5c:f9:
4d:47:24:11:66:fc:eb:7d:dc:80:d5:d6:ba:66:1e:f3:cb:34:
79:c8:25:a9:cb:b0:d8:4a:1c:d5:a4:76:9c:b6:7d:db:c3:b0:
ac:86:56:1e:5f:f8:55:39:0b:31:0b:ce:40:b2:73:44:15:30:
52:a1:e0:7a:e1:4c:fb:05:9e:ad:e9:d2:ac:69:34:81:72:0a:
2b:ce:f6:b0:4c:ba:ee:57:b5:ba:97:7f:bd:31:a0:59:22:a4:
8b:37:95:ea:20:51:dc:3b:07:71:f3:66:b6:d3:42:74:e1:45:
fd:76:42:09:45:20:04:52:fe:46:f5:eb:76:41:b0:8f:9c:d8:
0c:4f:e9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:02 2024 by rpki-client on console-fra.rpki-client.org