Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/KsY49jyvsuOiHaPTeXOI9DMs3Vg.roa
File: KsY49jyvsuOiHaPTeXOI9DMs3Vg.roa (raw, json)
Hash identifier: 2tH5nU/k+pyezJZnL7VrjhcTi4cU6cgQMT50/lH4XTE=
Subject key identifier: 2A:C6:38:F6:3C:AF:B2:E3:A2:1D:A3:D3:79:73:88:F4:33:2C:DD:58
Certificate issuer: /CN=7b6d28404044239ef58242f210e0b16667eb40d0
Certificate serial: 01856FCB7E2FF616B16C7A9D45AC806C86A2
Authority key identifier: 7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/KsY49jyvsuOiHaPTeXOI9DMs3Vg.roa
Signing time: Mon 02 Jan 2023 00:04:45 +0000
ROA not before: Mon 02 Jan 2023 00:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 559
IP address blocks: 193.5.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:7e:2f:f6:16:b1:6c:7a:9d:45:ac:80:6c:86:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b6d28404044239ef58242f210e0b16667eb40d0
Validity
Not Before: Jan 2 00:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ac638f63cafb2e3a21da3d3797388f4332cdd58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:55:4e:56:35:33:0a:26:f6:a7:25:21:96:8c:
8c:25:6e:ee:75:14:1b:3e:8a:6b:9c:02:6a:09:bf:
89:8c:7b:26:5c:1b:17:0a:4d:92:78:a5:2c:b2:18:
b8:2e:60:71:ea:a1:03:51:42:5d:f6:8e:cb:ff:fa:
b2:5a:ad:bd:a8:af:e3:12:ff:3f:67:97:27:6e:01:
83:b4:3d:a5:c1:6c:b2:f2:3e:92:df:1f:50:1b:6f:
54:8e:4c:bd:66:6f:cf:5d:f2:0f:7b:19:6d:54:e0:
50:ac:86:64:9d:fc:7e:47:c0:22:6d:48:9e:38:ec:
28:00:1e:bb:9c:f1:39:77:37:51:e6:11:59:35:94:
23:01:4c:a9:99:c5:b2:e9:82:cf:c3:5e:d1:99:9b:
a3:0c:2a:d1:4b:86:ec:56:3d:f5:1c:df:e9:6a:39:
a5:15:66:d2:98:63:dd:03:e0:b4:55:51:70:73:48:
d1:b2:0e:73:75:27:15:0f:f6:9c:49:51:8a:89:8e:
a6:cc:4e:49:57:57:de:4a:c1:b1:9e:7a:f9:d7:ad:
44:3b:e9:c9:ae:80:e1:17:47:c8:07:5f:4c:4c:c1:
2f:5b:c5:2f:d0:73:04:2f:8c:8e:d9:ff:06:ed:44:
bb:8b:54:0d:fc:92:fd:77:5c:6d:f6:bc:42:87:03:
61:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C6:38:F6:3C:AF:B2:E3:A2:1D:A3:D3:79:73:88:F4:33:2C:DD:58
X509v3 Authority Key Identifier:
keyid:7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/KsY49jyvsuOiHaPTeXOI9DMs3Vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.53.0/24
Signature Algorithm: sha256WithRSAEncryption
24:10:97:09:9c:39:43:a0:40:e8:de:26:04:db:77:7a:aa:2e:
b8:1b:d7:f3:ad:8f:30:6a:fe:bc:24:ff:f8:6d:6b:d6:d5:76:
2d:0d:77:c8:93:8c:3b:55:95:0f:1f:cf:31:bb:58:89:06:eb:
ba:b0:d1:bd:88:eb:69:32:40:fb:11:de:c1:e7:c5:4d:b8:b1:
e2:26:71:38:5e:07:e5:0f:0a:de:b3:a9:61:99:76:ef:13:62:
ad:53:40:8c:d1:1d:4b:6d:3c:6a:e5:d2:87:b6:67:e8:8e:43:
6e:7c:02:3e:d6:36:8a:95:89:d8:5d:2e:0d:ee:a1:5b:57:92:
24:5c:13:71:e0:4f:f1:4b:04:ea:c1:10:61:47:05:52:41:8c:
5f:86:cd:a8:3d:f4:14:43:fe:10:fa:79:11:5d:fa:5a:8a:50:
0d:c4:ec:19:b0:1e:ae:86:a9:db:13:ae:09:48:d9:c0:fa:a3:
76:67:40:58:51:e0:85:f9:42:56:92:e0:e0:a6:8d:c6:3c:f8:
18:38:7a:b2:3b:2c:ae:9e:14:57:e4:aa:16:f7:e8:f1:ac:0d:
2c:c4:4d:4a:c9:4d:5b:9a:b2:d5:fa:ce:b2:11:d5:98:6e:6d:
7b:bb:77:22:f5:31:6c:69:b1:3b:ff:30:94:2f:47:1b:19:f2:
a3:7c:ac:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:22 2024 by rpki-client on console-fra.rpki-client.org