Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/g3MLxNSU6v_k7Uan0huJL_Z-Xpk.roa
File: g3MLxNSU6v_k7Uan0huJL_Z-Xpk.roa (raw, json)
Hash identifier: PyeQQmQOh6pDmBFKqfJGO0Yp/YqBR88fBkgc2W/N0UE=
Subject key identifier: 83:73:0B:C4:D4:94:EA:FF:E4:ED:46:A7:D2:1B:89:2F:F6:7E:5E:99
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 018DDC182DDE1D41CF6C54AEB6A4ECBED1F4
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/g3MLxNSU6v_k7Uan0huJL_Z-Xpk.roa
Signing time: Sat 24 Feb 2024 17:09:48 +0000
ROA not before: Sat 24 Feb 2024 17:09:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 193.228.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Mar 2024 17:25:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:dc:18:2d:de:1d:41:cf:6c:54:ae:b6:a4:ec:be:d1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Feb 24 17:09:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83730bc4d494eaffe4ed46a7d21b892ff67e5e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:11:26:f3:cc:84:4a:a4:7c:36:64:a4:7c:1e:
cf:d5:f9:24:3f:72:7c:78:95:c9:41:4c:20:2b:31:
fe:87:40:29:19:ff:0b:52:26:8c:32:5e:3c:bf:9e:
71:d9:57:3d:50:5c:77:60:08:74:33:16:5b:ce:7b:
4a:91:b4:78:d4:dd:4b:c0:f7:97:e1:c8:34:62:bf:
d6:1e:92:1e:40:7b:0a:f6:69:d0:af:ae:ab:dd:24:
8d:96:da:d4:d0:af:62:5f:38:9a:d9:32:c7:4f:0b:
4e:69:4f:6f:4a:e4:4a:2e:21:c9:f6:2d:9d:6e:19:
01:f5:1e:59:91:33:b1:72:f7:11:a6:9b:c1:b4:3d:
96:56:20:26:07:94:35:7e:5e:9a:92:eb:c9:9e:85:
de:79:3c:a1:c4:90:3c:02:04:fe:ec:c3:09:a6:3b:
6e:41:68:87:1c:ee:68:dc:ee:86:38:6b:cf:d1:6d:
4a:88:ad:46:2e:f1:f1:6b:e9:dc:ab:7f:82:60:a4:
ba:dd:4c:58:70:b1:d6:bd:f6:32:35:c6:0a:36:cb:
44:cf:71:a8:64:32:1d:48:7d:1e:af:74:21:68:cc:
84:6c:da:e1:96:65:84:d4:92:83:64:3f:25:01:a9:
eb:61:64:76:e8:57:27:56:fd:97:79:41:d7:64:0a:
af:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:73:0B:C4:D4:94:EA:FF:E4:ED:46:A7:D2:1B:89:2F:F6:7E:5E:99
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/g3MLxNSU6v_k7Uan0huJL_Z-Xpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.128.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:d5:29:35:62:3f:ec:3f:8d:35:5c:42:28:73:45:c4:c6:66:
c0:08:d5:0b:b7:9e:07:90:37:d2:9e:0b:96:47:9c:4d:1c:08:
a5:37:24:2e:6d:d0:5b:9b:b9:af:e8:ef:41:9d:c9:ad:1f:e3:
ae:d8:96:7d:8b:3f:0f:be:79:41:71:6e:51:b0:08:22:0a:08:
4f:34:f4:40:2a:17:6d:59:c6:d3:3a:0e:47:9c:ff:f0:36:98:
35:4b:b7:9a:ac:04:d5:eb:da:a8:8c:89:4f:b9:46:08:e5:51:
ae:8c:5c:75:04:a4:8c:08:25:38:ce:95:6f:69:9e:f8:c5:48:
ba:52:34:7d:00:9f:7f:ee:88:09:a9:cb:9e:c3:8d:c0:b7:d3:
78:0b:20:ea:2c:03:e2:e1:47:c7:77:21:14:23:20:d9:9a:7a:
97:c9:e7:97:2e:9e:f8:b7:c7:d4:14:0e:50:05:53:b4:9a:4d:
4e:8b:d0:e8:5c:f8:ff:5c:db:66:14:85:30:09:81:99:87:79:
15:05:ca:d8:dc:ca:0f:dd:ea:e0:df:a1:59:c3:cc:3f:fe:02:
86:ee:23:e3:69:7b:d3:c0:0c:1b:eb:91:07:ce:d7:10:c7:60:
cb:6b:22:f0:2a:fd:a2:b5:da:55:d5:d0:13:26:c4:56:1e:39:
fe:90:96:59
-----BEGIN CERTIFICATE-----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Generated at Sat Mar 23 18:18:49 2024 by rpki-client on console-ams.rpki-client.org