Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/IBnH1FatDtw-rpmMLKSjwFK4nGQ.roa
File: IBnH1FatDtw-rpmMLKSjwFK4nGQ.roa (raw, json)
Hash identifier: /RcoDYpVSSAEKa0GQOtZaSgN7A9fQWJMx+/UT6gIv2Q=
Subject key identifier: 20:19:C7:D4:56:AD:0E:DC:3E:AE:99:8C:2C:A4:A3:C0:52:B8:9C:64
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCB05731ED69739005D955D2B867F1A
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/IBnH1FatDtw-rpmMLKSjwFK4nGQ.roa
Signing time: Sun 01 Jan 2023 10:05:22 +0000
ROA not before: Sun 01 Jan 2023 10:05:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203038
IP address blocks: 193.182.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:05:73:1e:d6:97:39:00:5d:95:5d:2b:86:7f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2019c7d456ad0edc3eae998c2ca4a3c052b89c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a0:a8:0b:f1:8f:60:73:6a:d8:4a:35:2d:fe:
3f:b4:c9:f4:d9:65:e2:83:9c:a3:31:18:86:eb:8a:
ba:9a:82:85:8f:b9:76:37:a5:3e:cf:95:ed:75:bd:
e4:f4:4b:9a:2e:41:99:a9:f6:7e:d1:a1:3b:e8:80:
58:35:c2:8a:6c:a6:ab:df:ad:f7:3c:49:db:af:eb:
b2:44:7c:2d:3f:df:10:bc:d5:b7:16:41:1c:73:bf:
3e:fd:76:5a:09:aa:ce:a9:d3:05:a3:15:ce:ab:8b:
9a:ba:df:4a:85:18:fe:34:89:c8:d4:a7:c7:df:a0:
05:5b:2e:9d:a6:f8:20:13:47:cd:6b:84:c6:f5:36:
2e:05:ae:09:29:25:ab:6a:6b:32:16:be:19:b6:c6:
44:15:a3:6e:4b:c7:cc:df:15:1b:0a:73:21:8f:e1:
3f:14:a0:e2:12:ad:e6:ba:0f:42:19:31:b6:2e:89:
f7:7e:20:29:48:c4:eb:12:7b:b2:a6:e2:1e:61:ee:
cb:5b:b1:26:70:fd:4c:73:2a:3b:bd:fd:c1:fa:83:
63:27:dd:6f:4b:ce:3b:44:06:78:4a:96:b9:dc:a0:
89:e5:1f:9c:7d:6c:68:82:51:63:f7:1e:53:28:38:
21:58:14:d1:41:c2:f9:40:9f:40:e3:fc:2b:7d:fe:
b2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:19:C7:D4:56:AD:0E:DC:3E:AE:99:8C:2C:A4:A3:C0:52:B8:9C:64
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/IBnH1FatDtw-rpmMLKSjwFK4nGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.182.61.0/24
Signature Algorithm: sha256WithRSAEncryption
03:6f:c7:c4:53:98:ae:e8:11:16:dc:e1:5a:43:d9:23:38:6d:
6d:ca:ff:ec:71:70:ef:24:99:9b:f4:f7:fd:f8:54:eb:58:10:
e7:81:1d:b6:3b:71:db:1c:11:a2:ff:a8:a2:6c:a0:90:1c:2f:
d9:b9:1b:6e:c4:46:6b:22:c5:46:c5:7f:61:57:aa:50:ed:f2:
eb:6d:b2:fb:e0:df:88:ce:2e:39:d3:38:e8:62:e7:eb:67:77:
16:ed:59:7e:9b:bb:e8:f6:a6:bc:64:7d:e2:07:a3:f0:49:0d:
37:ca:2f:03:a6:5a:9b:65:0c:7d:50:7b:71:d4:48:5a:6e:e9:
0f:c9:b5:6a:99:d9:af:0a:cb:70:7c:12:d7:62:74:48:05:78:
3d:e5:70:e6:1e:97:c7:c7:13:43:fb:a4:bc:0a:b4:44:dc:de:
9b:0f:54:4d:46:83:07:ef:7d:65:60:26:51:57:e0:10:74:71:
3d:4c:58:fa:73:5f:36:c6:e1:c3:32:19:c5:8d:63:bd:b1:4e:
a1:85:14:15:70:74:35:37:7e:43:35:1b:df:c0:8a:c2:72:2d:
2d:5d:b8:7c:ea:fd:04:c3:62:4f:c1:a0:27:a0:45:e0:7e:11:
f3:81:4d:c8:99:9c:73:4d:c3:1f:13:3a:ad:06:20:2f:d9:03:
d7:62:70:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:20 2024 by rpki-client on console-ams.rpki-client.org