Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/4SJ9Ozq0PZPqOsiOaWjStrrWCvo.roa
File: 4SJ9Ozq0PZPqOsiOaWjStrrWCvo.roa (raw, json)
Hash identifier: biB92CfVPbXI6TMTaUgbpiVaWAMr+oJQf3mC8FXlIIY=
Subject key identifier: E1:22:7D:3B:3A:B4:3D:93:EA:3A:C8:8E:69:68:D2:B6:BA:D6:0A:FA
Certificate issuer: /CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f
Certificate serial: 01856EEFEF4BA916AF812D3AD275B89C2524
Authority key identifier: 02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/4SJ9Ozq0PZPqOsiOaWjStrrWCvo.roa
Signing time: Sun 01 Jan 2023 20:04:56 +0000
ROA not before: Sun 01 Jan 2023 20:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137
IP address blocks: 193.43.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:ef:4b:a9:16:af:81:2d:3a:d2:75:b8:9c:25:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f
Validity
Not Before: Jan 1 20:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1227d3b3ab43d93ea3ac88e6968d2b6bad60afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8f:6d:14:48:98:39:1f:ae:a6:5b:be:08:00:
04:14:d9:6b:ac:7b:43:89:52:12:12:64:4e:91:0e:
e1:a9:47:83:48:dc:f2:21:e6:fb:30:05:2a:9e:68:
b0:55:98:13:8f:bb:2e:f5:dd:1e:61:66:c0:07:98:
8e:3e:2e:0e:a0:44:9c:7f:1b:39:0a:77:1e:59:00:
61:a1:4e:ce:16:00:29:c3:eb:d7:a4:c0:76:07:91:
09:ae:13:60:59:28:07:ee:57:60:39:00:b5:23:c7:
c3:68:b3:14:3d:8a:18:b9:dd:86:a4:86:8f:bf:cb:
e4:39:d2:0e:0b:77:8e:c2:2c:54:74:3b:2e:72:dc:
26:b5:fc:32:b0:3d:8c:ab:1c:b1:55:89:f4:c6:bf:
aa:9c:dd:ad:a5:d2:57:cb:30:ef:5f:c1:d7:85:ad:
65:f8:ea:74:ff:ee:9b:39:5f:23:57:2a:f8:e6:c0:
5e:10:ac:a0:02:84:aa:1a:d9:a4:a3:e3:f6:2a:db:
7f:78:95:d5:89:a8:0a:fa:50:a7:f0:8a:7c:69:e6:
f4:cd:f1:16:8b:ca:56:5a:08:92:cd:d1:34:5a:05:
f1:78:99:03:ea:5c:b3:86:4b:54:45:f5:0f:22:c2:
f3:2a:58:57:18:65:5a:d7:55:ea:87:b0:96:78:2b:
37:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:22:7D:3B:3A:B4:3D:93:EA:3A:C8:8E:69:68:D2:B6:BA:D6:0A:FA
X509v3 Authority Key Identifier:
keyid:02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/4SJ9Ozq0PZPqOsiOaWjStrrWCvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.109.0/24
Signature Algorithm: sha256WithRSAEncryption
38:f2:ab:af:21:56:08:56:52:15:27:e2:72:6d:70:c5:5b:15:
8f:04:b5:9f:59:83:b2:2a:13:2e:e1:5b:e0:91:f3:a4:6f:99:
3d:2b:e7:cd:c3:a6:dd:62:d3:39:55:4a:65:c5:45:da:61:70:
0c:f5:e6:5b:74:33:81:d9:21:39:c0:98:f9:43:e5:7a:67:71:
c1:5b:0b:8d:6b:0f:ba:ff:69:ac:10:ff:e0:cc:52:7e:77:d7:
35:25:66:20:93:09:2b:b9:04:cc:b8:00:73:8e:50:b4:c7:94:
91:03:c5:ef:ff:30:8b:3a:fa:28:42:51:74:8a:1e:ca:65:2f:
9d:1c:13:dc:cf:cb:d6:82:4a:8c:9b:b7:30:19:ad:c9:8b:57:
ed:95:94:1b:db:b3:af:23:60:da:67:3d:90:c0:f5:cd:fe:c3:
7e:7d:ea:e5:de:a8:69:27:08:09:30:88:df:5e:df:9e:c4:98:
d0:94:0a:e3:6f:e0:bd:f8:6b:a4:56:e8:89:29:a6:32:7b:9d:
bd:37:df:d9:f4:72:33:79:83:f6:48:d4:ee:62:46:5a:59:87:
7f:2f:6a:cc:0b:95:2c:0e:63:a1:e8:46:b1:66:2f:4f:83:38:
e5:51:ef:79:b7:e7:04:e0:24:dd:e6:6c:8d:c8:b0:af:23:cf:
33:c8:9f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:36:00 2024 by rpki-client on console-ams.rpki-client.org