Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c1d4a2-7c4e-4adc-8f65-b148d4f066ce/1/1vYEdDGACaJXwO1edXq5z6y1ito.roa
File: 1vYEdDGACaJXwO1edXq5z6y1ito.roa (raw, json)
Hash identifier: 01aXWtRrhmCXmKoIZta1smYxlpMPK4Kz7P9zEyXAWDc=
Subject key identifier: D6:F6:04:74:31:80:09:A2:57:C0:ED:5E:75:7A:B9:CF:AC:B5:8A:DA
Certificate issuer: /CN=91189e6edf53e40672c9b5f1f3519728291ec2ee
Certificate serial: 01856DB885F677336F1C53BF90A41F339288
Authority key identifier: 91:18:9E:6E:DF:53:E4:06:72:C9:B5:F1:F3:51:97:28:29:1E:C2:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRiebt9T5AZyybXx81GXKCkewu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c1d4a2-7c4e-4adc-8f65-b148d4f066ce/1/1vYEdDGACaJXwO1edXq5z6y1ito.roa
Signing time: Sun 01 Jan 2023 14:24:47 +0000
ROA not before: Sun 01 Jan 2023 14:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 193.178.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Oct 2023 08:49:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:b8:85:f6:77:33:6f:1c:53:bf:90:a4:1f:33:92:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91189e6edf53e40672c9b5f1f3519728291ec2ee
Validity
Not Before: Jan 1 14:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6f60474318009a257c0ed5e757ab9cfacb58ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d4:f8:a8:75:2d:34:0d:be:8b:36:5e:1e:7c:
89:1a:0b:e0:e1:2a:c9:c7:5d:90:43:ca:44:da:ec:
54:fc:09:f8:d2:96:41:6f:5a:d5:16:e8:b9:4f:ee:
0f:dc:8c:58:d0:34:30:5b:17:65:ce:80:e8:b6:2b:
32:89:37:1b:99:f6:e0:9c:39:53:3d:04:5c:af:8e:
fb:f5:95:60:87:2a:57:f0:89:22:84:99:3c:8d:dd:
76:48:57:4f:ce:2a:c5:58:ed:91:f7:15:b1:89:24:
38:36:40:d0:e8:9b:1f:b5:f6:18:cb:07:36:67:92:
78:72:f7:0d:d7:ee:39:f7:b1:a8:2a:2c:e0:55:2b:
aa:84:29:65:86:a3:b3:39:98:60:c0:fc:6e:8f:7f:
84:f4:0b:00:da:2c:b8:5e:82:8a:a8:6f:35:e4:fc:
30:23:da:05:3c:1b:3d:2f:3e:1f:93:1a:af:39:0d:
4d:7e:a1:5e:50:89:dd:1f:05:4d:84:2a:aa:3e:64:
0c:59:63:1f:51:ea:d9:c4:3e:b6:e6:f6:f4:00:40:
24:4d:19:e8:b4:d2:d3:a3:27:a1:86:f1:d4:f4:df:
75:fc:aa:d3:52:9b:73:8c:63:97:54:b9:9b:6b:c2:
93:7d:61:38:9f:b1:9f:08:23:f6:08:1d:78:4d:29:
ac:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F6:04:74:31:80:09:A2:57:C0:ED:5E:75:7A:B9:CF:AC:B5:8A:DA
X509v3 Authority Key Identifier:
keyid:91:18:9E:6E:DF:53:E4:06:72:C9:B5:F1:F3:51:97:28:29:1E:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRiebt9T5AZyybXx81GXKCkewu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c1d4a2-7c4e-4adc-8f65-b148d4f066ce/1/1vYEdDGACaJXwO1edXq5z6y1ito.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c1d4a2-7c4e-4adc-8f65-b148d4f066ce/1/kRiebt9T5AZyybXx81GXKCkewu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.134.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a0:90:ca:0a:b9:10:7e:f9:10:bc:fb:0d:ee:33:6f:ce:59:
12:c6:ae:7e:2f:35:2d:ea:da:8b:8f:ea:84:34:14:f3:34:67:
30:16:97:cc:8a:45:66:20:08:c8:42:45:cd:77:e4:62:1e:80:
10:57:20:0f:53:ee:26:5d:60:23:78:2f:9f:4b:7a:c7:7e:6a:
23:7f:70:b6:57:41:24:e3:3f:57:a7:dd:78:a5:dd:96:8e:e7:
79:d8:4d:f1:90:7c:b4:e2:0e:3d:28:08:e3:00:87:16:d6:c5:
f1:c7:bb:ce:a9:0a:f8:cd:f3:f0:0b:cb:cc:3c:fa:27:b2:61:
da:8a:5f:eb:75:d5:6f:ee:f8:43:52:81:8b:76:c9:b4:78:89:
10:5d:a9:51:85:1a:d4:09:5b:49:a5:56:76:02:a4:93:18:cc:
a2:a2:fd:c9:ad:f9:3c:6a:93:4b:90:34:1c:ca:60:2a:a3:f6:
4e:29:fe:f0:b8:a6:ff:a6:76:d1:8c:c5:05:aa:28:6b:77:36:
03:0e:72:70:43:12:dc:c7:b7:97:36:ff:75:cd:c8:c3:9e:bc:
3d:fe:1b:b3:15:8c:1b:2f:8f:22:a5:40:b5:36:61:f1:4d:97:
41:4d:01:ab:f5:fc:71:b9:6c:04:5a:f3:ae:f0:25:96:5a:68:
70:f1:26:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:43 2024 by rpki-client on console-fra.rpki-client.org