Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/hSrZj-1RDQTjvzLiCeFXNrdiHPE.roa
File: hSrZj-1RDQTjvzLiCeFXNrdiHPE.roa (raw, json)
Hash identifier: KVuBAZmEbXewhFCeZNeIc3czT1+I2kcd3XVp4GeH5pg=
Subject key identifier: 85:2A:D9:8F:ED:51:0D:04:E3:BF:32:E2:09:E1:57:36:B7:62:1C:F1
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018A3C57765429C861C770F1497B357EA0A5
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/hSrZj-1RDQTjvzLiCeFXNrdiHPE.roa
Signing time: Mon 28 Aug 2023 13:31:19 +0000
ROA not before: Mon 28 Aug 2023 13:31:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47728
IP address blocks: 193.238.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Sep 2023 10:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3c:57:76:54:29:c8:61:c7:70:f1:49:7b:35:7e:a0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Aug 28 13:31:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=852ad98fed510d04e3bf32e209e15736b7621cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:e3:8e:11:24:7d:ac:94:0b:db:14:a9:2e:
c5:c8:8d:2e:15:fc:73:eb:fe:47:1d:1e:0a:56:42:
9b:c8:3d:f8:5e:39:ea:4f:89:42:ec:af:16:aa:fe:
04:5e:2e:23:1f:58:77:a2:ea:81:7d:1e:83:c8:36:
bf:60:32:e8:6a:f5:e9:4b:ae:d1:29:98:86:d2:c4:
7b:2a:88:b1:d2:cd:b5:d0:0a:04:b9:8f:9a:f9:e8:
31:3f:a6:38:a5:1f:a9:af:0f:83:08:43:2a:73:6b:
a5:3c:33:59:6b:a4:03:87:f1:16:fe:ee:fd:a4:8a:
32:13:76:b0:5e:99:77:0a:72:88:d8:27:a2:a7:62:
85:82:11:9f:a8:19:c1:f0:c7:be:0b:e6:ec:f8:8d:
a7:c1:4b:3c:ca:88:9a:61:c9:63:1a:20:e0:93:a3:
c3:56:25:3f:8c:ab:a5:21:ec:74:42:8d:52:aa:ac:
e7:df:72:82:49:a7:e7:8b:47:94:b2:11:ed:3d:a7:
82:6a:65:ea:7e:fc:5e:47:e7:a4:2c:3d:9d:2f:22:
47:23:66:e4:d9:6c:38:74:34:e1:3c:bf:66:73:5b:
b8:ac:5c:c9:1c:5c:7d:d0:32:56:ab:1c:fe:74:31:
f3:e7:61:b3:63:b6:33:9d:a8:96:d5:7e:41:05:ff:
4a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2A:D9:8F:ED:51:0D:04:E3:BF:32:E2:09:E1:57:36:B7:62:1C:F1
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/hSrZj-1RDQTjvzLiCeFXNrdiHPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.132.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:1e:5a:f2:a7:dd:2d:ff:86:04:11:15:bc:6d:35:a1:da:bc:
07:43:9f:aa:7b:f0:cc:d2:83:b9:ea:1b:b0:25:dc:2a:b4:dc:
02:f3:c2:0b:97:0f:a5:52:1e:6c:e6:b8:71:18:13:c8:69:60:
3e:71:dc:80:f7:d8:5d:c8:a6:b9:25:4b:c7:08:ce:a4:9e:f3:
a7:c4:3f:bc:1b:77:55:e4:3b:0c:36:ce:75:4a:d4:17:f1:c6:
d6:72:96:a6:61:3d:4a:64:fa:2e:b5:a3:20:0e:23:cd:d9:d7:
3e:f1:49:d7:60:cb:44:c3:56:ae:1e:0f:95:11:6b:f8:c9:87:
c6:0f:3d:f5:9c:a4:05:20:7c:78:50:d5:e9:27:b1:c6:44:95:
90:39:1f:f7:63:9d:ea:75:a5:44:65:9b:cb:3f:f9:ff:a2:28:
12:74:dc:d5:f4:d5:e8:3e:5a:e2:3d:1d:c7:11:01:e5:53:d2:
b0:b1:51:48:9a:ef:dd:8d:7e:30:90:ec:1f:9f:34:e9:c6:3e:
51:51:1a:a4:ba:f8:ac:13:12:f4:32:91:5a:1b:74:30:82:4d:
ba:dc:04:37:79:56:a3:1f:be:96:98:e0:cf:7d:9c:97:f2:2e:
e9:c5:e3:73:57:2a:52:d9:63:33:9f:3f:7d:f6:05:99:01:6b:
c0:8a:17:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:38 2024 by rpki-client on console-ams.rpki-client.org