Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0df1c2-9ad3-41ca-a12e-9f79143e9c60/1/tcKw2PwfeuDVBwJhqinU-xwr2PU.roa
File: tcKw2PwfeuDVBwJhqinU-xwr2PU.roa (raw, json)
Hash identifier: ywivMwrKe4YYXCcivDeA1mEgjXQiZKwx6liM+dkUKcU=
Subject key identifier: B5:C2:B0:D8:FC:1F:7A:E0:D5:07:02:61:AA:29:D4:FB:1C:2B:D8:F5
Certificate issuer: /CN=26f55db66c509a9c0a6dfeb023770d5b2ac860b9
Certificate serial: 01856F4B62522941638D4022676603BE767F
Authority key identifier: 26:F5:5D:B6:6C:50:9A:9C:0A:6D:FE:B0:23:77:0D:5B:2A:C8:60:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvVdtmxQmpwKbf6wI3cNWyrIYLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0df1c2-9ad3-41ca-a12e-9f79143e9c60/1/tcKw2PwfeuDVBwJhqinU-xwr2PU.roa
Signing time: Sun 01 Jan 2023 21:44:49 +0000
ROA not before: Sun 01 Jan 2023 21:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 193.84.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Sep 2023 15:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:62:52:29:41:63:8d:40:22:67:66:03:be:76:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f55db66c509a9c0a6dfeb023770d5b2ac860b9
Validity
Not Before: Jan 1 21:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5c2b0d8fc1f7ae0d5070261aa29d4fb1c2bd8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:5c:50:8b:99:5d:b6:ec:d0:b7:35:8a:8b:
4f:85:57:ca:8c:40:75:9f:74:68:9f:0c:db:1c:ad:
f0:67:de:70:df:ed:1d:f4:04:c7:cb:c5:d8:23:7c:
a0:8c:47:8e:05:1c:c8:c7:60:f2:5a:75:52:86:f2:
d1:ec:bd:9e:c8:33:ce:93:d3:b1:87:82:74:0f:0a:
03:f2:bb:10:e1:05:b3:fd:79:2f:b5:0c:ae:7b:43:
9f:6e:08:79:d0:c4:3f:ae:e6:42:f4:b4:a2:80:84:
a9:b8:fe:38:2a:20:80:df:11:6e:f1:76:2d:2f:be:
3b:06:fc:2f:2c:c8:56:d1:73:9d:27:83:8f:a3:d0:
68:a7:c6:32:07:6d:a2:a9:d6:9f:10:1c:6f:1b:2a:
ad:a8:43:68:38:a0:90:d3:3b:db:ec:0e:27:e7:cb:
1e:75:e5:d7:f2:7e:1c:da:6f:08:b7:82:0f:89:27:
bd:9c:96:98:13:2c:0d:1d:e6:da:bf:a0:28:6d:74:
78:d2:e0:13:d8:76:9c:0e:68:b4:a7:1a:c2:b1:36:
87:e4:28:29:97:c1:18:4f:7b:2c:42:3f:b1:89:99:
88:76:cb:0c:6d:45:15:ca:46:64:15:35:f7:7e:3b:
53:be:5f:b2:a6:9d:d9:82:5f:78:24:27:64:fc:60:
a8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C2:B0:D8:FC:1F:7A:E0:D5:07:02:61:AA:29:D4:FB:1C:2B:D8:F5
X509v3 Authority Key Identifier:
keyid:26:F5:5D:B6:6C:50:9A:9C:0A:6D:FE:B0:23:77:0D:5B:2A:C8:60:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvVdtmxQmpwKbf6wI3cNWyrIYLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0df1c2-9ad3-41ca-a12e-9f79143e9c60/1/tcKw2PwfeuDVBwJhqinU-xwr2PU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0df1c2-9ad3-41ca-a12e-9f79143e9c60/1/JvVdtmxQmpwKbf6wI3cNWyrIYLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.71.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:68:40:5f:26:2a:5b:3e:50:e5:b9:e5:a2:c4:2a:c0:3d:33:
45:52:56:8f:7b:cf:12:94:55:5e:8b:f5:db:d9:a3:19:e0:a7:
0b:1c:a7:1a:2f:76:54:92:91:96:b3:67:ab:96:2b:66:36:03:
54:bc:d5:1f:bb:08:c6:46:c9:27:ce:c1:85:42:51:89:8d:4f:
78:4a:12:68:84:83:11:63:2f:2d:16:74:4d:0f:be:fb:c9:79:
eb:9a:ed:63:02:29:04:fe:3e:29:36:3d:f8:60:b8:31:6e:87:
6f:60:8f:88:85:a2:01:09:f8:97:c4:27:5c:63:f8:78:cb:da:
96:c6:01:3f:7d:fc:8c:e2:b5:73:aa:0a:eb:9d:0d:86:23:cd:
38:0e:35:3b:07:7b:96:36:26:a6:1e:af:79:13:98:2a:b2:be:
12:74:b3:ed:54:b6:cd:bb:df:c9:31:71:c7:f8:55:c9:ab:f9:
53:02:cd:6f:2e:5e:9d:93:58:37:59:2e:54:57:7c:d4:9b:d4:
ff:ee:9b:27:0c:09:5c:3a:e8:00:e4:40:b0:d5:d0:d3:a7:a7:
44:46:5f:a7:cd:79:b5:e3:e9:23:87:27:7b:51:f1:c7:11:5f:
df:49:3a:7e:ef:08:ff:17:e0:30:6c:39:f5:f7:47:c5:de:2a:
51:92:9f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:56 2024 by rpki-client on console-ams.rpki-client.org