Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/aU7g61yNNkEPpGD59qVKlgssgxQ.roa
File: aU7g61yNNkEPpGD59qVKlgssgxQ.roa (raw, json)
Hash identifier: 1TAE8h9BUpD9k/Hz88zzrBhFoTrF4djZatquTi39EKQ=
Subject key identifier: 69:4E:E0:EB:5C:8D:36:41:0F:A4:60:F9:F6:A5:4A:96:0B:2C:83:14
Certificate issuer: /CN=190d5b0543bd85a8ecf969abb8503c9dead0df98
Certificate serial: 01856DCB0A09D0A68E1757120D06118014B2
Authority key identifier: 19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/aU7g61yNNkEPpGD59qVKlgssgxQ.roa
Signing time: Sun 01 Jan 2023 14:45:00 +0000
ROA not before: Sun 01 Jan 2023 14:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42264
IP address blocks: 193.33.24.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:cb:0a:09:d0:a6:8e:17:57:12:0d:06:11:80:14:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190d5b0543bd85a8ecf969abb8503c9dead0df98
Validity
Not Before: Jan 1 14:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=694ee0eb5c8d36410fa460f9f6a54a960b2c8314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:50:6d:45:94:e1:b5:34:24:dc:b4:ca:c9:6f:
40:08:0a:c5:11:78:75:64:63:a3:d8:f4:15:ea:11:
fe:eb:01:30:31:67:aa:f0:99:ac:c6:99:76:61:19:
08:55:b0:6f:16:1a:8e:49:2b:8b:25:90:12:38:65:
8f:ad:a0:35:c9:90:de:bd:de:2d:c5:3c:e5:05:d9:
64:fb:2e:08:a2:3c:d7:7c:53:76:18:6e:35:a7:dd:
18:15:2b:de:4e:27:19:0a:a0:fc:17:d7:a4:61:00:
c6:6f:6b:43:3e:b5:e1:fc:89:61:93:b0:2f:ea:7c:
e4:c0:4b:d6:17:c4:19:5a:00:44:74:3f:c2:ed:5c:
34:73:34:88:0b:7d:ae:89:82:63:cf:ee:17:ee:50:
71:d6:ea:cd:89:48:86:f1:06:de:31:81:5b:d1:7c:
47:32:e5:f5:25:13:bd:2e:4b:24:64:af:3e:44:95:
9f:00:58:2a:e8:14:78:5e:03:17:4c:7c:3b:17:f0:
75:3c:c4:28:a6:98:ca:d1:41:59:cc:19:9c:81:91:
fc:01:2a:22:5c:f5:59:02:bc:00:cb:c8:30:41:9c:
ef:30:ed:21:1c:5d:f1:0b:2b:d6:c4:9e:b4:d8:60:
bd:36:93:ac:e6:54:9d:78:3e:eb:ec:1f:b6:8d:3a:
4b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4E:E0:EB:5C:8D:36:41:0F:A4:60:F9:F6:A5:4A:96:0B:2C:83:14
X509v3 Authority Key Identifier:
keyid:19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/aU7g61yNNkEPpGD59qVKlgssgxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.24.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:5b:ec:15:de:84:cc:52:0a:45:39:49:24:a3:5a:ca:91:e5:
ec:3e:34:1a:26:50:59:6e:7f:28:12:18:0b:ba:0a:2e:f4:5f:
1c:ae:c8:ab:56:0f:c1:b1:d0:bd:b8:9d:2e:d0:14:21:86:a2:
a2:98:22:2d:5a:07:a7:f5:0c:d1:06:5e:22:8f:77:af:5b:cb:
f0:d9:50:19:5a:40:a2:4a:bc:ae:1f:5e:dc:57:6a:c3:11:ec:
fc:13:2f:98:84:ad:6a:de:78:22:61:3e:ac:10:15:d1:b3:3b:
0e:a5:08:9a:b3:38:dc:93:a1:6b:a6:1e:3c:bc:02:46:c1:31:
90:6b:d7:fc:a9:7e:08:ea:86:5e:46:8c:b5:78:a8:92:24:7c:
f3:b0:25:b6:db:50:ba:3f:f8:82:4f:39:41:a9:a8:36:46:2f:
97:58:25:ac:66:03:f8:72:1a:2b:e7:1e:ea:d7:49:33:c8:9c:
ea:fd:02:71:81:58:ce:e1:93:79:09:a1:37:77:01:2b:8e:9a:
95:db:d3:34:98:20:eb:91:76:97:96:e5:fd:21:f9:01:27:25:
37:91:2e:a4:ea:fa:44:df:c1:39:4d:ba:95:fc:3a:91:d5:e2:
12:78:fa:c3:03:63:20:ba:6b:19:7f:a7:13:b8:43:37:72:9c:
d0:8e:f8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:49 2024 by rpki-client on console-fra.rpki-client.org