Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/laPSOQmXY3xgBwBTFhoL44uukyw.roa
File: laPSOQmXY3xgBwBTFhoL44uukyw.roa (raw, json)
Hash identifier: Q3hL3XQ+sTF4GTRNtyc2L/3ay1Q753kX3hhH5tIPqOw=
Subject key identifier: 95:A3:D2:39:09:97:63:7C:60:07:00:53:16:1A:0B:E3:8B:AE:93:2C
Certificate issuer: /CN=c8bebcfe82b2627ea8de8161cb927b245b058e69
Certificate serial: 018570C2C2907196AB0C2C50D4092D151F66
Authority key identifier: C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/laPSOQmXY3xgBwBTFhoL44uukyw.roa
Signing time: Mon 02 Jan 2023 04:34:50 +0000
ROA not before: Mon 02 Jan 2023 04:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39222
IP address blocks: 193.30.245.0/24 maxlen: 24
194.165.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:c2:90:71:96:ab:0c:2c:50:d4:09:2d:15:1f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8bebcfe82b2627ea8de8161cb927b245b058e69
Validity
Not Before: Jan 2 04:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95a3d2390997637c60070053161a0be38bae932c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:e2:9c:3c:1f:78:d6:f8:54:48:b5:e1:d8:
83:60:ca:17:f4:fc:a8:44:a2:2c:29:45:18:f8:cf:
0c:02:f7:5e:28:f5:e1:f6:bc:4d:7a:78:79:f5:5b:
4b:ec:6e:d8:28:5a:47:a2:2a:c6:66:b1:f0:fe:99:
8f:e8:80:8e:dc:48:e1:f3:d2:c0:b1:cb:70:c6:16:
33:a1:1d:82:63:3f:a9:70:a9:71:fc:c0:1c:10:0d:
c1:3d:03:94:e8:16:5f:2b:1b:1d:bb:e6:49:26:91:
7a:aa:31:41:4b:7d:f6:28:20:b4:b2:e0:78:83:40:
c7:a0:07:87:ed:15:20:54:cd:d5:2a:e7:5d:e7:30:
8a:53:dd:98:b5:2d:63:a1:85:74:84:a5:e1:03:82:
a1:5d:b1:6e:6b:2a:57:6d:3e:03:d8:ef:79:69:2c:
d5:e3:10:58:ae:7a:f7:78:82:ce:00:61:f9:1c:ee:
e8:63:78:69:ca:d1:b1:f8:e1:2d:bf:3d:d1:d3:9b:
b1:7a:52:b7:cc:c0:2e:5d:25:f6:e1:ec:38:1e:32:
da:a8:da:8d:74:24:d0:45:02:14:27:6f:fd:db:ef:
25:66:86:3e:44:33:62:83:45:b4:6d:9e:43:4d:20:
ed:65:ed:07:75:83:3e:47:7b:1c:ad:ad:64:ab:88:
98:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A3:D2:39:09:97:63:7C:60:07:00:53:16:1A:0B:E3:8B:AE:93:2C
X509v3 Authority Key Identifier:
keyid:C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/laPSOQmXY3xgBwBTFhoL44uukyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.245.0/24
194.165.46.0/24
Signature Algorithm: sha256WithRSAEncryption
10:cc:45:98:0e:6e:39:d0:91:3d:c2:dd:5e:2c:f0:13:c8:7f:
e8:dc:dc:4c:bd:65:e7:54:4f:48:e7:d0:a6:66:56:bc:08:99:
03:0d:88:de:4b:ef:86:7c:2d:9a:ba:d8:4b:8f:ac:a3:f1:a4:
e5:9a:ea:59:0c:56:37:ed:f9:10:7a:bf:cc:91:75:0f:35:90:
7a:b7:6a:61:3b:f6:25:a3:96:c9:c4:0b:ff:c9:6c:4d:c4:9c:
27:f6:69:01:01:05:07:80:64:3b:f8:de:74:dc:9b:fd:6d:5a:
36:f5:23:d4:a9:53:f9:73:86:22:37:5c:52:51:40:62:bb:b8:
f6:3a:b3:f5:19:93:68:e5:42:b1:51:23:61:27:4a:cd:df:db:
53:bc:20:8e:98:71:f7:72:88:a8:b2:0b:71:63:4c:4d:11:b0:
ee:ab:87:5d:7f:b5:b8:c2:b6:32:0a:22:1f:13:53:47:8c:fe:
71:6c:c2:49:43:97:ae:68:c7:70:5e:34:ca:40:0f:03:6b:63:
14:e8:c1:5d:0e:3e:5e:5f:40:94:c0:1b:86:0c:36:8f:39:25:
e5:d5:f4:73:62:ed:f6:35:fb:de:f4:af:d8:b9:46:9d:3e:3f:
44:98:6a:aa:b4:45:68:76:fc:f4:5c:d0:67:32:de:ad:6c:47:
a5:3a:98:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:44 2024 by rpki-client on console-ams.rpki-client.org