Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/T89ZcvAQKD5q290Iax9UimY5Wzw.roa
File: T89ZcvAQKD5q290Iax9UimY5Wzw.roa (raw, json)
Hash identifier: abI9rwD0ZR403/5p2nniCcdooXBfajB4k4H5yVJrGck=
Subject key identifier: 4F:CF:59:72:F0:10:28:3E:6A:DB:DD:08:6B:1F:54:8A:66:39:5B:3C
Certificate issuer: /CN=12303a6462dba29517de0ded87397fa9e5c4052e
Certificate serial: 01856DB878CCC15D55758D58A01C2B8AE443
Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/T89ZcvAQKD5q290Iax9UimY5Wzw.roa
Signing time: Sun 01 Jan 2023 14:24:43 +0000
ROA not before: Sun 01 Jan 2023 14:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 193.39.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:b8:78:cc:c1:5d:55:75:8d:58:a0:1c:2b:8a:e4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e
Validity
Not Before: Jan 1 14:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fcf5972f010283e6adbdd086b1f548a66395b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b4:4b:7d:46:19:8e:01:c8:a9:2c:5b:11:a0:
44:ab:60:f6:e4:fb:bf:55:be:23:79:2d:78:74:92:
e9:50:54:80:1f:96:64:a4:63:96:09:25:bd:96:cf:
e8:68:74:1f:82:57:ff:26:5b:80:5d:6b:6f:15:79:
2a:28:03:fd:11:92:09:24:1a:f5:47:d5:3e:bf:3c:
92:4b:8a:75:f0:4d:02:d1:5a:8d:d2:3a:a1:54:d0:
85:14:0c:cd:5b:2d:03:b9:3c:0e:76:28:6f:3a:80:
a2:db:61:a2:e8:1f:7d:ee:d8:1f:88:9a:a4:91:25:
cd:82:1f:98:33:6c:60:af:fe:af:71:59:13:1f:2a:
90:39:be:24:0a:e2:34:81:87:82:6f:06:ce:e3:ab:
18:6c:ce:ed:26:bf:54:6b:9a:48:62:de:96:bb:6c:
12:2f:e0:db:0e:6f:cb:80:d8:66:54:e7:57:34:fc:
5b:fd:a4:89:29:ed:36:25:94:c1:64:05:f6:aa:3e:
cb:29:df:f7:61:7d:ca:51:31:c6:8a:93:0b:d3:13:
a9:e6:8c:2a:9b:81:19:89:dc:f8:1d:1b:b0:01:07:
fd:51:40:1a:43:82:3c:eb:6b:e1:9a:80:fc:4f:f8:
73:9e:a8:a1:8d:b8:03:24:0e:6f:c6:52:7e:5c:6f:
a1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CF:59:72:F0:10:28:3E:6A:DB:DD:08:6B:1F:54:8A:66:39:5B:3C
X509v3 Authority Key Identifier:
keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/T89ZcvAQKD5q290Iax9UimY5Wzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.114.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:15:64:39:0e:e4:8a:01:ca:a1:3a:50:da:55:a6:2a:cc:3c:
b0:cc:dd:7b:0b:c3:19:37:02:79:3a:c3:69:6b:15:1b:7c:5a:
0e:1e:f6:18:72:f4:4a:0f:59:44:df:61:84:ec:ca:c0:b3:62:
ba:73:97:88:bb:67:1b:45:92:58:39:47:51:50:20:fa:94:81:
fa:bc:1b:ea:80:dc:ca:cc:b6:db:38:af:db:b7:6b:19:57:00:
37:c1:e2:bb:1b:40:fb:79:58:38:be:06:0a:c1:99:d3:77:c3:
82:ad:7b:50:40:8d:27:d8:31:3b:42:3f:97:00:11:66:1e:0d:
a0:86:3c:fa:a9:a0:d7:d5:67:83:5f:f5:f8:50:6b:d3:72:7a:
c9:58:a5:32:06:28:21:08:66:b5:80:88:d1:f2:77:e0:db:e3:
06:be:d3:fb:d6:4b:9f:e2:06:5a:60:7f:76:3c:ed:56:a2:be:
da:53:43:58:9d:74:ee:a5:fb:72:70:6a:75:a8:55:e1:cd:2c:
7e:1b:b2:48:41:76:da:c1:f7:6a:08:d1:46:3c:3f:24:61:f0:
46:39:f2:aa:f9:ec:1b:19:fe:42:5d:fc:af:64:99:e5:4f:39:
aa:9c:0e:ba:b3:fe:1d:ff:a8:f4:e4:e0:45:be:3b:c4:cc:48:
52:c3:90:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:22 2024 by rpki-client on console-fra.rpki-client.org