Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/Q9v_0Ld4wLmWR23btX52XfpmyjQ.roa
File: Q9v_0Ld4wLmWR23btX52XfpmyjQ.roa (raw, json)
Hash identifier: EGx/7/QpRraiydPJ9YeAc4hJskvf8tpJl+sELcpP10w=
Subject key identifier: 43:DB:FF:D0:B7:78:C0:B9:96:47:6D:DB:B5:7E:76:5D:FA:66:CA:34
Certificate issuer: /CN=74d7da63929999603395877448ce50ac6e0213a9
Certificate serial: 01856D53DEB150F956EFF5617A7C73680F33
Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/Q9v_0Ld4wLmWR23btX52XfpmyjQ.roa
Signing time: Sun 01 Jan 2023 12:34:50 +0000
ROA not before: Sun 01 Jan 2023 12:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 193.16.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:de:b1:50:f9:56:ef:f5:61:7a:7c:73:68:0f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9
Validity
Not Before: Jan 1 12:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43dbffd0b778c0b996476ddbb57e765dfa66ca34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a8:92:53:d2:5a:c4:1d:24:1a:c9:e9:9f:46:
02:09:cf:18:8f:fe:77:11:7a:c2:61:e7:fe:4e:dd:
23:58:8d:f4:2e:99:7e:85:bc:0b:46:ef:d1:a4:49:
69:c2:57:d6:06:8b:a7:81:31:fe:96:f7:08:6f:b1:
90:e9:2e:76:01:f1:41:3f:58:d9:6c:20:01:94:82:
ba:7a:82:38:f7:5d:2b:fd:a8:16:bb:4d:39:ad:49:
d0:fd:dd:35:b2:90:e0:d3:6e:83:95:30:d1:80:9e:
b7:f3:64:73:05:8a:36:1e:67:11:9b:6d:04:4b:0d:
27:f1:f9:f2:53:9a:ed:95:a1:c2:25:cf:dc:48:f9:
03:ca:33:73:33:b3:04:52:44:3d:f1:fa:f1:4f:e3:
fa:fa:1f:b3:58:2a:10:c2:4b:22:e8:4a:1a:96:93:
39:1a:aa:b9:3c:ba:9c:65:47:85:32:e5:49:2e:35:
7b:cd:1c:53:f6:9c:e2:f5:e7:4e:3f:c9:00:d0:eb:
12:1d:2e:98:20:46:4c:a1:12:98:a1:2f:a8:85:aa:
df:43:f5:d6:eb:12:02:83:ac:5f:61:70:d9:e3:f5:
63:c1:18:60:b4:a3:6b:57:c5:bc:3a:66:45:36:d0:
0d:b8:67:71:4d:a9:ee:0d:09:de:8b:ce:7c:2d:63:
86:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DB:FF:D0:B7:78:C0:B9:96:47:6D:DB:B5:7E:76:5D:FA:66:CA:34
X509v3 Authority Key Identifier:
keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/Q9v_0Ld4wLmWR23btX52XfpmyjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.63.0/24
Signature Algorithm: sha256WithRSAEncryption
10:63:03:84:d6:c3:d0:f5:87:07:8c:63:3b:04:a4:01:08:ac:
6f:a9:e5:95:51:12:5e:10:8f:b3:32:51:db:7b:20:01:a4:e7:
5f:44:9b:1a:06:cf:81:d2:2c:5f:5d:fa:ea:3e:c8:9b:06:8d:
11:6a:30:09:8b:9e:f7:c4:44:71:6c:79:93:80:e7:7f:fb:de:
b6:9a:3f:08:cf:f4:ab:c3:50:aa:3b:55:a2:91:7f:a4:6a:0a:
39:ce:c6:04:bb:02:86:7a:73:f1:c8:4b:ee:1b:be:8a:d2:96:
76:01:67:f4:16:df:0c:10:e7:32:f1:55:96:e7:9e:81:8c:15:
0b:43:08:16:a8:b2:fd:ff:7d:61:e0:9b:e6:02:00:95:be:2e:
b5:18:58:5d:ca:d3:36:36:15:d0:0c:7c:de:42:79:cb:23:77:
cc:a9:8b:9e:b6:0b:e9:c6:79:c3:14:d0:b3:fc:7a:b6:c2:6b:
09:50:32:ae:9b:f2:70:80:0a:09:55:31:29:d4:c0:15:d3:b5:
07:59:5b:de:b6:53:53:51:f3:bc:c1:33:77:34:19:0a:77:4f:
e9:fe:a5:23:39:d4:6f:cc:1e:70:96:7c:f7:1c:be:4f:27:f2:
8e:b9:6f:60:bd:a3:14:96:41:48:74:96:f7:79:3b:d6:3e:07:
b4:40:f1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:05 2024 by rpki-client on console-fra.rpki-client.org