Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/RUOHdd4X2LxxHvOCg0zXJQlVWPg.roa
File: RUOHdd4X2LxxHvOCg0zXJQlVWPg.roa (raw, json)
Hash identifier: x8NmJ8RI1XXvid/f2sWLwGLICAZWGnywINqvg4PxEy8=
Subject key identifier: 45:43:87:75:DE:17:D8:BC:71:1E:F3:82:83:4C:D7:25:09:55:58:F8
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 018572CCAF8454E55952E6B9E219DE5C23DF
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/RUOHdd4X2LxxHvOCg0zXJQlVWPg.roa
Signing time: Mon 02 Jan 2023 14:04:54 +0000
ROA not before: Mon 02 Jan 2023 14:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57459
IP address blocks: 193.222.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:af:84:54:e5:59:52:e6:b9:e2:19:de:5c:23:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: Jan 2 14:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45438775de17d8bc711ef382834cd725095558f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:c9:44:46:69:12:56:da:4a:34:22:c5:98:
9a:e3:78:ba:e9:9f:86:2e:9b:75:7f:6f:fb:f5:63:
13:51:43:5c:75:13:af:79:a8:ab:46:83:6c:86:31:
1d:00:1f:35:7f:72:73:94:8c:36:5b:50:3f:09:7f:
39:5a:b8:e4:34:cb:47:f8:5f:37:40:f3:2d:2d:db:
89:e0:cb:b1:c7:ee:0e:c6:df:77:5b:7b:08:7c:12:
6f:4f:48:08:b9:71:39:f9:9a:a6:d7:c0:c9:2f:c1:
e5:9e:93:d0:76:a6:4a:5c:43:d3:56:6b:f2:4c:91:
42:39:8c:2c:05:70:e5:f5:09:d2:f0:43:9a:c3:60:
90:bb:ee:2e:9d:71:78:fd:d1:c5:6a:c0:b8:6d:e8:
ac:93:fb:fc:9e:61:28:38:f0:c0:76:30:26:93:87:
ad:c0:4e:65:1e:1e:4a:6f:e6:28:94:61:bb:8a:3e:
f3:7a:0c:cb:5b:c7:b9:10:88:ec:61:64:70:6a:64:
b6:e5:73:44:59:21:ce:86:ba:7d:71:6d:72:1c:c6:
68:e7:73:4c:cf:b8:68:28:d0:ee:f2:d6:36:bf:57:
9c:09:57:ab:8f:51:4e:93:60:e1:57:4c:77:91:74:
9c:00:57:4f:56:64:87:df:ec:b7:29:00:a4:cb:29:
d3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:43:87:75:DE:17:D8:BC:71:1E:F3:82:83:4C:D7:25:09:55:58:F8
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/RUOHdd4X2LxxHvOCg0zXJQlVWPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.57.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:50:ef:0f:a9:f1:ce:dc:f7:30:d0:88:e5:75:d7:13:1b:75:
fb:3a:5f:be:42:a7:ae:38:15:f3:cd:1d:ba:77:bb:bb:fe:d9:
c2:f8:ca:15:a1:96:84:e0:00:ab:97:b1:d4:71:bd:1c:09:86:
09:31:2d:53:a3:a8:cd:7f:3c:6c:4f:02:3c:03:a3:6e:ef:41:
d5:19:3d:e6:c7:8c:1d:e4:f5:1f:0b:9d:ff:fe:ae:61:89:4b:
91:20:79:28:db:21:2c:6a:a8:47:1e:8c:f3:23:35:cb:30:e1:
7e:e3:b3:e6:e9:1b:a8:84:0c:60:5a:73:bb:f6:1b:af:3f:e3:
d6:79:f5:92:55:45:fb:18:6a:08:2a:15:54:c7:7f:9f:6f:a6:
e1:b1:52:36:02:fe:e1:b2:b6:41:eb:3b:e6:30:d6:ad:6e:84:
43:0e:3e:b9:31:1d:6e:10:a5:38:44:2e:f8:e4:25:df:3c:58:
d5:7a:de:a7:ba:87:1a:45:e3:aa:7b:2e:10:26:64:21:c5:ce:
89:68:ee:61:89:b8:11:d8:f9:61:ac:6a:73:f2:12:6a:f5:0f:
a5:86:ca:25:7b:56:97:9e:89:d2:89:ae:92:db:13:1e:d5:9a:
30:4b:a3:05:c9:7e:37:b2:49:8b:1e:bf:0d:9d:68:fe:da:0d:
4a:7d:61:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org