Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/0MwgowBZhCxBn8QrAxhKlnNdS2k.roa
File: 0MwgowBZhCxBn8QrAxhKlnNdS2k.roa (raw, json)
Hash identifier: IF2Zak9/JyMos5XXgNVHGTRQGF9hKuSi558yz7pv0w8=
Subject key identifier: D0:CC:20:A3:00:59:84:2C:41:9F:C4:2B:03:18:4A:96:73:5D:4B:69
Certificate issuer: /CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Certificate serial: 018570673A5646F63719EEF74EC773E320EE
Authority key identifier: 64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/0MwgowBZhCxBn8QrAxhKlnNdS2k.roa
Signing time: Mon 02 Jan 2023 02:54:51 +0000
ROA not before: Mon 02 Jan 2023 02:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202049
IP address blocks: 193.162.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:3a:56:46:f6:37:19:ee:f7:4e:c7:73:e3:20:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Validity
Not Before: Jan 2 02:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0cc20a30059842c419fc42b03184a96735d4b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:08:76:ba:02:07:2f:b5:7d:55:52:86:cc:f7:
a3:ab:bb:0a:58:25:ed:ee:9d:4a:ec:4d:57:d4:80:
e7:45:fc:5c:b6:af:3b:23:41:a9:2a:49:de:e5:8e:
82:ca:ce:49:4c:05:a4:f6:b1:6e:36:cf:42:cd:8f:
8c:e6:ae:59:02:08:9e:67:4c:b6:5a:99:59:b4:cb:
ca:a1:e6:7e:4d:9e:39:be:34:56:29:27:9b:19:16:
d2:7a:e1:f9:aa:0a:89:23:0d:28:ec:4a:9f:03:c9:
c1:b0:19:45:2a:4e:1e:0e:d4:10:ae:00:a2:29:31:
3c:4d:84:1b:a2:69:ad:88:0d:12:98:7d:77:65:06:
56:38:cc:07:16:b1:3a:8f:bc:cb:44:cb:47:88:45:
a3:a6:a7:75:3b:f2:84:d3:0c:b4:98:38:84:81:0b:
41:3d:23:e3:6b:d7:90:c1:c6:e6:2f:9e:0c:2e:94:
5c:fe:e1:9f:dd:b6:da:c8:08:0d:b4:81:15:d5:71:
f8:cc:02:ac:02:e2:aa:cf:7b:16:81:79:da:fb:b9:
c2:e3:9e:0a:58:09:e9:a7:9f:54:93:4b:a6:17:cc:
e9:bf:4d:b5:34:88:a9:71:98:4b:78:32:9e:d7:6d:
1e:ba:64:38:dc:6c:99:ea:3f:fd:ce:e9:18:f7:fd:
3a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CC:20:A3:00:59:84:2C:41:9F:C4:2B:03:18:4A:96:73:5D:4B:69
X509v3 Authority Key Identifier:
keyid:64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/0MwgowBZhCxBn8QrAxhKlnNdS2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.134.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:d7:99:7c:b9:65:dc:43:12:87:e6:11:9d:ca:df:fe:f4:4f:
97:84:5b:84:89:95:00:fb:63:63:e6:5b:2e:a5:e0:4f:5d:35:
10:fa:c8:07:6f:e5:6a:b8:27:eb:a0:ea:af:f8:b3:ab:48:e8:
ca:d8:82:93:e1:a2:3d:78:19:1f:bf:de:a4:2f:70:8a:cb:8c:
0e:32:22:18:3f:d7:ab:bc:41:1c:6f:e5:1d:7c:5c:a0:17:70:
cf:3e:6d:32:77:9c:6d:b4:e5:16:d5:62:88:3e:9a:6f:a8:20:
0f:91:d1:80:19:c1:74:67:e2:7b:29:f4:cb:c5:54:89:34:23:
51:cb:2b:6d:98:19:95:da:28:8c:4d:57:a2:a6:40:ab:17:ca:
4c:70:bc:d4:22:53:d0:c8:0b:5d:87:e9:f1:26:23:a4:8a:e4:
c3:b4:0a:be:82:d4:39:fd:df:92:3e:5d:63:e9:41:ab:ea:fd:
61:97:cf:32:b2:93:ec:45:b7:d9:60:b9:fc:b5:3d:74:11:0e:
52:21:a8:6a:e3:7d:2e:83:a2:fe:f7:bd:ca:74:23:69:2e:32:
bb:2f:59:c6:97:37:79:5e:a9:2e:76:41:38:aa:e4:49:d8:92:
f0:30:b4:ed:9c:03:e9:39:75:b8:9e:4b:9a:4b:49:3a:5e:43:
f3:ae:b6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:03 2024 by rpki-client on console-fra.rpki-client.org