Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/64ahR2tS3lDXEud2MOpEooR6b_E.roa
File: 64ahR2tS3lDXEud2MOpEooR6b_E.roa (raw, json)
Hash identifier: VRtqAcxN+Qj3qvfts+RVqnY/AOgoKO6NS2MKWmLOMOo=
Subject key identifier: EB:86:A1:47:6B:52:DE:50:D7:12:E7:76:30:EA:44:A2:84:7A:6F:F1
Certificate issuer: /CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Certificate serial: 01856B6E8010268D3C1FB14AE797E4A06500
Authority key identifier: 83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/64ahR2tS3lDXEud2MOpEooR6b_E.roa
Signing time: Sun 01 Jan 2023 03:44:41 +0000
ROA not before: Sun 01 Jan 2023 03:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205065
IP address blocks: 130.193.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:6e:80:10:26:8d:3c:1f:b1:4a:e7:97:e4:a0:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Validity
Not Before: Jan 1 03:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb86a1476b52de50d712e77630ea44a2847a6ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:19:d5:9c:8a:c7:ac:35:8b:b2:91:a9:05:a0:
a7:96:e2:28:84:4a:d1:dd:a4:dd:72:28:e9:6c:df:
2c:f8:45:cc:f2:7b:57:79:8b:39:98:91:fe:81:b2:
88:9b:bd:de:e4:21:d2:f3:e8:61:97:28:ac:dd:49:
89:34:76:4f:d6:0b:14:b8:83:54:e1:8c:fe:d9:22:
9a:fb:66:4a:ab:d5:5d:17:0e:e6:f3:e8:09:81:99:
de:65:b2:29:e5:33:ad:0e:68:2b:7e:c7:7d:91:22:
06:23:e6:f1:13:72:37:b9:6c:8f:2d:f3:42:9b:dc:
8c:4a:a3:99:46:cf:22:99:ba:b2:49:a5:03:28:03:
cc:06:fb:2d:55:f8:18:50:21:2f:e9:8f:1d:45:66:
ca:98:1a:10:4c:23:e2:45:75:23:4f:5d:80:d3:9f:
89:29:79:bb:91:61:12:6a:88:b5:c6:3a:1a:52:d5:
04:68:bb:90:5c:03:1f:f1:c9:fe:3d:48:52:87:d0:
fc:28:f7:57:ae:00:2a:ee:fd:c1:0e:b7:b0:f0:62:
5d:8a:17:94:d3:d4:84:d9:07:64:5f:91:1f:e1:3d:
d1:5f:42:75:bb:26:60:fd:1e:61:b1:59:52:e0:d2:
90:82:dd:f2:55:9d:ef:cf:49:d2:3b:ee:1d:0d:6c:
62:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:86:A1:47:6B:52:DE:50:D7:12:E7:76:30:EA:44:A2:84:7A:6F:F1
X509v3 Authority Key Identifier:
keyid:83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/64ahR2tS3lDXEud2MOpEooR6b_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.76.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:6c:28:46:18:ae:63:07:df:fc:16:5e:bd:4b:fd:2a:32:c9:
46:20:30:50:a1:3d:78:c2:56:5a:51:1e:67:75:b8:7d:a3:5b:
e5:07:12:c4:2d:3b:7c:76:e1:4b:b3:11:1c:54:a2:cd:4b:2c:
c7:f5:1b:2f:2f:7d:ac:ec:6f:fc:93:8c:ba:27:11:7f:f8:0b:
bf:c8:fa:3e:d6:77:e8:18:80:06:93:f2:5c:30:00:72:ea:64:
71:92:b0:28:0a:0e:5e:cd:d9:94:5c:42:49:5e:67:ef:87:f6:
97:f3:19:44:13:a9:57:be:2d:95:99:de:6a:2b:02:fb:6f:20:
d6:3f:cd:4c:af:0d:36:61:d5:65:5d:38:83:be:df:c6:4a:a5:
1b:34:51:8c:c6:13:91:6f:98:eb:b7:2f:87:52:eb:2a:4a:f4:
ee:ea:ad:3a:8b:eb:59:56:fc:2c:a6:4e:e6:5f:4e:96:cd:c2:
3b:1b:2a:3e:8e:d5:e1:8c:b3:21:9e:5c:8c:7d:7f:7a:df:37:
33:31:1b:77:85:11:bb:84:33:d8:99:d3:23:2d:78:ab:7c:a8:
8e:7d:b4:eb:19:06:59:1f:bb:fc:36:8b:88:37:e6:0d:96:c9:
5b:57:c5:ea:89:7d:5f:cb:cf:cc:c1:6d:72:38:52:aa:1e:03:
80:b1:ac:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:18 2024 by rpki-client on console-ams.rpki-client.org