Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/hbH2z2vYmBZFwr9qYAfx_19WLk4.roa
File: hbH2z2vYmBZFwr9qYAfx_19WLk4.roa (raw, json)
Hash identifier: Sw7UI7ZozOVOkzgFgHvjhM7+Dv6MMprW/EeQqjbAPi0=
Subject key identifier: 85:B1:F6:CF:6B:D8:98:16:45:C2:BF:6A:60:07:F1:FF:5F:56:2E:4E
Certificate issuer: /CN=991c934e08f57a03ef4eba36b5a4da798a252207
Certificate serial: 018A8557AC5107087446DF4EBFC1ADC83E51
Authority key identifier: 99:1C:93:4E:08:F5:7A:03:EF:4E:BA:36:B5:A4:DA:79:8A:25:22:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/hbH2z2vYmBZFwr9qYAfx_19WLk4.roa
Signing time: Mon 11 Sep 2023 17:43:50 +0000
ROA not before: Mon 11 Sep 2023 17:43:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211317
IP address blocks: 193.104.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:85:57:ac:51:07:08:74:46:df:4e:bf:c1:ad:c8:3e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991c934e08f57a03ef4eba36b5a4da798a252207
Validity
Not Before: Sep 11 17:43:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85b1f6cf6bd8981645c2bf6a6007f1ff5f562e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:66:e5:d3:ae:63:02:13:92:be:d0:94:1a:
1a:2a:ca:68:70:e2:80:61:67:09:af:09:4c:a4:82:
84:7a:1d:35:1c:1a:c0:21:1f:a5:b4:87:73:68:72:
69:69:5e:19:dc:4d:70:17:e3:e3:fe:ca:08:03:e4:
f1:89:87:e5:b8:fc:b1:94:54:4c:36:3b:2f:23:b4:
cb:06:8b:6a:32:bc:56:e1:c9:3b:4d:40:46:73:0a:
94:f6:50:3e:51:98:81:ec:1d:7c:ca:17:25:ab:2a:
ff:86:7e:f2:58:a8:bf:6f:99:53:4a:de:c9:81:57:
42:e1:fb:ab:65:b4:e6:38:e6:8b:3d:38:8a:5d:10:
d5:6a:bb:87:0a:a9:09:18:39:d5:a2:72:ec:f2:77:
02:0d:e0:47:58:86:6b:5a:bd:36:98:e3:7d:15:8e:
b1:63:9c:a8:37:91:7f:d2:27:44:57:79:ef:8b:09:
b9:62:78:14:e2:55:86:ed:a9:53:ce:2b:92:b7:34:
fb:9b:5b:4a:60:2d:b0:89:ab:9a:27:de:34:f4:27:
42:86:19:00:e3:ef:b1:65:2a:f9:66:bc:be:94:c5:
37:fc:83:f6:a9:57:f4:20:b9:72:2a:14:dd:aa:a2:
76:58:1d:49:e2:b2:74:fe:6b:d9:2d:a1:80:2d:37:
95:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B1:F6:CF:6B:D8:98:16:45:C2:BF:6A:60:07:F1:FF:5F:56:2E:4E
X509v3 Authority Key Identifier:
keyid:99:1C:93:4E:08:F5:7A:03:EF:4E:BA:36:B5:A4:DA:79:8A:25:22:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/hbH2z2vYmBZFwr9qYAfx_19WLk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.158.0/24
Signature Algorithm: sha256WithRSAEncryption
79:7b:b8:d6:ad:e3:a5:a2:04:34:44:58:25:9b:95:f9:df:4f:
ed:cd:6e:f0:87:4a:b6:a5:83:d5:bb:12:df:9b:43:99:a7:b3:
28:8e:78:4a:44:e5:fc:93:4f:7b:2f:a0:d6:60:b1:fa:e2:42:
22:72:9d:1b:9d:5d:1d:eb:d1:e6:b2:e2:d9:45:aa:43:c1:74:
3f:21:c8:ee:88:2e:16:13:3a:22:6b:05:e7:86:03:e2:fa:87:
13:8d:54:86:e7:4f:17:14:c1:29:c8:37:c5:e0:f0:74:3c:93:
85:db:4a:c9:52:b4:7a:d3:82:0a:3f:67:2e:22:17:76:74:93:
33:76:e2:c6:1f:64:7d:1c:6a:b1:fa:4c:e1:36:44:6e:0b:7b:
48:e2:8c:57:20:9b:29:ec:61:ec:4c:3f:67:f5:96:3c:d6:6b:
59:cf:b2:b7:f9:e8:b6:f3:32:40:53:e9:dd:40:89:5c:d9:ef:
8f:4d:bf:94:6f:47:4b:8b:b6:d9:2d:04:96:d8:10:90:20:98:
3c:3b:07:2c:60:c8:0b:48:0a:fd:34:75:f0:b9:06:ba:7e:b7:
88:ea:f5:c1:6f:e2:a8:d2:fe:b2:63:cc:84:82:3c:7a:b7:7f:
40:68:96:a4:f0:99:13:d4:ed:1e:57:11:a4:46:82:99:6b:27:
d1:41:c1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:03 2024 by rpki-client on console-fra.rpki-client.org