Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/Agvf-RsEBBWGz7fbMaM4SNScMEo.roa
File: Agvf-RsEBBWGz7fbMaM4SNScMEo.roa (raw, json)
Hash identifier: PIPWhiU6a+fgv7FyJap8Q+SLKiozVDsUqvpGh+A0OMo=
Subject key identifier: 02:0B:DF:F9:1B:04:04:15:86:CF:B7:DB:31:A3:38:48:D4:9C:30:4A
Certificate issuer: /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Certificate serial: 01856FE71967482D680004B53A76BD0894C1
Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/Agvf-RsEBBWGz7fbMaM4SNScMEo.roa
Signing time: Mon 02 Jan 2023 00:34:54 +0000
ROA not before: Mon 02 Jan 2023 00:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6421
IP address blocks: 193.103.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:19:67:48:2d:68:00:04:b5:3a:76:bd:08:94:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Validity
Not Before: Jan 2 00:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=020bdff91b04041586cfb7db31a33848d49c304a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:32:8e:d9:ed:6d:65:81:40:0a:75:79:b2:1a:
32:56:99:70:fe:0c:dc:9b:69:fc:33:4f:15:e0:bc:
fc:b4:ef:2d:66:36:fd:b3:09:43:8e:af:32:46:88:
8b:d6:77:16:f2:7c:f1:41:e8:c4:6d:eb:a2:c6:de:
0f:93:47:c3:b1:37:a6:54:34:e3:60:ec:33:3f:1e:
e7:7c:91:c5:1f:d9:a9:69:d3:2d:13:83:9d:1f:e7:
0d:1f:3d:18:7c:6e:58:d0:4f:66:fb:f0:0f:96:97:
86:65:20:bf:00:10:58:ce:9d:e6:18:c8:42:3d:61:
d9:e5:32:d4:10:d1:3a:3a:18:58:8d:8a:b8:c1:d2:
39:85:99:0d:af:fb:ef:87:19:f2:47:f3:63:61:f9:
8b:dd:3b:06:e6:a3:12:ee:3f:2a:53:69:f2:f4:7f:
a8:76:74:67:27:50:f0:dc:d3:cc:ee:0f:4a:9c:bd:
98:5b:63:30:39:e4:a0:d2:f8:0c:c6:9a:23:53:74:
7d:db:d2:3b:64:02:06:71:96:aa:bd:27:68:6c:53:
b6:7f:a8:cf:b9:cd:6c:ff:67:71:fa:50:92:a6:90:
83:a6:4d:33:82:64:b2:7b:87:76:4f:e2:fc:21:6a:
ce:47:c8:22:d4:67:f4:16:59:87:45:76:41:97:5d:
b8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0B:DF:F9:1B:04:04:15:86:CF:B7:DB:31:A3:38:48:D4:9C:30:4A
X509v3 Authority Key Identifier:
keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/Agvf-RsEBBWGz7fbMaM4SNScMEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.103.199.0/24
Signature Algorithm: sha256WithRSAEncryption
79:b6:f0:0d:7e:e8:06:26:58:cb:46:3b:9c:30:27:f5:2b:b8:
53:da:ad:75:ec:bd:06:ae:24:4b:3c:e5:f9:be:3b:8c:cb:b5:
87:95:0f:ac:52:5b:7d:a1:86:99:bc:5e:99:83:99:c9:07:e0:
2d:26:e3:6c:86:da:e4:a3:d3:6c:c6:44:83:fc:9d:2a:50:dd:
e1:bb:8b:8e:8d:37:2f:bd:bd:fb:9a:f2:11:7a:d0:19:16:26:
08:a8:4c:54:01:f0:21:8d:92:fe:89:9b:23:39:b9:26:c7:49:
bd:90:96:7c:51:7e:66:45:81:88:73:ca:55:3a:5d:41:0f:ac:
ff:e3:23:f0:73:5f:21:21:91:94:0f:24:7d:86:7c:8e:f5:56:
fd:c3:02:6f:4a:c2:a5:27:07:e6:c2:3c:d2:0b:f8:a2:d7:b4:
8e:05:9e:a7:bc:df:99:b6:3e:18:31:9d:f1:f4:18:cd:25:d4:
f1:b6:41:20:ed:50:00:f4:fc:6b:fa:5f:54:b2:72:96:5f:21:
3c:79:25:25:67:64:ac:b7:19:f0:75:88:ff:11:f9:d0:3b:1f:
3f:7e:47:33:ff:f8:4f:cd:74:d2:00:6a:4c:0a:6c:cf:e8:5a:
46:9a:08:31:2e:ec:3a:48:0d:be:ae:cc:e9:58:47:e4:53:28:
38:ad:aa:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:37 2024 by rpki-client on console-fra.rpki-client.org