Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/_A-TUBCFIaabyZUF9fn1JIkHqXM.roa
File: _A-TUBCFIaabyZUF9fn1JIkHqXM.roa (raw, json)
Hash identifier: l9wUsMwZIT6HLo6N+lBE3aqLwqnfVWNV3XQXBSfjEDc=
Subject key identifier: FC:0F:93:50:10:85:21:A6:9B:C9:95:05:F5:F9:F5:24:89:07:A9:73
Certificate issuer: /CN=9df185e99ffe611527a0e94331151ffe2ee72ae9
Certificate serial: 01886D113880301C26845A7F5F4F5D6F647C
Authority key identifier: 9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/_A-TUBCFIaabyZUF9fn1JIkHqXM.roa
Signing time: Tue 30 May 2023 14:30:25 +0000
ROA not before: Tue 30 May 2023 14:30:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201990
IP address blocks: 193.218.203.0/24 maxlen: 24
217.197.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Nov 2023 06:37:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6d:11:38:80:30:1c:26:84:5a:7f:5f:4f:5d:6f:64:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df185e99ffe611527a0e94331151ffe2ee72ae9
Validity
Not Before: May 30 14:30:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc0f9350108521a69bc99505f5f9f5248907a973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e3:2f:d6:fb:91:5d:fa:82:04:06:63:1f:00:
86:e7:80:bf:7d:d3:86:d7:39:19:80:3d:5d:81:58:
1a:d9:dc:0a:b1:15:0b:2f:71:f9:7b:d4:09:79:34:
e2:7b:30:7e:93:25:51:11:79:3b:c9:84:fb:45:84:
1d:8d:35:7b:66:3a:59:d1:14:71:09:6d:0a:e3:0e:
3e:e8:b6:aa:9b:30:b7:5e:4a:34:58:02:2e:f8:82:
96:6f:35:14:6e:a2:75:ff:c8:26:b9:99:b2:e0:4a:
61:52:cc:2a:7a:50:42:df:1b:27:80:78:77:f5:6a:
71:0e:68:1d:17:1b:a6:d8:5d:6b:a2:ee:90:b3:10:
3e:16:32:31:85:55:ad:56:19:28:06:c5:c8:72:ae:
50:99:c1:ff:8b:5d:87:bf:be:69:d2:0c:e7:8b:2c:
2f:7f:b6:9b:cf:a3:81:3a:4b:99:d2:b2:22:7b:44:
4b:1a:d9:93:bf:81:24:42:5b:2c:7b:33:71:5d:01:
06:bd:1f:1b:58:f8:a5:c0:08:45:81:da:09:76:bc:
07:1a:02:29:24:ec:97:10:8e:a5:a5:43:6d:65:95:
f8:cd:4a:c7:de:50:68:f0:c3:eb:05:13:98:d0:c8:
c7:53:a6:63:78:56:33:e5:37:29:be:71:9a:9f:9b:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0F:93:50:10:85:21:A6:9B:C9:95:05:F5:F9:F5:24:89:07:A9:73
X509v3 Authority Key Identifier:
keyid:9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/_A-TUBCFIaabyZUF9fn1JIkHqXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.203.0/24
217.197.102.0/24
Signature Algorithm: sha256WithRSAEncryption
09:48:d8:44:69:bb:9c:42:36:6f:8c:ae:ce:05:f5:ef:1e:5c:
be:b7:9e:31:4a:f8:f9:ea:76:ad:99:88:16:ea:85:cc:db:cb:
66:81:d5:cd:75:94:23:cb:20:25:ec:b1:21:3d:b8:58:d8:a8:
43:42:a5:20:04:31:77:64:d0:30:95:3a:59:14:9f:dc:5f:03:
29:0b:40:ad:4e:2e:b7:7b:88:90:24:89:18:24:28:da:94:da:
41:99:3f:80:51:57:48:d7:fe:8a:c9:26:96:7d:c2:f8:72:50:
fb:e8:de:7e:20:0d:e6:78:7d:41:06:15:af:d3:6d:ab:24:d7:
23:0d:f6:5b:8c:8e:fe:33:3e:33:dc:6d:f3:2a:84:db:c8:94:
fc:2b:41:82:0a:3d:5d:7f:85:9e:e9:72:ab:a3:23:12:33:9b:
49:e3:54:06:c6:e1:65:9a:84:ae:b6:8f:1d:4b:01:37:0b:7a:
40:6e:91:8f:42:0c:c8:ec:93:09:85:99:f6:89:ce:b7:f0:4c:
31:36:1c:bd:00:c6:33:c7:2c:2b:7c:64:8c:b6:3d:20:b3:80:
19:c3:0e:1b:f2:12:5c:9d:f3:a3:e9:0c:b3:44:ef:98:f4:50:
da:82:81:e1:e1:36:74:fe:6a:3d:4c:61:fa:2a:5f:a8:d8:e1:
1a:73:ec:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:32 2024 by rpki-client on console-ams.rpki-client.org