Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/gE-NS3uwPAzgXM9rlexGE1IYS3Q.roa
File: gE-NS3uwPAzgXM9rlexGE1IYS3Q.roa (raw, json)
Hash identifier: noZ+xDpicbJalv0gyuKoULDiW+yOa5PY7FxIxsM9YeI=
Subject key identifier: 80:4F:8D:4B:7B:B0:3C:0C:E0:5C:CF:6B:95:EC:46:13:52:18:4B:74
Certificate issuer: /CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Certificate serial: 0185701EEC73364BBDCDB8E4CD8C62F382A6
Authority key identifier: A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/gE-NS3uwPAzgXM9rlexGE1IYS3Q.roa
Signing time: Mon 02 Jan 2023 01:35:52 +0000
ROA not before: Mon 02 Jan 2023 01:35:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60111
IP address blocks: 193.27.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:ec:73:36:4b:bd:cd:b8:e4:cd:8c:62:f3:82:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Validity
Not Before: Jan 2 01:35:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=804f8d4b7bb03c0ce05ccf6b95ec461352184b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:57:1a:d8:fd:0e:1d:c9:55:17:07:0a:5c:d0:
24:d6:13:6a:fb:eb:1a:4f:3d:c5:4e:29:62:ec:53:
d0:a8:ac:09:06:dd:0e:8f:de:fc:7f:5a:26:79:5d:
e4:01:19:42:3d:26:ba:b4:28:50:a2:ec:8d:34:44:
15:47:b9:d1:37:65:d4:53:6f:32:de:cb:82:77:3e:
db:a2:ec:2c:c2:95:f0:1f:09:de:03:f5:cd:03:c2:
9b:41:9b:9b:ac:a6:4b:aa:5f:7c:e0:01:63:a5:8c:
57:d7:60:e2:0b:92:b6:f0:ff:ec:7a:b9:1d:6e:ba:
4e:eb:36:fb:e3:1a:89:20:3d:b2:8b:14:fa:47:3a:
a7:91:43:68:4e:70:03:44:75:bc:a8:bf:5c:a9:29:
c9:1c:cb:66:cb:e7:a9:c8:00:08:39:91:9e:08:83:
7f:22:26:93:1e:5d:4a:00:d1:8f:1b:34:5a:71:bf:
f2:2d:6f:a0:a0:77:77:19:96:84:cd:89:e3:1a:db:
cc:71:da:c7:68:f9:ba:84:81:70:40:02:2c:a3:e1:
50:b9:2d:cb:76:f0:f4:3a:de:da:3b:a2:58:05:5d:
65:a0:1a:0a:29:fe:26:3d:11:4b:7b:fe:54:b3:f9:
25:8b:01:b6:8f:de:92:78:a5:de:ca:a2:d2:7c:b4:
78:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4F:8D:4B:7B:B0:3C:0C:E0:5C:CF:6B:95:EC:46:13:52:18:4B:74
X509v3 Authority Key Identifier:
keyid:A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/gE-NS3uwPAzgXM9rlexGE1IYS3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.44.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:cb:32:93:be:0e:a2:da:8a:6e:5c:2c:18:d0:59:b8:c0:c1:
50:11:99:46:30:60:64:e0:f5:6c:1e:2e:d7:de:17:8b:66:8c:
d5:64:30:84:a2:a7:07:8c:5d:d9:52:15:c1:88:1b:f7:92:56:
b5:5f:9c:22:1f:d0:36:8b:78:07:32:4c:a2:69:e5:aa:c0:38:
bc:63:7c:61:b9:9d:51:ec:2e:f2:aa:61:e2:7b:35:ab:a1:94:
a7:4d:50:cc:f1:f3:c9:f9:6a:bd:5a:75:f7:dd:35:cf:30:00:
ab:e1:10:b1:17:5b:dd:7c:40:ad:22:17:42:32:de:00:a2:d6:
cf:be:57:b7:96:a0:5a:a1:f1:d5:5f:ce:49:ef:00:4b:63:97:
14:0e:df:d0:4b:5e:58:68:3c:e2:bb:b7:03:91:bc:ef:d6:09:
48:ad:51:43:80:5d:ef:38:4f:2e:45:3a:20:a4:b2:d8:a4:30:
bc:d4:33:5b:60:9b:3c:13:3a:d4:98:93:41:b6:f4:c6:8c:b7:
2c:5d:c5:86:43:90:19:7e:df:ae:35:44:16:73:3f:7e:e2:a8:
56:d2:a6:ba:47:0d:75:41:4e:42:06:94:00:02:07:70:0d:44:
04:b5:49:2d:7a:de:31:46:13:aa:07:6c:f0:80:cf:b3:23:47:
1a:e2:d6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:44 2024 by rpki-client on console-fra.rpki-client.org