Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/S1C5Sr0x5U83F3oP5RkSgtpI2_Q.roa
File: S1C5Sr0x5U83F3oP5RkSgtpI2_Q.roa (raw, json)
Hash identifier: zbYbRQPSKYDZKYTughTVLpVuAmEJghsOwtDxqFC9ENw=
Subject key identifier: 4B:50:B9:4A:BD:31:E5:4F:37:17:7A:0F:E5:19:12:82:DA:48:DB:F4
Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108
Certificate serial: 018AD0459B80471861FF7FD80210742059AD
Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/S1C5Sr0x5U83F3oP5RkSgtpI2_Q.roa
Signing time: Tue 26 Sep 2023 06:55:37 +0000
ROA not before: Tue 26 Sep 2023 06:55:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209980
IP address blocks: 193.220.160.0/24 maxlen: 24
193.220.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d0:45:9b:80:47:18:61:ff:7f:d8:02:10:74:20:59:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896a82a725ed22bb46847ae568912078de25c108
Validity
Not Before: Sep 26 06:55:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b50b94abd31e54f37177a0fe5191282da48dbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:62:23:76:c9:2e:46:d8:43:97:f1:c3:f3:f2:
98:54:dd:80:f7:e9:c0:9f:a3:b0:94:3d:af:5e:2e:
b9:5f:7d:f1:5f:a7:de:14:0c:1b:4a:0c:9b:8b:0e:
e3:a9:ac:7c:50:12:78:e6:b6:96:71:d5:fa:33:3f:
bb:2e:5c:27:de:40:4d:07:8e:bd:0a:6a:42:17:08:
32:d5:59:dc:1a:19:5d:cf:c3:a4:cb:34:fd:82:e9:
20:bb:ac:dc:51:50:18:0d:aa:72:8a:a8:f1:ac:e2:
48:0d:79:5a:ec:28:e3:dd:0f:30:df:3e:74:3e:f4:
e5:12:42:f2:31:d7:d6:a2:d8:3d:37:eb:99:6f:af:
9e:b9:7f:b4:75:5a:4e:7b:ae:3b:e5:1b:dd:36:ec:
f7:5d:90:07:7d:fb:a6:b2:2d:4a:89:a4:0b:68:c8:
62:23:ae:48:8f:b0:ea:ff:6d:ed:06:f6:1f:b4:6b:
9f:84:ee:97:d9:39:44:5a:21:97:65:fc:91:33:af:
42:08:b8:be:56:ba:59:d0:9f:b0:2c:60:26:65:11:
09:bd:57:ae:d4:0d:7b:4a:86:72:55:48:e6:c2:ad:
39:5d:f1:5c:95:e7:9d:08:ce:e4:5b:45:70:66:3c:
3a:ce:74:7d:eb:6d:e0:ac:a0:af:a4:2a:8d:11:25:
c9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:50:B9:4A:BD:31:E5:4F:37:17:7A:0F:E5:19:12:82:DA:48:DB:F4
X509v3 Authority Key Identifier:
keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/S1C5Sr0x5U83F3oP5RkSgtpI2_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.220.160.0/23
Signature Algorithm: sha256WithRSAEncryption
53:28:09:3f:33:36:b2:cd:22:dc:de:1d:cb:d7:3a:d5:5d:ed:
b5:34:d3:bd:27:1a:0c:30:04:e1:74:fd:49:05:67:0a:fa:08:
d2:52:f9:40:8c:f1:b2:e6:67:96:e6:11:68:ee:2c:24:b9:e6:
13:ca:71:c6:1f:6c:65:bc:d4:15:e2:d1:b1:41:8a:14:d3:b6:
c9:bd:bf:d5:52:a6:d3:44:73:1b:3a:e4:a8:26:a3:f1:ba:4b:
82:40:58:eb:82:32:39:ec:c7:fa:a5:67:cc:ff:e3:5a:11:1b:
de:44:c9:7f:2c:b1:90:6a:28:f8:c1:9c:af:46:dd:13:fc:0e:
7e:e3:97:55:29:5e:9d:10:eb:2e:2d:31:e1:23:19:b5:c6:d5:
db:c2:9f:bf:94:21:1f:ba:89:d0:0e:de:f0:2b:e3:a6:00:b4:
1f:2e:97:e1:4b:88:4b:ea:bb:09:d0:a9:35:43:eb:72:22:3c:
ac:2e:3e:8d:74:b5:8b:82:79:f6:84:eb:30:70:c2:c3:1c:79:
1a:39:84:fa:09:79:75:f8:cb:ae:6f:32:99:6d:d3:92:3b:f7:
ed:b6:30:f3:78:39:03:f0:65:30:7f:ee:56:1e:49:ed:3e:b0:
26:40:e0:ae:79:21:f7:01:3e:e4:f7:12:74:e2:bc:ec:06:c7:
36:90:2f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:53 2024 by rpki-client on console-fra.rpki-client.org