Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/1-_jhcz0xW5zCLcX17wzt2qKYeuI.roa
File: 1-_jhcz0xW5zCLcX17wzt2qKYeuI.roa (raw, json)
Hash identifier: z5BYdCi5qZalhienviqXMRgLcXpyU/qdovcyXkpfreE=
Subject key identifier: FB:F8:E1:73:3D:31:5B:9C:C2:2D:C5:F5:EF:0C:ED:DA:A2:98:7A:E2
Certificate issuer: /CN=2d2d7d9743de2efa2f633378a268f58f2aa16050
Certificate serial: 01856EB8F6794FB5071461E85A4A8A28E645
Authority key identifier: 2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/1-_jhcz0xW5zCLcX17wzt2qKYeuI.roa
Signing time: Sun 01 Jan 2023 19:04:53 +0000
ROA not before: Sun 01 Jan 2023 19:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207656
IP address blocks: 193.218.118.0/24 maxlen: 24
193.218.119.0/24 maxlen: 24
2a0f:e586::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:f6:79:4f:b5:07:14:61:e8:5a:4a:8a:28:e6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2d7d9743de2efa2f633378a268f58f2aa16050
Validity
Not Before: Jan 1 19:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbf8e1733d315b9cc22dc5f5ef0ceddaa2987ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ba:19:94:67:d4:5b:a2:48:53:62:ed:a7:7b:
49:3b:b8:c0:56:7a:03:7b:58:c7:4d:d0:e8:d4:d5:
71:1f:0e:45:90:17:0f:e0:8d:2d:34:bb:b3:79:ab:
1b:4b:31:02:2b:a0:15:5e:6a:3f:49:ac:3e:4c:3e:
6f:39:2b:fa:f3:c2:7f:7b:61:88:5f:cc:c1:ff:7e:
b1:46:c3:4c:68:3e:f9:36:12:62:d8:1e:e5:de:61:
ce:04:93:04:cd:71:9f:c7:31:11:41:14:df:57:c2:
52:49:2b:2e:42:03:51:ee:da:42:c7:ea:12:99:3c:
41:b4:aa:f8:c3:a6:8a:f2:45:d7:59:c9:3d:1e:5c:
23:fa:68:99:4a:76:fb:3b:4c:00:e8:44:0a:e3:7b:
0f:c4:e7:e1:4d:ac:6c:33:83:64:df:69:c3:e4:e3:
2d:c8:2a:98:a9:1d:75:c9:2b:4a:50:24:5c:2c:56:
15:95:42:fd:eb:b9:27:86:63:3f:79:91:d7:91:e5:
9b:ba:15:c1:57:79:81:be:75:8a:3c:24:bd:78:19:
41:05:96:e9:d2:17:95:d2:ec:55:64:15:88:84:4b:
fb:58:2f:eb:cd:36:d5:f4:e8:ba:94:fe:44:1b:87:
ef:e4:4d:fe:48:9d:be:bd:57:91:ea:13:d9:cc:57:
1d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F8:E1:73:3D:31:5B:9C:C2:2D:C5:F5:EF:0C:ED:DA:A2:98:7A:E2
X509v3 Authority Key Identifier:
keyid:2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/1-_jhcz0xW5zCLcX17wzt2qKYeuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.118.0/23
IPv6:
2a0f:e586::/32
Signature Algorithm: sha256WithRSAEncryption
a5:78:74:d8:12:4a:88:bc:cf:f0:cc:84:2c:81:c1:5f:fa:79:
2b:94:df:c2:77:6e:38:fd:36:25:80:e1:d2:6d:ab:82:68:2c:
43:bf:7a:00:fc:4d:ef:b4:b7:87:f9:10:db:91:6b:c2:d0:7b:
98:28:79:48:d6:ce:e2:77:42:b1:7d:62:38:0c:01:8a:92:a1:
92:2a:40:4a:de:84:92:c6:d0:ee:f7:0f:d3:2c:77:ab:84:26:
3f:bb:c1:d2:38:d2:d4:82:71:2f:73:78:fb:03:28:62:4e:7a:
47:c7:10:46:03:9a:2a:ec:91:c6:70:ba:42:3e:3f:17:ef:e9:
96:f5:d7:c7:a5:e3:50:5e:16:1d:2b:32:af:2e:b9:23:34:dc:
e2:4c:6e:8f:55:0a:d3:f8:51:27:ac:4a:4d:e2:06:88:1e:2a:
8a:28:3c:ef:a1:95:7d:55:af:eb:d1:5b:a0:ac:55:d5:7d:2a:
1e:68:3b:9a:c5:c0:6b:b2:04:ec:6e:0e:de:97:38:ec:67:e7:
4d:a6:10:25:7f:75:e4:65:98:df:d1:4d:c3:64:b4:64:7f:c1:
65:c0:44:5c:00:1f:3c:99:f0:36:1f:00:8d:d1:22:6c:60:67:
9a:1f:43:f3:25:c8:7d:57:88:8f:c6:b6:ee:c1:49:4b:4a:ad:
c9:83:aa:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:07 2024 by rpki-client on console-ams.rpki-client.org