Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/C8VNA1zOqLW7PjCq7al3kCQYRVc.roa
File: C8VNA1zOqLW7PjCq7al3kCQYRVc.roa (raw, json)
Hash identifier: ENsOzaSdo+adcMFJj13NSkNfb+Pre54fGuw+KMLHlPo=
Subject key identifier: 0B:C5:4D:03:5C:CE:A8:B5:BB:3E:30:AA:ED:A9:77:90:24:18:45:57
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0185719E7E5A93524CF89410A37DB06D1EF5
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/C8VNA1zOqLW7PjCq7al3kCQYRVc.roa
Signing time: Mon 02 Jan 2023 08:34:50 +0000
ROA not before: Mon 02 Jan 2023 08:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44597
IP address blocks: 193.232.225.0/24 maxlen: 24
2a0c:a9c7:225::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:7e:5a:93:52:4c:f8:94:10:a3:7d:b0:6d:1e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 08:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bc54d035ccea8b5bb3e30aaeda9779024184557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:a6:2f:d2:0a:e1:8f:3b:3e:8a:b1:27:4e:
37:91:e3:f9:e6:83:0c:df:be:67:ea:ba:49:c4:b9:
02:f0:18:7d:37:4f:07:c6:5b:59:23:af:eb:b8:ed:
55:d3:57:a3:58:3b:90:8c:55:9e:4b:a3:87:ca:08:
29:86:e9:3c:05:f2:a1:ff:31:b8:f6:16:eb:55:cc:
29:6a:a6:4c:08:cc:a3:ec:b8:96:22:8c:10:81:b0:
3e:1a:d4:b0:eb:57:be:ba:76:b1:55:bb:8e:48:e1:
9f:58:f4:db:71:15:00:b0:f5:9d:89:30:df:41:1a:
90:d1:de:32:a7:54:76:fd:07:7f:2a:ec:0f:02:6a:
71:14:ad:67:d5:5b:67:e6:7d:5c:82:54:03:31:07:
a2:b6:a7:27:18:1f:39:b8:ad:86:c8:6b:5c:4b:7a:
5a:fc:94:4d:fb:50:22:86:68:f7:1d:02:67:bb:aa:
62:d6:d8:30:5e:fd:42:b9:0e:23:8e:0f:4d:50:05:
a1:f8:38:ca:49:98:12:9a:9e:39:71:88:f0:1a:7b:
03:d7:fb:e3:27:15:5f:d6:5f:09:34:e0:fe:73:49:
72:9a:d7:94:e9:6d:e9:1f:ca:cb:76:13:0c:a3:5b:
d7:3d:2f:8f:a7:96:b8:33:93:f9:c9:53:da:32:39:
42:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C5:4D:03:5C:CE:A8:B5:BB:3E:30:AA:ED:A9:77:90:24:18:45:57
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/C8VNA1zOqLW7PjCq7al3kCQYRVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.225.0/24
IPv6:
2a0c:a9c7:225::/48
Signature Algorithm: sha256WithRSAEncryption
9c:03:6c:0a:82:a1:bc:47:52:db:33:50:85:2f:d8:b2:84:ec:
cc:4b:05:56:e9:f2:1f:9a:e0:ea:fe:46:a7:9c:e7:40:e3:82:
8b:6a:e7:f3:1a:24:b2:65:a8:59:42:b4:e1:8a:13:80:6c:59:
1f:3f:7d:e3:e0:ae:e1:76:5c:7e:1a:39:8f:c7:ab:62:70:f7:
0b:63:b1:c4:11:c3:f9:12:ad:74:89:91:00:1a:23:3f:95:dc:
d0:d5:a3:ad:3e:1e:ab:2b:10:eb:32:0c:75:58:d3:82:0e:f9:
48:78:54:7d:68:02:62:3f:4c:19:0c:64:8e:eb:5b:60:0c:16:
c2:47:91:0d:2d:f1:ad:20:56:6a:05:11:cb:22:ad:10:cc:33:
39:ab:85:76:e6:ce:a8:79:c5:a6:a4:dd:59:de:9b:d2:5f:a1:
af:b1:ab:14:3e:8e:9a:2a:2e:85:88:31:e0:5b:78:2e:8f:a1:
36:9b:c7:3f:f5:8f:ea:31:15:a7:e3:41:12:df:99:02:1e:6c:
1a:58:c5:29:f6:63:30:53:95:13:78:42:a2:50:d0:53:b9:16:
09:49:82:08:f2:8e:2b:55:24:42:b8:80:ff:14:0d:06:83:5a:
e9:25:7d:30:2d:b4:f0:30:d1:f4:78:1c:68:f1:68:f2:84:50:
87:ea:31:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org