Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/DobamUIYSEAFCx5mz_aT-91xVp4.roa
File: DobamUIYSEAFCx5mz_aT-91xVp4.roa (raw, json)
Hash identifier: bNGQEX0WXOZ1k1VzRrYArpsa9SXJzKLZosanQcntOIE=
Subject key identifier: 0E:86:DA:99:42:18:48:40:05:0B:1E:66:CF:F6:93:FB:DD:71:56:9E
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0185719E7BCDE774CFD9936FC2BC794386EF
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/DobamUIYSEAFCx5mz_aT-91xVp4.roa
Signing time: Mon 02 Jan 2023 08:34:49 +0000
ROA not before: Mon 02 Jan 2023 08:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41717
IP address blocks: 193.232.178.0/24 maxlen: 24
194.226.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:7b:cd:e7:74:cf:d9:93:6f:c2:bc:79:43:86:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 08:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e86da9942184840050b1e66cff693fbdd71569e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8f:b2:2d:b4:72:65:5b:fd:0d:09:8a:28:21:
e4:b3:a5:d2:aa:89:5d:e6:37:08:89:4b:e6:c3:35:
37:fe:c3:6b:39:35:db:d0:f4:c9:ad:1c:82:da:eb:
fb:f3:e1:a5:f5:49:e2:cc:a0:18:5f:07:9e:45:44:
31:3a:75:fc:e7:d6:00:5e:f6:1f:a3:ee:f3:ae:a5:
e4:1c:c6:df:ce:d7:56:19:b1:67:87:ff:44:b6:65:
c8:6a:ce:9c:7d:7b:ae:41:9d:24:11:c2:21:ed:42:
f7:b4:4c:1a:0a:fe:fe:ee:d0:d6:14:4c:46:79:98:
6f:2c:94:e4:fc:f9:01:94:a1:df:a6:dd:c6:c2:ad:
d6:6d:bb:e6:c4:d0:16:d6:be:22:5b:f8:ea:1f:5c:
b4:fb:1d:e8:09:08:68:dd:f1:5a:1a:a7:d9:91:47:
51:39:f3:0d:54:94:f2:f8:c7:2a:a1:01:9f:a7:90:
c3:77:5c:d1:68:00:5c:18:57:61:4d:90:91:91:8e:
06:b6:0e:55:6e:3f:bf:0c:a1:9b:be:94:17:21:63:
75:ed:75:88:5d:29:13:17:e8:81:1c:50:db:96:69:
c8:59:79:0e:89:37:7c:dc:5c:14:44:f0:b7:ca:ca:
f4:06:c7:d1:19:a4:33:bc:9a:e7:62:e5:9d:1f:09:
4a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:86:DA:99:42:18:48:40:05:0B:1E:66:CF:F6:93:FB:DD:71:56:9E
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/DobamUIYSEAFCx5mz_aT-91xVp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.178.0/24
194.226.169.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:cd:71:ae:4c:46:3e:38:14:e3:f7:0d:a5:17:72:90:dc:d1:
85:89:60:9c:10:9f:ca:9c:64:91:66:49:60:39:b9:90:41:24:
4e:8d:8a:0d:27:07:d4:7f:9b:ef:a1:96:38:da:e1:97:06:2f:
3f:12:dc:ce:06:ef:62:49:a8:88:d7:7c:02:de:3a:81:e7:d5:
26:a9:9a:9b:33:35:1c:cc:0d:08:72:d1:66:d4:6d:30:e6:d3:
0d:bd:07:a7:7f:7b:49:e5:b9:fa:53:8e:db:54:8d:75:f7:a6:
ac:51:df:3a:56:52:d6:1c:c9:70:40:23:04:64:77:94:93:cd:
9b:47:a2:8f:6e:5d:f9:b7:51:ee:e2:77:dc:c2:cd:46:9c:0f:
a2:61:fb:73:05:50:6c:b8:24:ed:89:ed:23:8e:22:48:a3:ec:
6e:2d:a7:98:f8:af:31:8a:b5:cb:e7:00:93:7d:6b:7f:4d:5f:
de:51:a7:e8:95:34:16:58:1e:03:15:75:cf:cb:f7:87:71:21:
83:97:6d:a6:22:3b:c3:53:e4:db:af:e4:e5:3b:3b:1d:55:6a:
f2:35:7b:c8:f7:de:b9:67:70:7b:0c:18:13:42:1e:eb:76:f1:
4d:37:24:75:de:5a:3b:63:41:8b:12:4e:55:af:76:f3:f9:b7:
9f:48:5e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org