Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/vMFii59ORJfDPi1g-WoWv6Gb_vQ.roa
File: vMFii59ORJfDPi1g-WoWv6Gb_vQ.roa (raw, json)
Hash identifier: 8K/P/RjzQu5HJalZoA1xb6fLvNmU/tamS15mLiBu/JI=
Subject key identifier: BC:C1:62:8B:9F:4E:44:97:C3:3E:2D:60:F9:6A:16:BF:A1:9B:FE:F4
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0185719E79F7983AEB744845138077F7C30B
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/vMFii59ORJfDPi1g-WoWv6Gb_vQ.roa
Signing time: Mon 02 Jan 2023 08:34:49 +0000
ROA not before: Mon 02 Jan 2023 08:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33844
IP address blocks: 193.232.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:79:f7:98:3a:eb:74:48:45:13:80:77:f7:c3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 08:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcc1628b9f4e4497c33e2d60f96a16bfa19bfef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4e:5a:46:2c:68:59:0c:62:aa:94:e2:b4:9b:
bb:c3:e4:12:c3:a3:fe:b0:f2:b4:e0:6f:f3:cf:f5:
97:9c:45:40:7a:8a:fc:20:d8:fe:7c:d1:b3:6f:b1:
b3:8b:ff:5c:14:00:c0:d3:d2:ae:92:cc:fa:de:ba:
6f:55:37:9c:36:37:1f:eb:cc:12:df:7c:d8:9e:63:
84:64:a8:1f:6e:99:92:32:fd:32:47:59:1d:e1:30:
f9:1e:02:a4:6f:4f:c0:8b:c9:7a:86:87:4a:bd:dc:
a5:d2:df:53:37:e3:45:53:45:60:d8:6f:cb:b3:b5:
7c:bd:75:ea:8f:0e:6f:ef:e4:81:e8:06:3e:99:59:
8c:6b:62:0e:eb:c0:00:0c:9f:a5:07:e5:79:e9:d3:
15:8a:76:30:d9:0b:46:86:bb:1c:c5:aa:3b:c8:3e:
7b:f9:24:93:b2:3e:91:25:ac:4f:47:93:35:be:c0:
f3:88:d6:48:e6:01:a7:75:2c:2c:71:85:22:91:74:
36:aa:8e:7f:45:51:9c:10:9b:22:f3:78:32:92:72:
38:13:69:8d:89:31:49:c1:4a:64:ce:4a:da:00:4e:
94:14:9a:e6:68:c3:57:97:66:81:9c:f6:a4:1a:d4:
f7:aa:0c:5e:a3:97:fd:64:70:87:a6:bc:19:fc:0e:
a6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C1:62:8B:9F:4E:44:97:C3:3E:2D:60:F9:6A:16:BF:A1:9B:FE:F4
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/vMFii59ORJfDPi1g-WoWv6Gb_vQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.123.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:08:05:d9:c5:08:bb:89:39:72:f0:ac:18:53:ba:64:f6:9d:
24:46:bf:4a:64:e8:b6:64:23:48:61:b2:7a:93:5a:69:36:a1:
0a:95:2b:3e:29:01:7d:33:20:e2:cc:79:3d:b5:1c:10:87:06:
62:0d:b6:57:d1:f6:46:aa:59:e4:b9:c7:d8:07:08:c9:4a:24:
ab:43:6f:64:d5:5c:9c:4a:63:cd:98:8e:29:fe:89:8d:3c:1d:
7d:ef:e1:91:d0:01:35:0a:9e:11:0e:76:b3:48:1f:9d:ce:24:
26:8b:9e:bd:f4:b4:6f:44:cd:75:89:e0:fb:0e:89:34:3c:ef:
08:ed:a6:f2:a6:51:86:55:41:e7:d2:73:b8:c0:3f:72:8c:c5:
0e:2a:35:c1:76:8a:3a:7c:aa:aa:97:73:18:3a:ac:df:e1:dd:
e9:3d:d1:2d:ce:2b:4a:c6:6e:92:a0:eb:bb:cd:50:bc:70:9d:
f9:a4:da:11:50:e2:f3:87:c1:70:da:c4:cc:78:48:7a:4d:17:
00:a7:63:61:77:5f:26:1a:2a:0f:51:d4:a1:92:f8:31:f5:ca:
b7:a1:aa:e3:0f:1e:33:eb:ea:67:12:db:e7:26:5b:9c:b4:0d:
2c:74:6d:ff:f8:02:0a:df:67:e6:13:0c:52:6e:f7:db:9c:ac:
ef:2e:2f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org