Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/fwH8QPDmMqXf6UJdb4yw4A1eMxs.roa
File: fwH8QPDmMqXf6UJdb4yw4A1eMxs.roa (raw, json)
Hash identifier: htX6kTp2k8sq6JgJ5j6+Lg0rBKGhbncb1iSsMXS5SaU=
Subject key identifier: 7F:01:FC:40:F0:E6:32:A5:DF:E9:42:5D:6F:8C:B0:E0:0D:5E:33:1B
Certificate issuer: /CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Certificate serial: 018A1D191E86DCD0CE8E13AC0268532D201D
Authority key identifier: 9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/fwH8QPDmMqXf6UJdb4yw4A1eMxs.roa
Signing time: Tue 22 Aug 2023 11:55:00 +0000
ROA not before: Tue 22 Aug 2023 11:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51262
IP address blocks: 193.17.24.0/24 maxlen: 24
193.17.26.0/24 maxlen: 24
193.17.55.0/24 maxlen: 24
2a0f:7940::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1d:19:1e:86:dc:d0:ce:8e:13:ac:02:68:53:2d:20:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Validity
Not Before: Aug 22 11:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f01fc40f0e632a5dfe9425d6f8cb0e00d5e331b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:73:27:cc:69:11:53:e6:39:0c:40:96:58:55:
74:b3:4f:66:47:58:78:d8:ed:7f:42:46:2a:89:6f:
02:f3:87:74:03:47:17:44:00:4f:64:be:6b:fe:59:
f5:fa:78:11:f6:34:24:8b:df:4a:1f:87:8b:1b:29:
08:1c:98:92:7e:46:07:bb:9d:68:77:3a:d6:4b:74:
f5:15:de:9b:13:b1:00:24:35:df:af:c0:8e:62:76:
97:41:a8:5c:ed:09:a2:75:b6:ed:fd:e1:c1:4b:13:
35:1e:7b:dc:b6:b6:e6:a2:e8:f3:41:95:b8:4a:5a:
61:a1:40:15:dd:b0:ce:34:04:36:f0:9c:d5:d4:27:
71:10:7d:eb:4c:6b:8d:ae:06:33:8c:fa:46:35:69:
88:00:1f:5d:cd:cc:ef:20:9b:f5:12:94:04:60:b9:
b7:bd:32:a2:be:9e:df:0a:2e:6b:27:75:66:14:95:
26:ba:9a:de:98:42:3a:65:44:8b:1c:fd:07:19:d1:
ba:36:bb:ad:f9:68:94:30:a3:17:85:a0:a5:9b:02:
cd:7e:9f:22:4e:19:8f:bd:31:9e:0a:9b:89:96:3f:
23:1e:4c:e6:99:cd:a6:e9:37:46:ed:06:bc:7c:e9:
ac:7e:f7:21:1d:0c:a3:57:a6:0f:e8:43:62:2f:d5:
91:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:01:FC:40:F0:E6:32:A5:DF:E9:42:5D:6F:8C:B0:E0:0D:5E:33:1B
X509v3 Authority Key Identifier:
keyid:9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/fwH8QPDmMqXf6UJdb4yw4A1eMxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.24.0/24
193.17.26.0/24
193.17.55.0/24
IPv6:
2a0f:7940::/29
Signature Algorithm: sha256WithRSAEncryption
0d:28:03:f9:6c:b5:ae:f1:42:09:48:5d:4e:0d:2b:2f:87:6b:
30:16:72:4c:93:a2:4b:09:75:fb:92:4b:78:68:a3:3d:2f:51:
5e:6b:91:a8:35:79:07:46:cc:a4:f0:c4:96:40:64:f0:9e:c1:
9d:8d:e8:b8:04:f0:1c:6c:41:bd:b8:d3:73:d3:1f:97:b8:4a:
b3:1d:da:1c:91:08:14:88:17:d6:13:12:bc:a0:99:df:4b:66:
3c:80:55:8c:b2:15:e3:13:bb:a6:4b:c3:44:91:a8:75:19:b6:
fc:09:d9:1e:b0:17:44:68:85:3a:85:dc:c6:8a:d3:d1:aa:f2:
cf:30:68:0b:08:94:96:e7:dd:f1:0f:dd:c1:92:17:af:db:44:
77:0e:7c:fa:17:ac:92:2f:4b:ed:f7:12:35:fe:a3:e9:d0:82:
53:a5:c4:66:a8:0c:2b:8f:99:36:7a:ab:ee:14:e4:e9:21:31:
47:7a:35:49:27:e5:3c:29:eb:0c:4b:e7:2e:12:ca:b2:80:67:
f5:48:26:0a:1b:13:f3:3a:1a:3b:a8:3b:b8:84:54:13:36:89:
3a:73:77:c2:1b:9f:b9:f1:47:b5:de:62:b7:81:ae:73:33:3a:
8c:c7:c9:3f:47:4b:37:2c:46:9f:96:a3:60:d0:84:62:96:51:
ab:1b:2b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:16 2024 by rpki-client on console-fra.rpki-client.org