Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/os-P876h25MBGJRu9Hm-xeNxhOc.roa
File: os-P876h25MBGJRu9Hm-xeNxhOc.roa (raw, json)
Hash identifier: jcLYPBhFPmqcLyoBWxLkOzu2EAjfMkJkk02T9qsjf5c=
Subject key identifier: A2:CF:8F:F3:BE:A1:DB:93:01:18:94:6E:F4:79:BE:C5:E3:71:84:E7
Certificate issuer: /CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Certificate serial: 01859CDB1A1E02917BA9E1A3A0FB6ACDBEB2
Authority key identifier: 9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/os-P876h25MBGJRu9Hm-xeNxhOc.roa
Signing time: Tue 10 Jan 2023 18:04:42 +0000
ROA not before: Tue 10 Jan 2023 18:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51262
IP address blocks: 193.17.26.0/24 maxlen: 24
193.17.55.0/24 maxlen: 24
2a0f:7940::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 22 Aug 2023 11:55:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9c:db:1a:1e:02:91:7b:a9:e1:a3:a0:fb:6a:cd:be:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Validity
Not Before: Jan 10 18:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2cf8ff3bea1db930118946ef479bec5e37184e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:93:d8:50:49:b8:fe:36:13:44:e6:22:f5:47:
77:99:9d:69:ab:c0:fe:7a:b0:a1:5e:91:c4:83:ea:
24:4e:cb:3a:f8:97:d9:56:77:38:d5:4b:02:a0:53:
7d:5b:59:4c:eb:e9:fd:5e:b6:ed:75:d5:9a:5a:ee:
d1:16:ed:f7:4b:7c:82:51:c0:22:35:05:46:2a:e6:
46:81:a1:14:10:8c:ec:33:1d:89:53:a4:f1:d0:03:
d0:d9:d6:33:3f:7f:86:18:82:ca:0d:2e:84:56:c6:
d1:6a:0c:3a:2c:9e:5a:67:43:ca:f2:21:b3:c5:a7:
02:55:07:ca:63:cd:bb:3d:ac:26:de:43:d5:e8:04:
0e:dc:7a:b0:69:16:40:d9:52:8a:00:05:0e:93:13:
91:80:57:e0:2c:6a:59:0a:e1:f1:a9:a0:08:42:80:
37:8c:22:55:4f:53:d6:79:0e:e2:91:be:9b:d0:38:
db:99:09:4d:13:cc:80:f8:db:81:f7:f8:6b:85:a1:
49:90:7a:49:af:f9:bc:69:38:4f:02:ec:21:96:e3:
82:d9:ea:bd:b8:a5:fc:57:ba:3d:bd:72:fa:11:b1:
81:64:ee:d1:9d:24:5c:74:25:07:60:db:d4:e7:c0:
5e:a4:fe:44:30:b9:44:c6:0d:fe:b5:05:53:fc:4a:
d3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CF:8F:F3:BE:A1:DB:93:01:18:94:6E:F4:79:BE:C5:E3:71:84:E7
X509v3 Authority Key Identifier:
keyid:9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/os-P876h25MBGJRu9Hm-xeNxhOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.26.0/24
193.17.55.0/24
IPv6:
2a0f:7940::/29
Signature Algorithm: sha256WithRSAEncryption
11:cb:4f:9b:e0:9e:89:9d:15:2d:0d:99:07:bc:67:35:fc:25:
a6:7b:fa:38:09:04:af:9e:cd:db:7e:9c:84:77:09:74:d2:3f:
0e:99:9a:57:11:80:85:31:b5:34:d6:57:f3:c7:16:5b:47:86:
38:9f:07:83:7c:ee:bb:57:df:32:70:45:ce:5b:87:b3:e6:09:
22:17:f6:4e:36:36:3b:af:55:86:a1:e4:ef:9f:87:ba:ef:56:
5f:d6:00:a3:7c:ac:a3:c8:d4:80:af:f0:66:33:0e:ed:bb:0d:
d1:42:c9:c1:74:64:58:f1:41:49:7b:1f:63:91:32:13:d1:7b:
62:1d:62:44:ba:8f:b8:9b:16:5f:a4:1d:64:07:d3:12:62:2a:
24:20:fc:6a:62:f2:dc:bb:0b:f2:f1:66:c4:35:54:1b:7f:c9:
56:bd:83:51:4c:11:89:2e:b4:d8:5e:3a:00:5f:f6:de:e5:f2:
43:e9:64:5c:8e:bd:cd:1a:11:74:9b:ad:b5:98:fc:be:12:41:
0c:b6:05:a5:a7:c1:31:1e:85:fd:d7:88:62:b0:92:5c:50:e3:
eb:93:3e:ae:13:4f:f5:6c:80:bb:84:7e:09:7f:4e:03:19:ec:
5d:19:55:c3:4e:b4:3a:86:87:5d:df:22:b7:ef:f8:30:2b:a9:
02:1b:08:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:55 2024 by rpki-client on console-ams.rpki-client.org