Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/4TOKP9O2MVVggmnm2PUCAQ5gzF0.roa
File: 4TOKP9O2MVVggmnm2PUCAQ5gzF0.roa (raw, json)
Hash identifier: RQSXf5j5PBS/krirvk/zE2+3xvXho/E+MdSqCu6L4l8=
Subject key identifier: E1:33:8A:3F:D3:B6:31:55:60:82:69:E6:D8:F5:02:01:0E:60:CC:5D
Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial: 0187E1BE12C10AE91C8552984B8B1E957A66
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/4TOKP9O2MVVggmnm2PUCAQ5gzF0.roa
Signing time: Wed 03 May 2023 13:12:22 +0000
ROA not before: Wed 03 May 2023 13:12:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 193.187.255.0/24 maxlen: 24
2a12:3e80:401::/48 maxlen: 48
2a12:3e80:402::/48 maxlen: 48
2a12:3e80:300::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 29 Jun 2023 13:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e1:be:12:c1:0a:e9:1c:85:52:98:4b:8b:1e:95:7a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
Validity
Not Before: May 3 13:12:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1338a3fd3b63155608269e6d8f502010e60cc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:cb:4d:92:be:7e:f6:a5:b1:59:1c:64:80:e9:
1c:2e:dc:9a:50:16:cc:92:a8:30:55:49:64:32:a3:
a1:4f:b8:e0:d6:99:05:28:54:66:55:95:e0:9f:1f:
f7:45:5d:92:e9:9a:7c:10:c5:1a:fb:43:b2:bd:ce:
c7:f2:67:14:f1:1e:74:78:4f:c5:d7:a8:12:5f:b0:
e9:97:f1:5a:64:d7:dc:b5:25:8c:c2:2b:f7:7e:2b:
7e:16:41:59:27:a5:06:bb:45:a7:b0:92:8f:9a:00:
43:a7:7c:c0:c9:a5:1a:9f:56:17:b5:17:1e:aa:1d:
eb:ce:cb:b4:66:a1:76:1e:85:e5:56:1a:ed:35:b4:
48:13:03:dd:c7:95:4e:3d:09:be:7b:5b:db:a4:17:
c7:09:a6:d9:ef:c9:72:05:be:c0:7a:da:2b:4e:2f:
9c:1c:51:76:ff:1a:09:00:7c:6e:e4:a2:db:f9:69:
3b:80:2f:a1:55:4e:2d:76:15:76:18:33:45:f5:4f:
ec:bd:2b:e5:99:69:cd:2d:03:04:90:af:a9:56:a5:
3d:79:21:b2:7c:13:d1:89:f4:aa:0b:13:a3:35:6f:
78:93:9f:00:06:b5:79:c9:df:9b:0d:a8:49:34:60:
ed:62:07:18:1b:f4:56:e5:78:d7:66:be:7a:24:40:
82:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:33:8A:3F:D3:B6:31:55:60:82:69:E6:D8:F5:02:01:0E:60:CC:5D
X509v3 Authority Key Identifier:
keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/4TOKP9O2MVVggmnm2PUCAQ5gzF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.255.0/24
IPv6:
2a12:3e80:300::/40
2a12:3e80:401::-2a12:3e80:402:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0f:3b:06:09:09:bc:9d:da:bd:d0:b4:71:ce:cc:57:30:77:c0:
50:b8:66:b6:c2:74:32:1a:39:93:f9:7e:f5:89:44:cd:c7:a8:
06:33:58:32:2a:cc:d3:0e:15:74:a7:3c:18:8c:ca:5f:11:15:
26:75:96:5b:63:a6:d4:fb:a8:85:4e:d5:e5:78:65:ae:39:b0:
9f:1e:65:2e:21:ac:63:2a:5e:e5:62:e4:71:5c:10:eb:71:c2:
d9:cb:4a:b5:a3:5c:3f:f6:ec:64:57:49:ed:58:46:00:33:ef:
4a:ba:75:5b:17:af:a0:29:af:41:73:b4:3c:be:fc:1d:48:9f:
32:ab:38:42:6c:44:81:f3:29:a8:05:1f:d4:76:91:24:79:83:
36:55:73:15:ae:4b:f5:b0:5d:ab:ff:6f:c9:85:79:93:2a:11:
07:a1:dd:d5:9a:6c:2f:81:70:25:8e:2d:03:5e:9f:f4:a4:cb:
c3:de:0a:e3:27:63:42:88:1c:85:ee:6f:91:de:f5:32:c3:18:
a6:ae:06:bb:68:12:5d:07:a2:b8:43:af:44:d9:2a:98:82:f8:
d4:30:13:a1:4b:91:9a:c8:e7:3e:c9:52:d2:a4:23:21:f9:df:
4b:b0:91:6d:4d:39:5b:75:6a:5d:4a:7d:3d:5f:7f:37:7d:d5:
9e:d3:94:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:18 2024 by rpki-client on console-ams.rpki-client.org