Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/4tWpZKoZ5PgqrtUcLqgpgMHlQAs.roa
File: 4tWpZKoZ5PgqrtUcLqgpgMHlQAs.roa (raw, json)
Hash identifier: /TWzdIyqANgo6AyHirZpdPJUaPfqaKYe9eKP9x7DHxg=
Subject key identifier: E2:D5:A9:64:AA:19:E4:F8:2A:AE:D5:1C:2E:A8:29:80:C1:E5:40:0B
Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial: 0189076B42C8A34B03727CF619CD8B68744B
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/4tWpZKoZ5PgqrtUcLqgpgMHlQAs.roa
Signing time: Thu 29 Jun 2023 13:50:17 +0000
ROA not before: Thu 29 Jun 2023 13:50:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 193.187.255.0/24 maxlen: 24
2a12:3e80:401::/48 maxlen: 48
2a12:3e80:402::/48 maxlen: 48
2a12:3e80:300::/40 maxlen: 40
2a12:3e80:500::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 01 Aug 2023 18:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:07:6b:42:c8:a3:4b:03:72:7c:f6:19:cd:8b:68:74:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
Validity
Not Before: Jun 29 13:50:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2d5a964aa19e4f82aaed51c2ea82980c1e5400b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:37:cc:87:63:1f:7b:ff:f8:9c:40:73:bc:09:
6a:04:ca:6f:ae:16:01:fa:77:cc:97:cf:6d:8c:51:
6e:85:b1:75:a9:93:6d:8c:16:14:3d:1e:a1:66:b9:
05:0b:ff:df:7a:c7:bb:8c:5b:a6:35:9f:f9:10:71:
0f:df:12:35:89:1f:81:59:cb:e0:65:e3:52:fa:2f:
88:6f:d4:cd:b2:89:0f:02:e1:14:d9:4f:ee:dd:4d:
08:30:63:00:ab:52:b7:02:e0:aa:c3:cf:f4:e2:84:
81:d5:db:10:52:af:07:78:f4:50:d7:bf:47:a3:18:
e8:96:a3:bc:a7:1f:4c:4b:c2:08:05:2e:f9:c6:4e:
9d:c7:b1:d9:1e:06:98:30:8b:be:42:3c:53:68:11:
1b:09:10:1e:99:28:eb:e4:a3:b0:31:49:6f:15:95:
58:38:40:89:41:a3:b2:bf:22:8e:83:af:a9:ea:5c:
3b:29:53:93:cb:88:46:03:c6:dc:a4:1c:da:19:8b:
06:22:15:a4:04:38:cb:3b:27:2e:a5:28:03:b1:49:
b1:22:60:40:50:5a:eb:e4:6d:b9:73:c3:86:ec:fd:
3c:57:dc:26:bd:c8:fd:dc:30:6a:7a:76:eb:1c:7c:
b5:a2:29:f2:c0:e8:23:25:95:49:b1:eb:ee:61:44:
f3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D5:A9:64:AA:19:E4:F8:2A:AE:D5:1C:2E:A8:29:80:C1:E5:40:0B
X509v3 Authority Key Identifier:
keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/4tWpZKoZ5PgqrtUcLqgpgMHlQAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.255.0/24
IPv6:
2a12:3e80:300::/40
2a12:3e80:401::-2a12:3e80:402:ffff:ffff:ffff:ffff:ffff
2a12:3e80:500::/40
Signature Algorithm: sha256WithRSAEncryption
54:18:f6:c6:d0:ff:70:9a:0f:e5:d8:f1:8f:64:23:d9:f6:29:
68:0a:7a:8c:1f:ed:59:7d:b1:3e:87:98:1a:6b:b8:1d:ee:b2:
55:6b:b0:8a:ae:8f:53:eb:0c:63:b2:8b:57:76:2f:a1:48:2e:
75:92:18:bb:65:c3:2b:60:87:cc:0e:31:f2:e3:62:ff:24:b9:
bc:a1:e6:a2:a7:3d:7b:6c:9e:f5:86:fe:be:5e:e4:66:57:59:
1a:c4:3d:43:f1:bf:68:f7:47:ca:a3:66:4a:82:f4:c6:1d:c0:
18:b5:f3:f8:18:85:42:10:56:ff:54:2b:aa:87:16:a3:2d:69:
c2:14:bb:0c:69:40:78:2c:d4:c1:f5:87:68:e5:2b:95:18:92:
58:55:35:e7:e9:83:d7:94:3a:b3:ff:94:97:36:ba:57:15:39:
fb:9f:bf:37:10:85:31:4c:39:8e:b4:8a:ef:c6:e3:cc:47:e5:
ef:55:8a:a7:63:07:b4:c8:61:e5:b4:8c:0d:5f:8a:e6:21:3a:
03:05:68:9f:8b:cb:08:08:d7:5c:5f:76:a7:87:f7:91:f3:81:
44:24:03:ad:c9:3b:56:08:87:5c:6d:1e:02:a1:c1:ba:ba:55:
ab:72:21:61:98:90:26:81:14:73:73:a6:cf:26:d3:07:96:1e:
b8:3e:e2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:31 2024 by rpki-client on console-fra.rpki-client.org