Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/RAne7b36bSWfVV1U1XRlQ9l8IGk.roa
File: RAne7b36bSWfVV1U1XRlQ9l8IGk.roa (raw, json)
Hash identifier: pC/6eV/Zhe/eB2X7MZBUOVYm46Vqi3LBEO6+Cl7obD0=
Subject key identifier: 44:09:DE:ED:BD:FA:6D:25:9F:55:5D:54:D5:74:65:43:D9:7C:20:69
Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial: 018B70D48CAD1BCB0445209F5653C30026BA
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/RAne7b36bSWfVV1U1XRlQ9l8IGk.roa
Signing time: Fri 27 Oct 2023 11:10:59 +0000
ROA not before: Fri 27 Oct 2023 11:10:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 193.187.255.0/24 maxlen: 24
2a12:3e80:401::/48 maxlen: 48
2a12:3e80:402::/48 maxlen: 48
2a12:3e80:500::/40 maxlen: 40
2a12:3e80:300::/40 maxlen: 40
2a12:3e80:200::/40 maxlen: 40
2a12:3e80::/40 maxlen: 40
2a12:3e80:100::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 29 Nov 2023 13:25:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:70:d4:8c:ad:1b:cb:04:45:20:9f:56:53:c3:00:26:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
Validity
Not Before: Oct 27 11:10:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4409deedbdfa6d259f555d54d5746543d97c2069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e6:f5:ee:ed:5a:64:1e:79:b3:c2:d6:c8:d4:
8d:01:3b:a5:2a:51:44:eb:21:58:54:25:65:a6:0a:
d3:cb:87:8e:e0:d6:cc:68:c5:34:6e:0b:e6:b6:9f:
2f:c8:87:c5:6c:f7:d6:b7:87:28:7f:88:cf:98:8f:
99:70:16:4d:21:80:53:c6:83:0c:8b:cb:9d:de:c1:
74:c5:5d:97:ca:bf:fa:82:a0:6c:40:12:28:86:c8:
68:8a:22:7e:71:36:f5:66:ff:be:97:39:98:32:22:
93:02:5d:c2:9f:77:cf:9a:03:7f:44:90:22:c4:fa:
30:25:29:f3:c5:18:49:31:0b:35:d9:58:d5:b6:91:
dc:e0:e1:b9:9d:94:b9:e6:4e:ec:77:c6:36:db:bf:
ae:d2:f4:7a:09:28:26:24:02:ec:1c:0b:37:03:b9:
7b:ef:5c:33:4e:5d:da:1a:c1:5e:bc:17:61:8a:f1:
c2:6d:1e:4c:9a:a4:b0:df:64:59:9d:6b:77:a4:95:
3b:68:1b:65:38:45:02:31:40:a5:50:66:09:d9:90:
1f:7b:bf:3a:93:0b:59:25:5a:83:4f:80:f4:5d:b0:
14:d1:f9:6a:59:8c:77:ee:f3:f6:9c:93:7b:fb:f4:
8f:8d:0e:6b:07:ba:33:32:a5:4e:bd:0b:3c:68:7e:
71:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:09:DE:ED:BD:FA:6D:25:9F:55:5D:54:D5:74:65:43:D9:7C:20:69
X509v3 Authority Key Identifier:
keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/RAne7b36bSWfVV1U1XRlQ9l8IGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.255.0/24
IPv6:
2a12:3e80::-2a12:3e80:100:ffff:ffff:ffff:ffff:ffff
2a12:3e80:200::/39
2a12:3e80:401::-2a12:3e80:402:ffff:ffff:ffff:ffff:ffff
2a12:3e80:500::/40
Signature Algorithm: sha256WithRSAEncryption
4f:05:86:7c:1d:a5:d3:e9:23:b0:97:a4:0b:65:08:49:86:4c:
48:b4:c4:9e:c9:9c:3e:c2:c0:e7:66:6f:4b:98:cf:ea:0e:cb:
e3:d1:af:f8:74:fb:4c:95:ea:62:9f:b3:1c:b2:03:f7:bc:75:
06:bd:59:e5:b2:e0:6b:07:5d:d4:84:c4:5f:d9:71:ca:4b:9f:
57:6d:00:8b:ba:80:9a:d1:a0:0a:92:d3:2d:19:dc:d8:c7:bc:
e3:bb:8b:b0:e0:aa:c8:10:d7:16:93:49:f4:96:75:ac:5e:e3:
dd:01:22:47:6f:1d:36:4e:ef:04:14:9a:18:8a:ec:28:cf:4c:
98:04:02:b3:27:68:79:73:9d:07:95:41:b0:e2:00:f9:d4:e3:
ed:68:98:97:55:e3:54:70:fe:18:bf:4b:dc:ae:eb:f6:34:b4:
0b:5c:db:2b:10:5d:0f:ff:0e:77:d2:17:8d:c7:82:dd:6a:2a:
ec:58:a1:20:ef:e9:6e:3e:ce:5c:30:ac:4d:33:a7:d9:ef:7d:
27:7a:80:c0:4e:1a:7d:36:e6:34:60:b1:b0:a5:41:b2:1e:a3:
88:96:bc:ee:1e:57:8b:6d:02:0e:3f:52:3f:cd:a4:bc:f9:83:
4c:a2:91:de:b1:4d:60:c5:a8:04:46:67:40:78:d0:8b:00:fb:
aa:f6:45:93
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:18 2024 by rpki-client on console-ams.rpki-client.org