Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/B9eVXb2Oi-C80s_cbwwaIdHTexo.roa
File: B9eVXb2Oi-C80s_cbwwaIdHTexo.roa (raw, json)
Hash identifier: /Ka8CXFvxRY2ysnaOXyGusZ7CrZVxyZZmFRdUtB1SQ0=
Subject key identifier: 07:D7:95:5D:BD:8E:8B:E0:BC:D2:CF:DC:6F:0C:1A:21:D1:D3:7B:1A
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 01856EAFD3C7ACB85A0D59CF0EC4F09D48A1
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/B9eVXb2Oi-C80s_cbwwaIdHTexo.roa
Signing time: Sun 01 Jan 2023 18:54:54 +0000
ROA not before: Sun 01 Jan 2023 18:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197326
IP address blocks: 193.77.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:d3:c7:ac:b8:5a:0d:59:cf:0e:c4:f0:9d:48:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Jan 1 18:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07d7955dbd8e8be0bcd2cfdc6f0c1a21d1d37b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4a:57:ea:30:7a:d6:11:03:85:19:a9:70:56:
cd:b1:9e:9b:3f:6d:9c:09:b3:2d:5a:7a:3f:6a:57:
0c:38:80:e5:56:41:40:f7:58:60:31:15:6f:d5:a0:
9e:34:69:a7:f4:38:47:a3:e9:c2:9e:87:77:3b:b1:
3d:60:cd:49:4e:53:cd:44:49:7b:9e:0f:7a:3e:be:
c1:05:82:51:06:75:c0:18:83:36:dc:63:52:5a:b0:
b3:b3:7f:4a:02:c0:c1:c1:d9:83:fe:b7:67:c2:8b:
70:25:22:e3:16:0f:6d:b4:3d:89:69:22:0f:5b:65:
c2:dc:10:43:af:da:54:59:67:d0:dc:16:b0:99:6b:
2c:2e:1a:47:c2:11:11:83:b1:e7:ec:52:df:ed:7a:
3b:e1:35:59:b3:2b:31:f6:7b:9e:5b:f1:e0:0a:ab:
c2:66:36:05:04:d4:a4:4e:25:5e:b8:da:8f:df:53:
a6:63:23:6a:c6:a2:d0:84:83:be:16:c9:c1:91:77:
25:69:04:23:30:c2:50:ba:02:bd:b3:df:2d:1f:52:
59:98:19:ff:3c:b0:49:cf:d1:0a:ce:1a:80:e5:f2:
01:2b:a6:4f:da:1b:d5:8b:85:e7:89:06:94:fa:c4:
b0:0e:b5:1f:22:6d:30:78:71:ca:0b:96:e5:b4:a5:
85:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D7:95:5D:BD:8E:8B:E0:BC:D2:CF:DC:6F:0C:1A:21:D1:D3:7B:1A
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/B9eVXb2Oi-C80s_cbwwaIdHTexo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.77.42.0/24
Signature Algorithm: sha256WithRSAEncryption
50:e0:cf:8c:d5:8f:7b:49:be:b7:f4:2d:ef:47:ef:c0:6e:71:
f6:d8:46:f3:ee:52:3c:2a:22:7d:22:48:0c:46:b0:67:d8:01:
60:02:73:b8:e9:95:ef:21:1f:0a:de:ab:c5:7c:39:7d:6d:3e:
df:c6:4d:0f:7a:c5:c7:f7:99:f3:27:9a:2f:26:6c:fc:77:5f:
e2:ce:14:7b:54:c2:93:df:26:d8:31:8f:0a:5e:58:e4:d6:2d:
57:c6:63:cc:25:db:8c:8c:7c:2e:b1:3b:7b:15:67:6a:01:ae:
61:c9:9d:3b:4a:ad:3a:a4:a4:44:68:33:ca:4d:71:cf:73:cf:
f0:79:1a:a2:8b:35:42:a4:97:07:78:b0:d4:aa:c4:d1:d4:a5:
8d:1a:28:f5:ba:c6:00:d6:7a:c7:7b:a1:b4:60:a4:1c:3a:07:
00:c7:fa:12:0c:f8:11:f4:be:09:ec:56:3f:58:4c:48:c8:9c:
8f:58:ce:b1:46:92:d7:a0:47:cb:b9:c3:f5:a4:1d:79:68:c9:
6f:b8:ad:cd:ee:45:f2:e9:53:f8:c2:6f:00:a2:d1:6a:7a:4a:
dc:ba:1e:87:97:89:3c:91:40:c0:42:17:1b:4a:38:2f:25:54:
3f:f0:6d:e3:fd:a0:f3:09:a1:1a:76:91:47:d6:e6:29:da:89:
79:aa:ac:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:09 2024 by rpki-client on console-fra.rpki-client.org