Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/1-2mCm340eMDoe9lQhS8sfbPx5NQ.roa
File: 1-2mCm340eMDoe9lQhS8sfbPx5NQ.roa (raw, json)
Hash identifier: +MVsnPp02DKZBZdgY+D1DdBTeSg14nce0AHN40y+iRg=
Subject key identifier: FB:69:82:9B:7E:34:78:C0:E8:7B:D9:50:85:2F:2C:7D:B3:F1:E4:D4
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018570F0AEAA302157907F73786F5879883A
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/1-2mCm340eMDoe9lQhS8sfbPx5NQ.roa
Signing time: Mon 02 Jan 2023 05:24:59 +0000
ROA not before: Mon 02 Jan 2023 05:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 193.37.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jan 2023 12:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:ae:aa:30:21:57:90:7f:73:78:6f:58:79:88:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 2 05:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb69829b7e3478c0e87bd950852f2c7db3f1e4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9e:df:c6:af:00:23:a0:61:d4:13:ef:17:fb:
2a:f9:3b:94:67:92:66:da:00:12:43:a4:6f:1e:63:
f9:70:a9:4a:94:e0:39:d9:f5:26:74:4b:3a:da:08:
ae:34:1f:fe:ca:b1:ed:55:7b:02:56:fe:42:89:e7:
55:3b:29:9c:a8:23:a4:21:e8:9f:b7:87:f2:01:96:
e0:33:a8:09:84:33:19:d8:d3:3c:0d:43:97:4c:0d:
f2:93:cb:b9:15:17:1e:2e:33:4c:d9:85:da:96:8d:
8c:e3:1f:37:b0:48:7e:8d:f8:c2:e7:ad:a8:54:76:
16:68:5a:c7:e1:cb:cc:bd:f2:38:5f:de:a2:66:26:
3f:ec:3d:58:00:b3:8c:75:a7:56:44:79:8f:49:8b:
9d:39:d4:ad:69:6b:a6:07:42:52:ef:62:4c:82:0b:
81:93:d7:31:27:a9:79:6d:41:96:f5:72:b0:1f:81:
b3:de:90:21:80:8f:70:02:ec:4f:c1:36:eb:e1:d9:
3e:50:ad:67:70:db:35:5b:4d:e8:d4:23:7f:31:b4:
8f:63:0f:90:55:0b:8e:6a:2a:ad:d8:ee:61:44:97:
77:f2:75:1d:f7:2c:08:a6:1b:53:bd:cd:96:30:f8:
7a:1f:24:40:76:c9:1e:0e:15:d5:82:b0:e7:c7:bd:
5b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:69:82:9B:7E:34:78:C0:E8:7B:D9:50:85:2F:2C:7D:B3:F1:E4:D4
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/1-2mCm340eMDoe9lQhS8sfbPx5NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.199.0/24
Signature Algorithm: sha256WithRSAEncryption
20:e0:d5:b6:ce:db:e5:01:0c:e8:63:77:47:cd:f3:1d:58:7a:
f6:98:ae:c2:2e:ec:16:17:7e:8f:e1:45:32:fa:17:30:c7:3c:
a9:e6:20:cf:ca:98:56:15:fc:a1:f9:fb:82:65:72:f7:6f:ad:
c5:dc:6c:8f:2e:07:cb:e4:f0:62:82:ea:ed:4e:9a:3f:2c:89:
30:66:4a:d0:bf:c4:c4:f1:36:68:c2:1a:3d:b3:30:94:93:86:
39:0a:06:83:ee:7e:f5:f7:e0:6c:f7:d2:0a:60:94:6b:24:5c:
08:fa:3d:d0:2a:b2:34:3e:92:a4:b6:74:72:fa:7e:91:80:8d:
f5:96:d2:6c:64:1d:42:31:fa:a3:5f:42:ff:24:03:4b:5f:11:
85:c1:15:3d:90:f9:f4:c4:54:32:06:32:e7:99:5b:b0:24:e5:
a1:5f:04:7b:6d:02:6c:7b:ac:14:d3:ae:a3:f0:32:b3:06:1f:
27:6f:46:d5:17:40:6b:92:28:8e:ee:f2:b8:bf:0f:fc:76:7a:
37:39:f2:7b:c9:54:67:4e:4a:f5:62:46:37:01:3a:45:81:04:
91:7c:69:ba:8c:32:3c:42:6f:79:0e:f3:8a:cb:89:bb:d5:3c:
7a:60:44:ce:ac:67:9b:54:3e:e5:08:d9:ee:18:aa:c0:db:ef:
ee:ae:9a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org