Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/_Crc9hCEZJ3sfnpdK4jFj9qmUSA.roa
File: _Crc9hCEZJ3sfnpdK4jFj9qmUSA.roa (raw, json)
Hash identifier: eOBHAJuFlWhLMk9Y0leNQMoHTgGji00aI1AqldByB7w=
Subject key identifier: FC:2A:DC:F6:10:84:64:9D:EC:7E:7A:5D:2B:88:C5:8F:DA:A6:51:20
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018BA986AE80A40CFF9F5747D3A0949306E6
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/_Crc9hCEZJ3sfnpdK4jFj9qmUSA.roa
Signing time: Tue 07 Nov 2023 11:24:17 +0000
ROA not before: Tue 07 Nov 2023 11:24:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.37.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a9:86:ae:80:a4:0c:ff:9f:57:47:d3:a0:94:93:06:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Nov 7 11:24:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc2adcf61084649dec7e7a5d2b88c58fdaa65120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:30:52:79:c8:63:52:d6:9c:af:72:48:76:
7e:bc:7d:48:18:39:dd:67:28:1f:f8:67:e7:f2:96:
7f:1c:f0:ed:ed:14:39:71:04:1c:b2:54:71:1a:2c:
e2:5b:e3:3c:98:1f:b6:d5:2a:59:ce:fa:d2:53:98:
13:b5:e8:25:bf:30:6c:8d:78:01:4e:a9:89:ca:0f:
63:a2:f3:1b:33:35:74:d4:fb:de:6f:36:fb:00:06:
80:ad:f0:e4:cd:e7:8f:fd:29:d2:f3:c9:fa:31:48:
e3:75:99:f1:e7:00:88:e1:1e:85:dd:10:a8:e8:05:
8e:e9:fe:9e:a4:ee:0b:dd:86:60:ee:5b:cd:e8:f6:
65:3a:35:81:86:40:47:f3:68:46:11:de:6d:50:c7:
e8:64:d5:02:83:21:72:eb:0b:32:03:01:fc:6c:6f:
81:1d:e6:3a:1f:dc:1c:5f:eb:b0:fc:f6:f2:fa:9d:
37:0f:e1:7a:e2:84:20:78:89:ea:31:e5:7d:27:79:
ed:5d:ab:6c:8e:d8:4b:bd:46:fd:79:89:8c:d9:89:
14:91:50:6b:ce:af:ec:07:d2:85:1e:61:0d:5d:bf:
97:14:0c:68:a0:48:ff:64:de:21:5e:78:7c:06:6f:
61:9e:db:8a:5d:48:9b:d8:5a:36:31:ce:7a:d1:42:
14:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2A:DC:F6:10:84:64:9D:EC:7E:7A:5D:2B:88:C5:8F:DA:A6:51:20
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/_Crc9hCEZJ3sfnpdK4jFj9qmUSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.196.0/24
Signature Algorithm: sha256WithRSAEncryption
77:a7:dd:e7:12:c8:f2:df:ca:b5:bb:5b:c4:39:34:65:20:1d:
26:d9:f7:68:65:6d:14:8f:c7:b9:5f:ae:4d:eb:78:af:43:44:
47:1a:d6:a6:07:0e:e9:f2:5f:c0:b8:a3:06:32:10:b4:af:e0:
1b:6a:2f:a3:5b:43:ce:e3:09:da:d6:62:64:5c:f5:2a:f0:50:
9d:0b:96:3f:cc:67:44:af:d1:b9:06:cf:21:d2:b1:f3:5d:70:
84:5e:23:c4:42:46:c2:71:60:28:2a:81:f2:12:a3:6c:69:52:
a2:14:30:0d:d4:06:10:41:88:fd:70:69:ef:d0:f8:86:ac:c8:
e7:e6:e1:f7:59:78:e7:6c:1a:da:52:75:71:ad:26:59:90:70:
50:97:dd:a5:3c:a6:7e:ea:4d:8f:13:6e:3a:08:ea:ec:5e:10:
91:e4:91:25:09:b6:f3:19:b0:be:26:92:ce:98:0f:ec:ae:c1:
a1:66:20:15:3d:a9:2d:93:1b:e9:e1:a0:6e:42:47:9d:bd:fb:
1a:0c:ab:7f:14:bc:80:21:a0:ee:b7:b4:52:44:36:c6:68:60:
bd:3c:4e:c5:16:29:bd:43:3d:1d:60:da:df:2e:9f:e6:80:de:
1e:00:9c:dd:d3:d8:5f:af:6d:5d:13:e6:05:4e:65:01:ef:84:
e5:a9:4c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org