Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/owXi0B2NpVJaAWtYPlyxuz4LYIM.roa
File: owXi0B2NpVJaAWtYPlyxuz4LYIM.roa (raw, json)
Hash identifier: IGs8jpR8sNoU/0zJNtigCw2znn86nBVPEbrLe+wrVF8=
Subject key identifier: A3:05:E2:D0:1D:8D:A5:52:5A:01:6B:58:3E:5C:B1:BB:3E:0B:60:83
Certificate issuer: /CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Certificate serial: 018C0263C386B42C0EE722121A71BA6A387E
Authority key identifier: 67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/owXi0B2NpVJaAWtYPlyxuz4LYIM.roa
Signing time: Fri 24 Nov 2023 17:32:21 +0000
ROA not before: Fri 24 Nov 2023 17:32:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12529
IP address blocks: 193.169.190.0/24 maxlen: 24
193.169.190.0/23 maxlen: 23
193.169.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:02:63:c3:86:b4:2c:0e:e7:22:12:1a:71:ba:6a:38:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Validity
Not Before: Nov 24 17:32:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a305e2d01d8da5525a016b583e5cb1bb3e0b6083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7f:af:1b:19:3c:12:af:d7:d4:eb:26:fe:72:
d8:11:96:9a:42:09:c1:40:08:02:3e:6a:72:60:dc:
c5:e8:05:c4:ff:ba:60:22:81:da:46:b4:1e:f8:e1:
ed:0e:b7:da:92:1b:08:66:51:76:e1:54:80:38:9b:
2d:93:5a:5b:85:f8:29:e5:69:bd:8c:f0:9c:81:ea:
14:a3:2b:45:1f:48:b3:31:e4:dc:93:7e:98:1a:6d:
cb:3d:3a:d0:75:d2:98:b8:da:17:d2:d3:00:9f:39:
f2:d9:8a:48:61:6a:06:61:4b:ae:9e:9e:74:a7:bb:
c7:e3:66:a4:b3:6f:6e:6f:52:35:73:38:de:06:a9:
f1:f0:63:93:ba:68:e5:5e:82:44:fb:d2:c4:51:05:
af:e4:b9:65:b5:07:ea:5d:5e:24:60:6e:b2:f7:99:
62:93:b6:a2:aa:53:ee:7d:a0:fd:d8:3e:89:51:cd:
7b:a4:8a:1a:84:36:0f:bc:5d:51:5e:83:d1:f3:de:
69:8e:eb:ad:ff:1f:39:43:fd:58:89:9a:ba:ac:fa:
18:69:4a:2f:e2:14:c0:4e:a2:33:d3:49:5e:cb:44:
49:79:90:a6:e5:b8:b1:0a:6a:f1:55:64:63:cb:01:
2c:08:1d:1e:a9:f3:00:57:21:6e:6a:c5:ce:58:da:
2f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:05:E2:D0:1D:8D:A5:52:5A:01:6B:58:3E:5C:B1:BB:3E:0B:60:83
X509v3 Authority Key Identifier:
keyid:67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/owXi0B2NpVJaAWtYPlyxuz4LYIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.190.0/23
Signature Algorithm: sha256WithRSAEncryption
28:03:9d:a8:07:06:5e:87:08:5b:92:ed:f5:f6:5b:ea:40:f7:
4b:d8:0b:ed:3c:bf:bf:52:84:2e:68:ef:80:19:49:ac:a4:85:
9c:08:0a:99:91:c2:79:ce:c7:25:cc:66:4d:79:7d:cb:70:ab:
d9:59:33:a5:fa:c8:40:4f:13:3f:39:bd:27:55:44:16:55:dc:
81:b5:86:7e:10:e2:0c:11:08:fb:ac:54:78:75:20:2b:08:4d:
fd:80:03:fd:c1:10:f6:35:9a:e0:14:29:3d:f8:9c:a0:07:c2:
2c:9c:02:cc:d1:31:13:14:d0:f9:85:32:1a:87:f0:d4:42:13:
5c:3d:9c:44:07:9c:a3:09:79:18:c3:34:78:b9:17:1b:44:d0:
99:db:8e:03:0c:e5:1e:40:f5:8e:01:f0:39:f4:f2:b2:1f:84:
a2:aa:a1:1b:cc:ba:bf:29:71:bf:bd:79:52:77:ca:2f:db:81:
1e:3d:65:82:b6:4b:0b:9e:0b:c6:fa:a6:b5:17:c2:df:e3:01:
f3:4a:01:9e:4e:cb:29:5d:b1:bf:cd:63:be:9f:48:69:90:74:
26:90:3c:8f:9e:ea:7e:3e:1c:aa:54:b0:7e:5d:f3:2c:91:fe:
8d:1d:e2:72:5f:8c:3c:a5:0b:01:7d:d3:4f:a8:e7:44:8a:9b:
c7:48:0c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:40 2024 by rpki-client on console-fra.rpki-client.org