Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/_d5eBkW0HbBgBWUu2J4YH2b1zeE.roa
File: _d5eBkW0HbBgBWUu2J4YH2b1zeE.roa (raw, json)
Hash identifier: y+sWBHq3AtJcobhVqS7rwE+MjQNUY0t2uoNNOCGVAQU=
Subject key identifier: FD:DE:5E:06:45:B4:1D:B0:60:05:65:2E:D8:9E:18:1F:66:F5:CD:E1
Certificate issuer: /CN=ba877e5b28d00b2755d63dd0c581c9fe49460675
Certificate serial: 01856F390C9B67BFC6577837A92838D9DF8E
Authority key identifier: BA:87:7E:5B:28:D0:0B:27:55:D6:3D:D0:C5:81:C9:FE:49:46:06:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uod-WyjQCydV1j3QxYHJ_klGBnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/_d5eBkW0HbBgBWUu2J4YH2b1zeE.roa
Signing time: Sun 01 Jan 2023 21:24:47 +0000
ROA not before: Sun 01 Jan 2023 21:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61023
IP address blocks: 193.162.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:0c:9b:67:bf:c6:57:78:37:a9:28:38:d9:df:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba877e5b28d00b2755d63dd0c581c9fe49460675
Validity
Not Before: Jan 1 21:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdde5e0645b41db06005652ed89e181f66f5cde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b0:4b:76:9f:6e:23:d9:f0:02:5f:b5:da:49:
20:f1:99:cb:eb:84:bc:6d:70:7c:ee:f1:21:70:ac:
71:64:5d:fa:5d:d3:47:52:65:02:56:5e:0e:31:b4:
6b:e6:b5:c5:c7:58:ee:55:de:17:9c:62:ab:fa:b0:
66:40:d3:8a:b6:3b:0f:39:f8:39:53:43:24:07:b1:
58:3c:c7:b7:9f:f8:fe:bc:a7:9d:17:90:f2:35:31:
dc:41:54:ea:75:d4:ed:e0:fb:4b:e4:a9:ce:91:fb:
6b:fc:7a:23:b3:31:6e:77:aa:23:36:72:8c:f4:c4:
b1:92:a4:61:e2:58:32:fb:6b:e3:1e:b9:bb:c8:b8:
de:fd:97:8f:80:cb:d3:aa:00:57:87:d2:3d:30:ea:
fb:96:04:0b:5d:af:09:b7:fc:02:15:a2:9e:fa:e5:
3b:df:62:2a:bf:fd:da:3f:c0:01:5b:d1:3e:18:4e:
13:e2:cc:26:4d:23:1a:04:38:5f:5d:fe:82:87:71:
9c:65:a2:8d:77:2f:7c:eb:7d:09:b6:00:48:93:e2:
24:90:a7:ac:26:92:b9:56:1c:c0:8b:4e:c2:51:c5:
72:f8:48:b9:a6:a6:01:85:25:bf:cb:79:02:8b:57:
bc:54:47:58:36:d6:63:52:6a:bb:39:c5:ed:8a:a7:
d2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DE:5E:06:45:B4:1D:B0:60:05:65:2E:D8:9E:18:1F:66:F5:CD:E1
X509v3 Authority Key Identifier:
keyid:BA:87:7E:5B:28:D0:0B:27:55:D6:3D:D0:C5:81:C9:FE:49:46:06:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uod-WyjQCydV1j3QxYHJ_klGBnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/_d5eBkW0HbBgBWUu2J4YH2b1zeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.103.0/24
Signature Algorithm: sha256WithRSAEncryption
58:44:51:0e:4e:4a:23:e9:52:99:e0:f9:fc:87:cc:34:a6:1e:
46:5e:d0:53:fb:d6:b8:4a:7b:f7:c7:3d:3b:7f:b7:44:bb:6e:
b5:fc:f5:d1:c5:85:af:39:0f:1d:4f:b5:8c:b7:ef:d5:7a:d0:
79:2b:90:b0:68:58:e6:2c:a0:3c:48:ff:65:52:61:3d:fd:0b:
2f:91:f3:07:ff:e2:82:ae:b3:f1:a3:dd:5c:34:a2:51:b8:c0:
d9:db:ed:f9:80:9a:fc:04:03:f8:97:52:9f:78:a5:89:4b:16:
86:a3:d5:d6:5d:28:fc:7c:4b:2e:fb:90:56:ae:63:5f:c0:ec:
5c:aa:91:11:07:1b:47:3f:20:c5:1c:56:2c:df:99:96:3c:64:
29:02:0b:dc:22:95:74:dc:67:e6:7e:c0:5b:c4:da:32:2a:ed:
47:c9:36:f0:07:67:eb:ec:d4:d2:6b:1c:2f:9e:70:9f:31:b1:
75:06:5b:12:f6:2b:b4:55:04:6b:70:49:7b:48:f2:55:0a:d1:
b2:b7:98:13:68:2b:9d:27:9e:8a:7d:39:c3:82:aa:64:1f:48:
ad:fd:d5:97:18:90:3f:e7:cc:23:43:9b:6f:76:92:de:23:b7:
27:57:33:70:ca:34:4b:e8:cc:5e:3b:6d:b2:2c:54:10:be:e1:
1f:b5:bc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:55 2024 by rpki-client on console-fra.rpki-client.org