Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/i0Mhbw-Lq_MqJhhr66WMDM2S7dM.roa
File: i0Mhbw-Lq_MqJhhr66WMDM2S7dM.roa (raw, json)
Hash identifier: URGFaRONUrNJVe32DK3ZTm1sa+jkSv6jCBrZwltSf7I=
Subject key identifier: 8B:43:21:6F:0F:8B:AB:F3:2A:26:18:6B:EB:A5:8C:0C:CD:92:ED:D3
Certificate issuer: /CN=875fc80242d2e69ebd0f22b5e3cc457594ae90ac
Certificate serial: 018D1CEA45CC3CEA887602CF3C4E8AA8D83C
Authority key identifier: 87:5F:C8:02:42:D2:E6:9E:BD:0F:22:B5:E3:CC:45:75:94:AE:90:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1_IAkLS5p69DyK148xFdZSukKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/i0Mhbw-Lq_MqJhhr66WMDM2S7dM.roa
Signing time: Thu 18 Jan 2024 14:12:11 +0000
ROA not before: Thu 18 Jan 2024 14:12:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 193.169.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 18:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1c:ea:45:cc:3c:ea:88:76:02:cf:3c:4e:8a:a8:d8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875fc80242d2e69ebd0f22b5e3cc457594ae90ac
Validity
Not Before: Jan 18 14:12:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b43216f0f8babf32a26186beba58c0ccd92edd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c0:25:cb:16:b7:7a:97:ab:fe:64:60:46:95:
fb:f8:cf:1e:43:ae:60:91:41:21:e0:e3:dd:de:ae:
f9:91:90:b3:f7:ef:49:0f:5a:1f:47:1a:ba:c8:b7:
aa:96:7b:4d:3b:40:97:d9:c9:01:2e:48:58:af:89:
59:f9:88:01:d0:c5:bf:32:51:93:56:6f:f4:30:57:
e4:18:3e:45:8a:95:c8:36:c7:d6:9f:06:6c:9d:eb:
38:dd:c0:7c:eb:28:7e:4d:34:82:e7:0e:55:37:55:
90:34:56:a1:4b:3a:aa:50:f2:0b:1e:2b:8c:a6:80:
30:bc:10:40:43:4c:e6:82:89:57:16:c9:fd:69:8b:
88:80:64:9b:0a:fc:c2:ca:a2:a9:51:9c:bb:4c:7a:
90:45:30:b5:8f:b9:8a:e0:65:a6:07:47:8c:b4:2c:
1a:1d:c3:e6:83:c0:58:76:3b:44:84:1a:0a:78:2b:
2f:cf:71:f6:40:0f:f5:eb:20:08:d2:96:6e:b8:9a:
68:23:3c:78:47:bb:67:82:56:60:19:ac:ad:d8:f8:
47:db:db:14:c3:8f:e4:95:fe:d6:86:65:c9:15:5f:
ab:48:3e:8a:3d:15:1c:57:aa:01:4c:08:65:a1:30:
04:9a:a0:50:fd:8f:2a:d1:c2:10:30:9e:4e:55:1e:
48:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:43:21:6F:0F:8B:AB:F3:2A:26:18:6B:EB:A5:8C:0C:CD:92:ED:D3
X509v3 Authority Key Identifier:
keyid:87:5F:C8:02:42:D2:E6:9E:BD:0F:22:B5:E3:CC:45:75:94:AE:90:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1_IAkLS5p69DyK148xFdZSukKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/i0Mhbw-Lq_MqJhhr66WMDM2S7dM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.59.0/24
Signature Algorithm: sha256WithRSAEncryption
20:22:5c:f4:2d:c5:e2:b5:b3:c5:ae:86:ce:cd:04:31:c7:eb:
bc:b4:a0:71:2f:74:e0:40:42:22:28:2d:20:71:8e:3f:a1:5f:
71:a4:bd:fb:60:58:fd:3e:dd:70:e1:18:28:75:be:1f:d8:9e:
6d:07:db:c9:dd:25:12:5c:d9:3a:55:6d:da:eb:26:53:e6:fe:
ab:3b:9b:36:d3:49:05:b5:85:94:7e:5f:ce:d0:da:63:9d:02:
df:8a:90:f1:d1:0b:32:b8:08:54:a7:47:0d:92:f7:b0:84:60:
e6:35:33:25:01:d1:0c:05:fb:4b:8a:57:73:3b:0d:02:e8:95:
02:4c:53:ec:8b:b8:56:e2:85:a3:b7:eb:6e:6e:dd:3f:dd:c3:
60:be:41:f9:af:2e:82:87:ca:e2:e4:72:40:e9:d0:39:db:b1:
78:dd:44:f5:59:cd:20:e8:ec:12:0a:1b:cd:c5:4c:5a:12:6c:
6d:ce:bc:19:44:4a:6c:80:78:ff:ac:bd:04:4c:db:36:18:54:
ee:59:54:f3:62:7b:e3:86:43:ed:8b:cc:4b:c9:e7:56:3a:66:
87:3f:32:8a:61:44:b5:8a:c6:22:10:9c:40:80:31:e7:52:66:
e1:15:e4:89:03:57:5e:bd:0d:fa:f9:76:d4:8e:a1:b4:a1:26:
f1:74:ec:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:54 2024 by rpki-client on console-fra.rpki-client.org