Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/fh1j6dO64_ta__XVTxwuXiKhwKo.roa
File: fh1j6dO64_ta__XVTxwuXiKhwKo.roa (raw, json)
Hash identifier: 8f/eQldts0ZmT/UIOhP47QmrIQrjnAnwwYU4vrPrPB8=
Subject key identifier: 7E:1D:63:E9:D3:BA:E3:FB:5A:FF:F5:D5:4F:1C:2E:5E:22:A1:C0:AA
Certificate issuer: /CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Certificate serial: 018B6044137935F81D0599AFA198D0631D59
Authority key identifier: 75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/fh1j6dO64_ta__XVTxwuXiKhwKo.roa
Signing time: Tue 24 Oct 2023 05:59:15 +0000
ROA not before: Tue 24 Oct 2023 05:59:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41660
IP address blocks: 193.219.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:60:44:13:79:35:f8:1d:05:99:af:a1:98:d0:63:1d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Validity
Not Before: Oct 24 05:59:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e1d63e9d3bae3fb5afff5d54f1c2e5e22a1c0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7e:4e:98:e3:b3:93:b5:94:2a:ac:d5:9b:f4:
a7:87:58:6b:6d:9d:3a:3a:63:ee:2e:19:f4:df:b2:
db:54:59:f7:06:bc:a8:5e:7f:4a:45:be:fb:ea:ea:
dc:d6:2f:81:b5:53:11:d1:94:29:3b:e9:5f:ed:f3:
fa:2f:93:e4:b1:07:e9:66:6a:bf:a6:ca:20:a9:d6:
eb:81:e8:fc:03:65:8d:fd:21:6a:85:4d:b9:85:da:
85:2c:d9:6d:14:03:ea:d6:5d:4e:e2:65:8e:bc:5e:
b5:70:15:97:ac:87:17:83:43:f2:ea:d0:30:3d:81:
08:aa:1d:16:06:9e:b3:b8:5d:d2:01:3b:2b:3f:b4:
b6:21:3f:2b:70:f1:74:48:6f:36:e7:01:66:39:da:
13:52:4a:7e:9d:8d:c0:c7:43:26:f8:7d:7c:de:aa:
af:51:3d:c7:34:44:b1:15:6f:4c:98:1a:b9:52:35:
da:08:2d:a9:cc:14:9f:91:75:cf:24:87:f1:4e:ff:
40:ee:b5:47:55:8c:87:59:8d:a4:04:7e:59:01:96:
41:91:d9:34:37:29:ff:bf:17:59:d1:72:0a:78:9d:
ed:e8:b5:b2:f6:f4:d7:78:6a:3f:fa:b7:49:c2:db:
51:e9:2c:44:36:7d:7f:5e:12:f2:e3:0a:5f:2a:e0:
c8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1D:63:E9:D3:BA:E3:FB:5A:FF:F5:D5:4F:1C:2E:5E:22:A1:C0:AA
X509v3 Authority Key Identifier:
keyid:75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/fh1j6dO64_ta__XVTxwuXiKhwKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.114.0/24
Signature Algorithm: sha256WithRSAEncryption
17:6e:d8:95:5b:eb:60:da:45:f0:a5:a4:6c:32:0b:18:be:cc:
94:a2:9c:6f:b7:99:c4:2f:6c:05:9c:29:fd:e1:9c:a2:9f:89:
fc:aa:04:a2:8c:71:cf:d6:7d:fc:fb:8c:25:95:bd:36:09:53:
76:c4:24:53:ca:62:8e:83:82:d2:57:77:81:8a:9a:54:01:00:
94:73:ad:7c:98:c5:d2:da:64:06:bb:2e:36:d2:e1:fe:c0:70:
3a:78:46:bd:8d:24:9b:ba:aa:6f:d0:92:8e:26:10:41:e4:9a:
a7:15:0e:07:1e:1a:76:27:e0:d4:c5:99:e3:16:d7:36:8c:bf:
2e:5e:c5:3b:e0:f3:fe:c5:be:be:fd:1a:89:fb:87:c4:42:ff:
57:2d:8a:51:30:77:7a:1b:11:c3:4f:8f:3e:b3:af:fd:f1:d4:
c7:b4:41:70:5f:39:32:6b:84:fe:55:ea:db:f4:9d:1a:98:da:
32:8d:80:a4:45:a4:69:a9:ef:2a:78:14:50:a7:f3:71:0e:9e:
57:8c:63:38:61:84:4b:69:ee:25:ed:31:0f:0a:a4:36:67:05:
04:1d:0b:42:8b:a2:15:36:e3:9c:ce:4c:46:45:5d:9d:93:f3:
d3:4a:00:c4:67:77:a1:43:64:79:8b:f6:3d:3f:b7:ef:db:52:
08:be:5c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:07 2024 by rpki-client on console-fra.rpki-client.org