Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/x5vZd6m2q60pRGwmSv3WgfhAJZo.roa
File: x5vZd6m2q60pRGwmSv3WgfhAJZo.roa (raw, json)
Hash identifier: wcbsxu3mVN7BoLG4bISm5M3lA3y8Unqn4/zx0CnpUoU=
Subject key identifier: C7:9B:D9:77:A9:B6:AB:AD:29:44:6C:26:4A:FD:D6:81:F8:40:25:9A
Certificate issuer: /CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Certificate serial: 01881A3B8A3212746CFC79C0C20A44D4D556
Authority key identifier: 2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/x5vZd6m2q60pRGwmSv3WgfhAJZo.roa
Signing time: Sun 14 May 2023 12:28:09 +0000
ROA not before: Sun 14 May 2023 12:28:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202651
IP address blocks: 193.219.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1a:3b:8a:32:12:74:6c:fc:79:c0:c2:0a:44:d4:d5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Validity
Not Before: May 14 12:28:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c79bd977a9b6abad29446c264afdd681f840259a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d7:fc:bf:f5:80:40:3a:74:b9:2b:44:56:4e:
84:73:cc:7c:9a:66:27:2f:05:cd:14:cf:a5:59:4d:
e3:5d:15:85:e0:36:b6:95:48:71:4f:57:5a:47:3e:
1c:be:01:eb:8c:6d:ad:2c:d7:70:a3:a2:24:71:15:
01:fd:6c:ee:33:5f:d8:1a:40:25:51:5b:d1:d1:5a:
e1:1c:a2:23:85:ce:c8:19:7f:7e:a1:f1:5d:5a:2b:
65:81:e2:4e:2f:a3:ec:14:85:5b:2d:27:03:2f:7e:
69:77:7b:ba:8b:2c:cc:a0:ae:e4:37:9e:df:3d:81:
52:7e:77:ed:0a:00:1f:6d:ab:d2:da:4d:35:cb:b3:
cd:30:58:e8:b7:9c:59:ba:b1:a3:5c:85:13:90:cf:
57:a6:92:92:51:4c:99:4a:5e:34:e2:ef:2a:23:5b:
24:e9:fb:21:5c:23:05:ab:0a:bd:a9:20:75:3c:3a:
2c:43:ec:c4:96:78:26:00:49:43:15:b2:d5:1c:e6:
92:ed:6e:69:df:d9:d6:c5:50:ec:66:a3:3e:2e:a0:
c1:de:fd:a5:3b:23:7a:09:d2:06:86:77:5d:cc:d9:
62:c6:02:ff:48:94:2e:b4:5d:1d:14:ca:2d:79:d5:
90:09:11:90:58:b4:a0:ab:a9:11:42:0f:77:f3:a1:
31:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9B:D9:77:A9:B6:AB:AD:29:44:6C:26:4A:FD:D6:81:F8:40:25:9A
X509v3 Authority Key Identifier:
keyid:2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/x5vZd6m2q60pRGwmSv3WgfhAJZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.112.0/24
Signature Algorithm: sha256WithRSAEncryption
49:c7:d2:aa:75:30:59:da:cf:b6:af:c4:df:96:55:c6:df:69:
75:83:bd:9a:5a:ba:9e:e5:f2:6d:35:d4:1d:9f:61:f7:27:22:
68:ec:ef:83:ce:2f:68:82:ac:47:3a:6b:12:27:f7:e4:0b:53:
47:f2:8a:57:47:95:92:8f:8a:c2:0a:60:da:7d:4b:44:15:34:
0f:6c:7e:f1:65:ff:64:4a:c4:d5:c1:ce:05:7a:29:10:dd:d9:
63:3f:bd:42:0b:5d:ee:4f:4f:82:c8:1d:f5:3d:e9:9f:cc:78:
a9:d8:da:8f:eb:cd:fc:08:94:87:96:51:b1:fb:32:61:79:a0:
88:97:5f:18:e9:c2:ad:ad:d4:77:31:c2:c5:c1:56:27:8c:f3:
6c:ba:86:36:27:25:86:f3:a6:6a:7f:51:40:c1:29:6a:cd:61:
32:1a:72:ad:f8:7d:b3:04:35:f2:8b:e2:99:9c:a1:24:1d:22:
72:fe:f3:3e:b9:73:bf:3c:e2:0b:b7:f0:c6:c7:04:81:97:2a:
fd:a3:26:55:6e:9c:53:9a:00:a1:3a:04:fd:c7:5c:b3:d6:23:
d0:86:30:89:54:ed:ff:33:70:25:a2:fb:e2:30:19:ac:e1:23:
f0:17:c7:43:b3:b9:77:9c:7a:39:18:ec:a0:e7:f1:88:39:6f:
fd:ee:47:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:28 2024 by rpki-client on console-fra.rpki-client.org