Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FgNm8h_pJSMeAKnvydE-zS5pjMQ.roa
File: FgNm8h_pJSMeAKnvydE-zS5pjMQ.roa (raw, json)
Hash identifier: G79TgwIcQ0YawqMsB3IjXDOTl/grAZPiu3Yt9K72hpQ=
Subject key identifier: 16:03:66:F2:1F:E9:25:23:1E:00:A9:EF:C9:D1:3E:CD:2E:69:8C:C4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187DB3A4A67C9B8AAE8564BB6EA62DA48B1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FgNm8h_pJSMeAKnvydE-zS5pjMQ.roa
Signing time: Tue 02 May 2023 06:50:43 +0000
ROA not before: Tue 02 May 2023 06:50:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 193.148.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 May 2023 07:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:db:3a:4a:67:c9:b8:aa:e8:56:4b:b6:ea:62:da:48:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 2 06:50:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=160366f21fe925231e00a9efc9d13ecd2e698cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:88:6c:1c:69:d5:1f:54:03:53:9e:44:b3:
d0:d4:d9:76:0c:cf:78:a1:aa:8b:00:86:ad:8f:f5:
3d:33:7c:d1:3d:2d:42:ec:12:0b:f1:1e:2a:d7:3f:
ca:27:ec:b6:f2:7b:99:ca:d7:c9:d1:0e:0f:e2:8b:
b4:1d:fe:3d:c3:22:6c:7b:30:72:7b:63:ec:47:85:
b0:12:07:c2:37:aa:12:97:d1:5a:ac:7e:db:48:54:
23:81:f8:91:22:4a:74:65:e5:5b:66:05:c0:68:b1:
ed:69:db:7b:90:70:da:39:3b:e5:74:bb:89:2e:89:
c0:9c:f3:9d:7a:e2:d6:63:88:00:ac:74:3e:fe:09:
05:b8:bf:20:a6:e6:1e:c3:1a:a7:61:2a:27:3a:51:
14:83:73:d6:01:bb:8d:84:16:27:1a:10:86:32:c2:
c9:d1:9c:95:cd:85:c7:46:01:14:cf:7a:a0:6f:8b:
41:17:6f:cd:f3:b9:8c:a7:59:d3:8e:59:ca:f3:d0:
73:7b:85:11:c2:cb:6d:ad:fe:71:45:7d:2e:03:70:
51:c3:c1:1d:a5:5a:12:a2:e7:6a:12:a0:b3:38:35:
55:96:ba:f8:ad:f0:41:8d:1b:60:ad:20:4d:08:11:
41:fb:ee:cd:16:e8:74:ed:3e:c7:72:17:da:50:92:
1e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:03:66:F2:1F:E9:25:23:1E:00:A9:EF:C9:D1:3E:CD:2E:69:8C:C4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FgNm8h_pJSMeAKnvydE-zS5pjMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.56.0/22
Signature Algorithm: sha256WithRSAEncryption
70:dd:3c:62:d9:e0:30:c0:77:ce:58:5c:45:fa:92:30:1c:ca:
3f:7f:66:92:8f:5b:be:22:15:b8:4a:ec:50:51:a0:ce:4f:d3:
d2:b6:3e:54:8f:52:94:33:ae:7b:82:85:c0:d2:5a:2c:dc:90:
5e:fd:17:16:12:5b:de:f7:ab:a6:35:91:4d:d9:ad:2b:4b:49:
4f:5d:7b:83:92:6d:24:02:43:1d:af:ad:b4:54:a5:75:67:98:
d0:da:71:d7:9a:17:75:6e:00:09:64:ef:9a:50:c8:71:11:0d:
c5:f3:b8:36:2c:04:38:86:ff:1c:7f:92:41:b9:6a:8c:32:ec:
f5:ff:64:07:f7:32:b0:36:eb:f3:6c:b1:a9:be:8a:42:d6:5d:
3a:25:0a:f2:cd:dd:71:cd:40:9b:b2:09:f2:89:8c:a7:15:5c:
01:60:65:0b:5e:93:8b:5e:bb:43:dd:0d:9a:32:e3:7c:ae:95:
81:94:6c:46:1d:5f:bc:e4:90:ea:33:bc:d3:2e:8f:04:d3:c1:
49:b3:93:34:75:70:ee:3e:bd:84:75:eb:a1:f3:7b:ce:15:ab:
d1:17:17:ff:06:fb:a4:34:0c:1e:16:87:48:6f:46:83:ac:92:
dd:ac:7f:e6:41:85:44:bc:1a:b5:31:5b:f1:b1:51:e7:64:ef:
2e:2d:20:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:28 2024 by rpki-client on console-ams.rpki-client.org