Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bQTdmfP_OcM7SJ5_VIe7-8nqR3o.roa
File: bQTdmfP_OcM7SJ5_VIe7-8nqR3o.roa (raw, json)
Hash identifier: um3T508Te3nc0MditP7wEzei0KDuAAG2ILhGVrc117s=
Subject key identifier: 6D:04:DD:99:F3:FF:39:C3:3B:48:9E:7F:54:87:BB:FB:C9:EA:47:7A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018FBAB1753F029794A0C035707BE0F6B1CD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bQTdmfP_OcM7SJ5_VIe7-8nqR3o.roa
Signing time: Mon 27 May 2024 15:35:42 +0000
ROA not before: Mon 27 May 2024 15:35:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203168
IP address blocks: 193.222.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 May 2024 12:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ba:b1:75:3f:02:97:94:a0:c0:35:70:7b:e0:f6:b1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 27 15:35:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d04dd99f3ff39c33b489e7f5487bbfbc9ea477a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:ce:0d:ff:f8:20:71:5c:ff:19:26:b7:94:
f7:9c:c5:8e:d5:e8:16:60:f0:2b:94:99:b0:aa:a2:
5a:86:cc:20:db:7a:e1:b3:01:29:ac:99:8b:f7:67:
4b:97:42:a1:83:75:f2:56:13:77:9b:5a:d5:d0:f9:
a4:71:0a:21:1e:5b:2e:3d:8b:22:d8:e7:9b:20:d8:
4b:90:6d:ab:3f:10:4f:48:db:59:63:73:83:ea:2e:
4f:42:39:12:47:e2:fc:0b:35:db:d7:c7:1b:c3:1a:
f6:00:4c:fe:e7:87:7b:89:b1:d1:13:94:1c:2b:8f:
d5:b8:03:27:8d:75:5c:b1:80:f4:8a:0f:33:d7:09:
34:6d:49:8f:d5:23:4e:67:07:8f:b1:a5:65:cd:35:
59:91:05:31:19:6d:1a:91:0d:ce:d3:96:56:ac:73:
7d:4c:3f:09:d9:a1:c3:4d:ee:0c:17:4b:83:51:f1:
2f:74:b4:20:8c:d5:6c:22:48:ce:80:f2:07:f9:91:
f2:ac:44:1c:5f:17:35:c0:9f:62:d4:e8:b7:22:c9:
e3:19:33:49:66:7d:00:28:29:a6:18:cc:87:2e:ef:
4f:a1:1c:b6:91:bf:5c:90:b4:f4:d6:b3:82:40:0e:
c3:63:76:8f:3b:eb:f2:fe:b7:29:94:51:d6:09:d8:
7c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:04:DD:99:F3:FF:39:C3:3B:48:9E:7F:54:87:BB:FB:C9:EA:47:7A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bQTdmfP_OcM7SJ5_VIe7-8nqR3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.96.0/24
Signature Algorithm: sha256WithRSAEncryption
52:b5:5e:e6:23:28:16:e5:85:3c:96:7a:d3:58:85:01:7c:36:
49:2d:49:cc:c8:0c:8d:d3:7a:ca:7d:5b:4d:d2:68:60:94:d9:
37:a0:52:28:f7:70:70:c6:72:00:c0:2b:61:9e:09:0a:7a:a2:
84:e0:5c:05:63:1f:96:39:cd:99:13:75:cb:ec:e2:fd:7f:12:
85:99:94:95:54:6d:03:4a:f4:e3:65:80:ea:7e:03:8d:19:4f:
a6:f6:e1:c2:fd:4f:a7:da:ed:8b:18:f7:2a:68:1f:6e:74:f4:
32:3e:82:75:6b:2d:ae:48:59:42:5d:75:10:93:95:33:24:16:
31:1b:b8:1b:24:50:1f:a6:3e:65:41:43:d6:26:b4:99:83:48:
89:e3:51:43:20:7e:e4:28:de:cd:bd:05:42:44:42:56:92:fb:
b8:37:eb:6d:df:bc:3d:d4:1b:37:d8:7f:ae:55:a4:85:91:61:
98:c2:66:9f:7b:18:28:ce:ce:01:ca:1f:62:0b:fd:76:05:2f:
b9:5d:77:9d:0a:42:6b:fa:de:29:33:0c:ca:0f:59:4d:f1:53:
42:e6:4a:d0:b7:81:42:bb:81:9f:b6:b8:bb:b7:9e:d8:36:d2:
6f:1a:32:5f:8c:0c:84:0f:6c:6b:13:d0:0b:d2:f1:a2:87:d1:
04:92:2f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:14 2024 by rpki-client on console-fra.rpki-client.org