Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sSoetpf2GIRQLPGDyniWjvC4YKw.roa
File: sSoetpf2GIRQLPGDyniWjvC4YKw.roa (raw, json)
Hash identifier: weZjlIYTnWzFbseTdIl5X6fjNiZv3uRUlGyraAtm6Ps=
Subject key identifier: B1:2A:1E:B6:97:F6:18:84:50:2C:F1:83:CA:78:96:8E:F0:B8:60:AC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191E0D08C811A265A75BD136111C5E363B7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sSoetpf2GIRQLPGDyniWjvC4YKw.roa
Signing time: Wed 11 Sep 2024 11:20:49 +0000
ROA not before: Wed 11 Sep 2024 11:20:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214318
IP address blocks: 193.222.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Nov 2024 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e0:d0:8c:81:1a:26:5a:75:bd:13:61:11:c5:e3:63:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 11 11:20:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b12a1eb697f61884502cf183ca78968ef0b860ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:31:d2:d7:b2:0c:d6:9e:54:3f:38:8e:bf:f7:
a5:20:30:45:7d:4a:35:73:c5:54:93:22:54:f2:4b:
60:02:b9:0b:d1:9c:49:84:d0:c6:78:b4:d1:e0:af:
e9:8a:c3:0a:b4:31:62:48:89:fa:a5:30:95:bf:5b:
c7:ec:26:5c:8a:24:03:0e:b0:f7:23:6a:58:fb:35:
e3:60:73:3e:0e:6c:c8:9a:e7:f8:f0:28:88:f8:dc:
f9:24:dd:d9:9a:27:50:d4:65:9d:77:52:14:6d:6e:
3c:4b:c3:92:3e:f4:a4:bc:a5:d4:3f:28:bf:cc:47:
fd:46:49:49:01:bf:23:e6:10:89:2d:54:a5:2f:47:
fe:ea:3e:b0:d3:8f:55:42:62:5b:3d:76:26:b2:5b:
8c:0f:42:d3:b0:01:9f:c7:4b:dc:03:9a:76:15:4a:
85:e3:3f:53:02:7a:32:5f:51:45:86:ac:4b:6b:73:
fd:54:9d:45:cd:1d:98:18:c9:d2:36:c6:f1:0c:fc:
3f:89:17:62:30:89:71:0f:c3:26:96:f8:c8:90:88:
f8:61:9e:8b:b1:67:4b:90:d6:25:34:75:c5:77:0d:
1d:92:bd:7a:67:d2:95:a8:76:ee:68:a1:8b:27:2f:
7c:4f:42:0c:97:09:fb:ad:14:77:f8:9f:8d:1d:c7:
37:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2A:1E:B6:97:F6:18:84:50:2C:F1:83:CA:78:96:8E:F0:B8:60:AC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sSoetpf2GIRQLPGDyniWjvC4YKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.96.0/24
Signature Algorithm: sha256WithRSAEncryption
27:b5:fa:bc:56:a0:fb:56:6a:42:40:35:e3:30:6e:69:43:8c:
fb:38:4c:3e:89:e6:ad:31:03:e2:61:29:40:20:a5:c7:2b:6f:
f0:a6:df:f7:ba:a5:ad:c7:dd:17:95:e6:38:e4:7a:31:e8:0d:
9c:45:78:cf:57:62:18:3a:9f:e2:5c:f7:5e:f5:12:ed:3c:eb:
ac:1a:02:04:86:0d:ab:70:26:86:88:dd:b1:ae:2b:17:3e:d0:
f5:d5:6e:6c:ee:67:7c:ad:b6:ed:cd:02:ae:fc:fe:5c:f1:a4:
84:a3:dc:0c:df:0b:9c:17:61:72:54:8b:e6:07:90:27:71:b0:
c2:59:98:0b:77:aa:2f:82:a4:45:1a:2d:a1:c3:c4:ed:e2:c7:
b7:d4:7c:8c:d4:ec:74:35:12:5e:e6:c2:ef:52:88:be:27:79:
c5:64:2f:8b:9a:b8:4a:d8:08:6e:c2:6b:ac:8a:e4:f1:80:38:
56:b0:9f:2d:2b:68:3b:46:4e:a0:b3:84:03:68:a2:b8:5b:d3:
2a:5a:ee:35:75:78:07:19:a2:cc:4f:26:28:bd:b8:b9:e2:21:
a0:9e:d2:21:24:bf:33:7e:d1:07:c8:0d:49:f5:b4:e1:8c:74:
de:1b:c7:55:48:30:04:07:a5:dc:24:b0:8f:0a:67:0f:ec:fb:
99:ae:87:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 17:53:24 2024 by rpki-client on console-fra.rpki-client.org