Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/_NHekzgHV4wd1Tijv9yyUw39wCo.roa
File: _NHekzgHV4wd1Tijv9yyUw39wCo.roa (raw, json)
Hash identifier: AxS/ZHWwZxeUAnv9RtK35VHvcczfNQQO1LTW/EwoabY=
Subject key identifier: FC:D1:DE:93:38:07:57:8C:1D:D5:38:A3:BF:DC:B2:53:0D:FD:C0:2A
Certificate issuer: /CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Certificate serial: 018570150B658A4B21A1AED4690A83AA3E86
Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/_NHekzgHV4wd1Tijv9yyUw39wCo.roa
Signing time: Mon 02 Jan 2023 01:25:05 +0000
ROA not before: Mon 02 Jan 2023 01:25:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8220
IP address blocks: 193.38.176.0/24 maxlen: 24
193.38.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:0b:65:8a:4b:21:a1:ae:d4:69:0a:83:aa:3e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Validity
Not Before: Jan 2 01:25:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcd1de933807578c1dd538a3bfdcb2530dfdc02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:01:80:f1:90:93:05:11:4b:f7:4c:bb:d3:d8:
64:8d:6c:34:c6:a3:70:9b:0c:44:4f:93:a2:94:94:
ca:89:22:27:36:00:b7:c7:7b:c0:d9:ff:6d:14:fa:
66:fd:c4:a5:c4:10:d9:b4:ce:46:dc:72:cf:d6:f2:
ba:fa:16:34:3d:fa:f6:a4:6f:fa:a4:e1:72:4d:5a:
07:60:eb:f6:67:d6:d0:73:5d:7a:f4:f6:e4:65:aa:
2a:8d:c9:63:05:2c:97:9a:7a:cd:23:1d:31:52:c9:
09:cc:79:07:4f:11:91:3d:06:f6:7a:73:5d:86:44:
3f:a3:02:24:31:a0:19:77:c2:80:0e:04:d1:2b:77:
4a:c9:a4:df:f2:3a:f7:cd:a5:b3:3b:7e:cb:05:f9:
6e:63:52:e9:fa:4c:f5:19:76:b3:66:1e:29:85:0c:
29:48:2f:5a:c4:1c:95:64:c0:86:e1:f3:41:4e:b0:
59:23:f1:ac:13:22:51:bf:96:be:c9:6d:02:18:d3:
82:4c:a4:30:94:6a:5a:fb:f2:52:5a:54:48:fb:da:
27:af:72:b7:db:e0:4f:d7:e0:5c:77:00:9c:75:1d:
b2:ad:04:34:ca:c9:5e:b2:d2:6a:b4:09:ad:76:fe:
78:dc:88:ef:0b:69:5a:4b:9e:fa:b3:9f:b8:59:0c:
23:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D1:DE:93:38:07:57:8C:1D:D5:38:A3:BF:DC:B2:53:0D:FD:C0:2A
X509v3 Authority Key Identifier:
keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/_NHekzgHV4wd1Tijv9yyUw39wCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.176.0/23
Signature Algorithm: sha256WithRSAEncryption
98:c7:01:bf:cc:47:a0:73:82:86:88:07:12:04:ad:2f:4f:7f:
e1:f5:93:2d:0f:83:63:25:75:12:29:ed:35:72:1c:35:f5:30:
94:2d:ce:38:a4:4a:12:92:eb:f7:35:aa:ba:42:6e:00:07:18:
59:ab:c5:c7:4c:c7:da:38:cb:c1:7f:b5:bb:46:58:8b:9d:bf:
21:35:06:60:4e:55:55:f1:14:ca:27:99:96:bb:a3:fc:ad:7d:
d6:eb:56:83:3b:c7:65:00:d3:6a:35:76:65:75:a2:14:b2:98:
12:22:c2:b1:af:89:53:d7:49:8e:2f:af:7d:ea:0a:62:cd:4a:
5c:8b:cb:e7:e6:15:b8:fb:f7:25:39:3e:25:4f:13:12:2e:8f:
89:7c:73:53:9c:01:e6:fc:5d:85:9d:02:6b:f6:94:e4:64:2e:
a6:f5:73:0c:a8:df:b1:3a:62:62:7a:77:aa:7d:32:74:d0:7e:
c5:69:8b:8d:a2:a7:d8:4c:04:29:94:08:c6:da:de:41:70:c0:
2a:01:54:68:e0:22:b3:e6:55:ed:50:71:2f:02:d8:23:23:b9:
94:ac:90:df:95:0a:8c:0b:82:6d:0d:80:f3:87:76:d5:f0:88:
1f:86:86:26:98:57:b6:bc:d4:6c:32:49:f3:32:2f:9f:2a:13:
64:bf:51:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:58 2024 by rpki-client on console-fra.rpki-client.org