Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/rKG7BD6g197RQC9X9RHr8h6jTWk.roa
File: rKG7BD6g197RQC9X9RHr8h6jTWk.roa (raw, json)
Hash identifier: pUwdtM89hoNTfl0iuoGev7iM8WWNhv/H9oRpK5hq6Vg=
Subject key identifier: AC:A1:BB:04:3E:A0:D7:DE:D1:40:2F:57:F5:11:EB:F2:1E:A3:4D:69
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018A1E888D82CD90CBA475725B61D2944EE6
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/rKG7BD6g197RQC9X9RHr8h6jTWk.roa
Signing time: Tue 22 Aug 2023 18:36:20 +0000
ROA not before: Tue 22 Aug 2023 18:36:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216459
IP address blocks: 193.56.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Aug 2023 19:13:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1e:88:8d:82:cd:90:cb:a4:75:72:5b:61:d2:94:4e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Aug 22 18:36:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aca1bb043ea0d7ded1402f57f511ebf21ea34d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a0:5c:a6:77:8f:b6:6f:55:82:5a:eb:00:5c:
4d:20:2f:80:fc:10:8f:3e:38:4a:f8:24:93:70:36:
01:63:04:6b:a1:8d:dc:0e:95:82:5c:91:83:b1:92:
6e:bd:68:26:63:6d:d1:12:09:a0:5f:90:33:97:dd:
88:79:63:ce:68:3a:25:ea:07:66:c7:89:80:7f:31:
19:e7:33:2e:e9:af:42:f2:7a:df:ae:0d:7a:59:89:
04:cf:93:06:59:fd:61:44:a8:c8:66:cb:c0:1a:6f:
c0:e8:4a:db:cf:8c:89:b5:e3:1f:d3:3a:79:38:c9:
80:1a:71:41:38:db:dc:7e:85:4a:e3:d0:4d:c0:f1:
1f:1c:2f:51:85:d7:95:7c:61:f5:4d:1b:f8:5e:be:
bf:d5:a8:65:ab:8e:35:73:f9:3f:90:25:d6:6a:1f:
49:70:b6:c8:6b:59:96:bb:c2:a9:88:bd:6f:aa:99:
e6:61:67:57:3e:55:d8:16:72:a4:cc:fd:17:d5:b7:
2c:6d:39:52:fa:77:eb:54:f0:27:38:db:10:50:6e:
47:8c:d9:71:6c:e8:87:f0:00:9b:14:e6:8e:71:9b:
74:e4:70:0c:22:09:10:4c:2e:6f:39:7c:fc:7f:02:
d5:4a:f5:89:fa:bd:01:2a:aa:cb:19:34:fc:fc:5b:
90:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A1:BB:04:3E:A0:D7:DE:D1:40:2F:57:F5:11:EB:F2:1E:A3:4D:69
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/rKG7BD6g197RQC9X9RHr8h6jTWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.239.0/24
Signature Algorithm: sha256WithRSAEncryption
43:1f:75:38:17:06:a5:d9:da:cf:ef:0a:34:e1:4f:62:d5:0e:
5e:62:5e:06:df:94:06:1d:09:88:f3:3b:f5:eb:1e:ba:32:e4:
c8:a2:5d:7b:3b:42:3d:92:25:04:ec:f1:e4:82:89:c6:9a:29:
8c:c4:b0:04:5e:36:bd:28:43:11:b7:7d:d3:e6:1e:af:84:1a:
53:81:d9:19:8c:39:d3:be:3b:f2:af:a3:be:d5:6f:35:03:a6:
49:c2:02:39:19:4a:4f:01:1a:cd:d9:c2:81:35:8d:95:60:36:
36:55:66:10:c1:a1:e0:c1:7c:7e:0b:95:00:f2:86:b6:d1:72:
df:3f:4d:b9:21:5b:4f:03:7c:be:a9:ea:cf:cd:1a:3d:96:37:
e1:8c:9e:1e:46:68:6b:b6:f0:7a:06:a6:fe:d2:cb:71:1b:f6:
7f:54:3c:83:30:29:39:ec:de:52:33:12:7e:33:2a:b4:a4:3e:
3e:e8:dd:4a:d8:2c:09:03:e7:5a:97:73:db:eb:03:f2:ad:1a:
e0:a0:a1:1f:27:d0:07:41:3e:9a:c1:84:3d:ee:11:8d:a6:79:
34:ba:d9:93:a9:df:8c:a5:e9:f7:4b:d2:99:d7:7a:d3:9b:3b:
63:b3:22:76:c7:f3:79:f6:22:37:95:69:f8:29:b7:49:44:7e:
c8:36:a3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org