Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/DfyO8iSux0reniFa6Y-g454guxw.roa
File: DfyO8iSux0reniFa6Y-g454guxw.roa (raw, json)
Hash identifier: YmzuY4caGe/XBg7eHD+mPNYo95iuHUoqafr3fxtEd68=
Subject key identifier: 0D:FC:8E:F2:24:AE:C7:4A:DE:9E:21:5A:E9:8F:A0:E3:9E:20:BB:1C
Certificate issuer: /CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Certificate serial: 01856C25CDE84843D81CE0EBA692B3A02C2A
Authority key identifier: 8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/DfyO8iSux0reniFa6Y-g454guxw.roa
Signing time: Sun 01 Jan 2023 07:04:54 +0000
ROA not before: Sun 01 Jan 2023 07:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35684
IP address blocks: 193.239.162.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:cd:e8:48:43:d8:1c:e0:eb:a6:92:b3:a0:2c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Validity
Not Before: Jan 1 07:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0dfc8ef224aec74ade9e215ae98fa0e39e20bb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:70:59:f1:70:eb:79:ed:6e:3b:71:83:67:d4:
94:b8:bb:d4:38:e5:8b:f8:7c:76:4b:e7:1b:b9:9f:
fd:eb:df:27:56:98:12:43:a5:f6:3f:4e:81:bf:17:
e5:be:fa:89:ac:db:d4:fc:5a:55:0c:9a:27:c7:a4:
20:a1:b4:ba:25:f9:b9:c0:c7:e2:d4:6f:63:fa:3d:
1c:c3:06:eb:48:cf:32:e5:86:11:bd:c5:8c:31:bc:
4c:bd:d9:33:35:ac:1f:e4:1d:aa:d7:6a:c5:24:1f:
14:1b:15:e1:ea:ce:76:1f:d2:ae:a8:4c:08:62:a5:
da:8f:ff:fd:d2:1f:f8:9f:bb:cb:81:20:1d:09:09:
9a:49:03:fb:b5:6e:50:0c:51:91:e6:a4:17:7a:18:
d2:ed:91:4b:bf:28:de:9f:11:1c:f6:fc:b0:4c:1e:
f3:9a:b0:ed:1f:64:76:ec:9f:14:5e:56:14:bd:cf:
2b:7e:65:a3:b6:53:30:b3:3e:37:5c:18:a6:ce:d5:
d6:f5:3e:7c:50:d5:73:87:15:ea:70:76:12:a6:a5:
ea:e3:20:05:02:10:7d:57:56:de:b2:f8:da:17:a7:
23:78:23:a6:70:cb:49:24:ed:5e:93:91:98:c4:df:
df:e7:a0:24:ad:04:af:92:f1:8a:cf:54:7c:9a:13:
e0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FC:8E:F2:24:AE:C7:4A:DE:9E:21:5A:E9:8F:A0:E3:9E:20:BB:1C
X509v3 Authority Key Identifier:
keyid:8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/DfyO8iSux0reniFa6Y-g454guxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.162.0/23
Signature Algorithm: sha256WithRSAEncryption
27:d8:90:f8:7d:f0:0a:c2:4f:9b:4b:f0:c8:5b:6f:6c:b0:dd:
c7:53:42:dd:77:59:4c:a7:5b:77:13:51:64:47:9d:6d:87:8f:
d3:3d:3b:69:32:3d:a4:01:b3:76:08:2b:34:33:bf:a8:93:41:
ed:46:00:79:74:21:d4:57:e2:d7:ae:af:0c:31:1c:fd:13:2f:
49:dd:2c:f3:2a:f8:d6:a6:8e:a1:fa:41:65:f5:a3:42:f7:39:
ee:5d:d8:93:f3:48:11:56:ac:e7:b8:03:4c:16:ce:a5:7e:03:
55:04:6b:b5:c2:f1:56:dd:df:f7:c1:05:d7:50:ca:49:52:54:
29:9e:76:64:c0:4e:d7:61:71:ae:88:37:7f:ed:29:89:65:38:
2f:6f:90:99:51:6b:65:14:57:86:ee:93:ae:61:47:6e:df:37:
5b:3f:6f:62:f3:16:42:b1:51:fb:10:46:c3:ca:fb:b8:da:a9:
08:76:67:7c:61:fe:3e:c5:4b:b3:b2:2b:95:76:e1:01:71:6a:
0c:2e:28:d6:0c:44:07:e6:10:e5:61:53:9a:68:f5:57:2d:28:
60:fa:47:60:80:57:3a:2d:a8:5b:6e:28:94:ec:17:54:d3:72:
58:38:cf:9e:7a:b5:82:5d:c8:dd:38:8d:9a:10:e3:eb:4d:07:
c2:a7:7f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:41 2024 by rpki-client on console-fra.rpki-client.org