Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/7FTEMLNi8YA3AJ12TI_H4M0m_1o.roa
File: 7FTEMLNi8YA3AJ12TI_H4M0m_1o.roa (raw, json)
Hash identifier: cvNvdBZ5OyPxL4cM8dViDcjzqy9GyHRHUS1riAvHffc=
Subject key identifier: EC:54:C4:30:B3:62:F1:80:37:00:9D:76:4C:8F:C7:E0:CD:26:FF:5A
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 0185701ED29F311250B9A70773EFB1798168
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/7FTEMLNi8YA3AJ12TI_H4M0m_1o.roa
Signing time: Mon 02 Jan 2023 01:35:46 +0000
ROA not before: Mon 02 Jan 2023 01:35:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 193.37.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Nov 2023 22:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:d2:9f:31:12:50:b9:a7:07:73:ef:b1:79:81:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: Jan 2 01:35:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec54c430b362f18037009d764c8fc7e0cd26ff5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ff:51:65:5f:8c:66:82:76:b1:1c:b4:aa:ce:
c5:63:45:24:47:04:73:8c:22:cc:ff:0a:f9:04:67:
58:35:ae:d1:5a:d3:73:0c:33:7c:bc:9d:9a:34:f1:
98:0e:59:af:7c:a9:77:e3:ff:6d:b0:a6:12:13:21:
c6:f0:4c:c9:fa:ed:cb:c5:7d:35:40:eb:57:ca:96:
d4:80:03:05:b1:9b:8a:65:b8:71:9f:a6:70:4f:c9:
16:c3:4f:08:6a:80:7b:66:1f:eb:0c:19:01:99:ab:
f5:e7:52:e9:e5:37:a4:91:b0:46:b7:ec:42:d8:86:
47:35:cb:35:32:16:33:c5:ba:55:73:03:f0:db:52:
46:f3:5b:4c:56:d8:f4:d4:f5:b1:6c:8c:f4:e6:d7:
2b:01:ff:38:63:2c:8b:c3:b7:1b:9c:e7:18:31:40:
02:46:ea:12:be:fe:08:e7:ce:e1:7d:69:44:af:27:
bd:26:7f:8c:65:88:ef:e9:23:aa:c6:b8:4d:34:a5:
72:07:bd:ab:3e:6d:16:d6:67:5f:66:bb:81:ac:2d:
6f:38:db:7e:e6:af:eb:b1:e0:98:7c:8f:66:39:22:
8e:d5:4f:2d:13:56:37:be:08:b5:89:a7:ab:bc:cf:
fd:1c:47:a4:9c:76:0c:19:e9:06:ee:07:2a:54:ff:
09:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:54:C4:30:B3:62:F1:80:37:00:9D:76:4C:8F:C7:E0:CD:26:FF:5A
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/7FTEMLNi8YA3AJ12TI_H4M0m_1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.132.0/24
Signature Algorithm: sha256WithRSAEncryption
75:f6:06:b6:3d:62:64:49:da:04:fd:33:0b:a4:00:1e:74:d2:
b1:d8:68:39:7f:95:5b:18:d6:88:bb:a5:ba:2f:ba:21:ac:d4:
3b:3b:a1:d4:cb:5d:26:91:fd:f1:f0:f5:f2:b2:5f:3b:a0:18:
43:88:77:4a:22:81:fe:d1:5d:ab:0c:59:9f:a2:f4:3a:4c:35:
00:96:f4:16:80:76:df:29:34:55:c9:3b:8b:08:6d:95:da:8e:
c7:69:8b:40:84:9b:10:cd:7c:b5:db:21:84:91:ad:08:bd:71:
31:31:69:57:b1:ab:6e:f4:73:a5:16:5d:5d:97:0b:e0:5d:47:
b3:b7:23:be:f3:e7:ba:1e:81:75:19:66:d8:f5:61:db:9b:4e:
77:89:61:b8:c4:13:9f:9c:7b:e2:02:32:cd:01:69:21:dd:cc:
e2:82:13:cc:91:10:60:bb:24:37:4c:09:17:f1:6e:c5:74:8e:
82:e2:65:a4:7f:32:a1:df:7f:d3:17:da:9a:1c:05:3b:fc:9c:
6f:23:bc:94:e4:7b:22:a6:15:96:a9:b5:c7:f4:08:38:9a:6b:
03:4d:3f:9f:45:ca:77:5f:ec:4c:45:d2:72:25:6f:5f:59:db:
90:60:7f:6e:19:dd:9d:2d:ad:4e:e7:b9:71:37:cd:94:d3:e6:
70:46:a7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:42 2024 by rpki-client on console-fra.rpki-client.org