Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/aTUpQy1jmBgeQ42nk2JyevkQCr8.roa
File: aTUpQy1jmBgeQ42nk2JyevkQCr8.roa (raw, json)
Hash identifier: P4jFCEI85tI/bkmfcuVhwylZDoxG2F4n6xQM/9sNCdo=
Subject key identifier: 69:35:29:43:2D:63:98:18:1E:43:8D:A7:93:62:72:7A:F9:10:0A:BF
Certificate issuer: /CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Certificate serial: 018C1F0BE216746899B173276AF66756E3AB
Authority key identifier: D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/aTUpQy1jmBgeQ42nk2JyevkQCr8.roa
Signing time: Thu 30 Nov 2023 07:05:21 +0000
ROA not before: Thu 30 Nov 2023 07:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30815
IP address blocks: 193.25.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1f:0b:e2:16:74:68:99:b1:73:27:6a:f6:67:56:e3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Validity
Not Before: Nov 30 07:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=693529432d6398181e438da79362727af9100abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c8:f3:8b:95:34:d8:10:2b:c8:7c:3f:f0:17:
9f:87:64:ec:6e:49:a8:91:d8:22:3c:51:41:0f:25:
bc:57:76:cd:e1:f3:89:0e:00:4a:f3:33:9b:87:66:
6c:96:ab:b3:49:78:da:b4:b2:df:e6:14:44:8f:a5:
33:4d:0b:71:ce:3e:de:e7:2d:4d:15:66:92:a8:ee:
af:ef:f3:37:a8:15:ce:7c:ed:b3:54:6e:ed:5f:34:
fc:1a:7b:da:e6:cd:9f:b0:bb:72:e3:9e:25:a9:1d:
c1:75:7f:6a:13:6b:fc:2d:dd:06:5d:a0:7f:ce:eb:
72:a8:2c:95:da:1a:d5:2b:27:ca:cb:9c:87:9a:9f:
07:58:ec:ec:d8:77:86:e8:29:a9:0d:b2:5c:88:96:
d4:19:d1:94:f9:0c:a1:c0:cc:b8:ea:97:fd:b4:ba:
1c:26:ac:77:b6:ca:aa:6a:6f:92:88:db:b2:98:f3:
a2:50:78:fd:f4:dd:60:94:0b:93:37:99:3b:17:9d:
e3:da:b1:31:77:32:84:4d:88:6b:39:7c:b0:18:21:
ad:e1:ec:dd:bb:9a:a5:fa:2c:07:9e:eb:20:b1:6d:
db:d7:68:24:8b:90:db:65:e0:d8:da:fb:0d:9b:32:
95:83:b1:13:84:03:cb:7f:10:c4:a0:1c:24:01:2f:
00:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:35:29:43:2D:63:98:18:1E:43:8D:A7:93:62:72:7A:F9:10:0A:BF
X509v3 Authority Key Identifier:
keyid:D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/aTUpQy1jmBgeQ42nk2JyevkQCr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.205.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:4d:2d:2f:8b:1f:63:bd:5b:52:29:61:1b:e0:0b:13:b8:8b:
be:0e:3a:af:5e:89:83:95:49:57:bf:36:dd:72:1d:b3:ac:7d:
81:94:18:7b:29:2d:d4:a3:19:f7:45:0f:23:8a:50:dc:eb:32:
3b:30:a7:8b:44:47:ac:17:40:fe:72:b7:de:3a:25:ce:85:28:
cb:60:a1:48:ef:57:86:7e:7d:ef:d5:36:ec:35:c1:3e:15:cd:
23:58:f0:1e:e7:7c:3b:fd:5c:26:f8:ae:2f:9e:52:87:ed:f9:
23:2e:4e:6d:15:7b:01:02:5a:9c:ee:bb:9b:11:ad:7b:c2:24:
85:21:38:d7:d2:f4:3d:07:6c:fc:5f:3e:07:f8:43:7e:a1:36:
72:81:7f:15:58:83:66:7e:b5:3c:69:0e:5f:83:02:59:8d:b0:
d5:d5:a0:d9:03:c2:da:82:63:69:5c:cc:21:d8:f6:97:b8:98:
86:f6:df:26:b1:48:59:6b:7e:83:63:c1:f3:28:6d:6f:c5:8d:
79:34:3b:a2:73:81:e9:e8:eb:c4:f6:15:1a:82:92:51:ba:79:
9a:5c:69:62:da:77:08:e1:91:02:58:01:c9:2d:40:86:91:ca:
7a:c5:e8:cf:82:4e:e2:bd:0d:c8:96:90:77:6c:bf:9b:c7:47:
77:97:db:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:03 2024 by rpki-client on console-fra.rpki-client.org