Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/96c2nU_hu3HjQigUB4_Uj5IoXmk.roa
File: 96c2nU_hu3HjQigUB4_Uj5IoXmk.roa (raw, json)
Hash identifier: 0JR0MpokKeojMPwWbWDsT++TOsk94RE4FdhPPS9fqz0=
Subject key identifier: F7:A7:36:9D:4F:E1:BB:71:E3:42:28:14:07:8F:D4:8F:92:28:5E:69
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 0186569B22BC79B441A9D3E001FA00A5E563
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/96c2nU_hu3HjQigUB4_Uj5IoXmk.roa
Signing time: Wed 15 Feb 2023 19:44:12 +0000
ROA not before: Wed 15 Feb 2023 19:44:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11426
IP address blocks: 193.31.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:56:9b:22:bc:79:b4:41:a9:d3:e0:01:fa:00:a5:e5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Feb 15 19:44:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7a7369d4fe1bb71e3422814078fd48f92285e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e8:10:f3:48:c0:b8:aa:d1:26:6d:07:48:d4:
30:ac:46:a8:57:8d:f6:90:5c:83:f8:a1:09:7e:9c:
bc:8c:bf:e1:95:3a:c1:c9:33:db:23:25:f6:25:49:
a6:73:1d:59:61:61:64:e2:a7:ad:45:a0:8d:30:b0:
7b:9b:48:68:26:e1:8b:08:cc:c7:33:c9:d1:25:e3:
6d:d0:1c:f7:1d:73:d9:17:b9:f9:da:3d:aa:00:18:
36:eb:0c:d5:8e:d8:b8:d7:70:3a:3f:cd:79:d1:82:
c5:72:ee:59:0f:14:1e:42:3c:03:10:8d:55:bf:30:
e3:93:c6:fd:7e:68:11:55:d8:cf:1a:06:ef:71:6b:
61:ff:c8:c9:8f:b3:dc:af:32:74:33:f5:84:c0:d5:
22:61:b5:20:30:80:4f:ee:9e:fb:1f:de:9e:54:f7:
3c:7b:79:df:86:39:28:39:e9:6c:84:d2:a6:63:8b:
8b:fa:0a:32:d9:06:86:ff:56:55:5f:e9:b4:38:f4:
b2:be:13:a5:c3:f0:9f:0d:3c:d3:1f:78:37:27:9b:
70:5e:11:4d:67:34:a8:ca:97:18:ec:18:f4:95:a9:
6e:e3:0b:2a:50:c8:ea:6d:d6:4b:c4:47:04:fb:aa:
99:94:05:31:1d:50:13:09:40:f0:c5:e8:7f:9d:ee:
ef:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A7:36:9D:4F:E1:BB:71:E3:42:28:14:07:8F:D4:8F:92:28:5E:69
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/96c2nU_hu3HjQigUB4_Uj5IoXmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.74.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:fe:9b:7a:5f:2d:7c:89:0b:74:b2:a3:d1:a1:d8:43:2d:6f:
c3:bc:2b:ef:c8:36:b8:75:c9:55:59:c8:d2:97:54:c8:27:d6:
3d:af:da:56:e4:aa:db:a4:80:e4:4d:26:5e:79:12:d0:94:50:
d7:15:cd:dd:f4:bd:e3:27:f0:d1:2d:8a:fd:02:b5:40:0c:78:
3b:ce:fb:4d:13:f6:c7:80:7d:97:f3:87:12:b0:bb:5c:68:6d:
d6:44:9a:9e:1b:90:3b:33:7f:55:f2:ae:5f:2b:e5:88:c4:a1:
7d:c6:0d:31:2c:64:4a:86:fa:66:1f:f6:c4:44:e0:f1:24:cc:
e9:34:3b:28:18:42:5e:a3:1d:90:34:c3:76:89:e0:cd:95:51:
d1:a3:b5:d9:1e:65:92:16:45:5f:c7:f7:f0:62:46:6c:d4:81:
8e:4f:ba:46:44:9d:96:24:de:da:27:50:61:14:7f:84:bc:9b:
b4:b0:f0:81:66:d7:ce:a8:bb:d0:9f:73:b3:8b:7a:7f:29:a2:
5e:23:11:1c:cc:76:3e:da:1e:3d:f0:82:89:3a:c7:d2:cb:e6:
8c:63:b6:1e:2e:ad:b5:d5:2d:c8:2c:33:6d:59:4b:d5:59:e4:
07:3a:fa:3d:7e:f7:2b:94:c6:80:a3:90:2d:d2:7a:67:c3:f7:
b9:c7:21:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:20 2024 by rpki-client on console-ams.rpki-client.org