Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/abwdzqR_g4SkmdS6B9JUR5KI0l8.roa
File: abwdzqR_g4SkmdS6B9JUR5KI0l8.roa (raw, json)
Hash identifier: QQXhe2Lqt81yNDBP70Q0t2NxaOflVC2ER75MeCv/F50=
Subject key identifier: 69:BC:1D:CE:A4:7F:83:84:A4:99:D4:BA:07:D2:54:47:92:88:D2:5F
Certificate issuer: /CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Certificate serial: 018571B9FB70700B8E4D7EFD2C1F2AD9BA85
Authority key identifier: CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/abwdzqR_g4SkmdS6B9JUR5KI0l8.roa
Signing time: Mon 02 Jan 2023 09:04:52 +0000
ROA not before: Mon 02 Jan 2023 09:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 193.200.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b9:fb:70:70:0b:8e:4d:7e:fd:2c:1f:2a:d9:ba:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Validity
Not Before: Jan 2 09:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69bc1dcea47f8384a499d4ba07d254479288d25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2b:50:4c:76:dc:2d:7d:f1:2e:b9:db:42:ad:
59:56:5c:91:d6:11:39:62:c8:49:05:44:6e:c4:f0:
44:b2:cb:68:29:5d:49:ee:04:8e:0a:25:38:f8:27:
15:8d:cf:07:1c:8f:f2:a9:72:59:26:fa:98:a2:50:
c0:bc:6b:45:c8:b1:38:fa:9f:90:65:34:fe:6d:96:
9b:11:a1:5d:20:1d:93:32:c7:04:01:b6:c4:4f:3e:
55:7d:a6:2f:92:69:98:64:d1:28:4e:50:97:b7:1e:
0d:7c:93:98:7f:f3:35:bc:47:4c:2a:ae:3a:96:42:
87:03:49:55:c0:35:a6:93:fc:ed:31:73:1a:a4:ab:
79:70:e3:4b:c4:ae:8f:3a:4e:29:89:3c:8a:71:a5:
cb:61:ba:73:09:b1:4b:2d:1e:5b:47:f3:95:59:a7:
84:9b:d0:9f:07:c1:b5:3e:cd:7d:7b:6a:30:c5:14:
30:6a:37:68:1c:a1:73:7c:1c:f2:ba:42:ed:4b:6c:
66:6d:bc:6c:45:39:dc:de:37:3b:e8:51:d6:22:23:
8f:78:f9:0e:b4:5b:ff:ae:ff:5d:e2:a1:da:f5:e7:
98:93:a7:25:a7:a7:87:0c:4a:90:55:bb:fd:c0:bf:
97:06:05:2a:9b:d7:8f:38:63:d1:29:b6:37:6b:cd:
d3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BC:1D:CE:A4:7F:83:84:A4:99:D4:BA:07:D2:54:47:92:88:D2:5F
X509v3 Authority Key Identifier:
keyid:CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/abwdzqR_g4SkmdS6B9JUR5KI0l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.191.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:2d:1a:96:6b:28:c9:ee:04:68:c3:8e:17:38:c4:f9:be:53:
e8:88:2e:96:3c:ad:f5:83:b6:31:a9:cd:b7:fe:93:40:3e:8d:
26:f7:66:03:e4:22:96:c1:63:c7:13:aa:a3:1d:ff:42:37:7f:
aa:a1:ff:83:75:2e:6c:7a:5a:0d:f4:40:bb:3e:57:55:da:af:
52:50:2c:51:f7:be:48:91:65:a2:98:7d:43:81:ea:d9:15:2e:
9e:65:b9:31:f1:54:9b:2f:d1:85:5c:5b:ad:85:47:2b:ae:28:
d7:28:f1:b2:3c:65:f3:94:74:61:ec:1f:72:3c:b6:e1:d0:e4:
71:8a:ae:dd:89:7a:7d:e0:63:11:68:78:42:77:c6:8d:7a:1b:
9c:a5:07:1f:19:c1:7e:38:dd:d4:8a:fb:05:d6:c9:25:4b:57:
36:7c:e2:d6:82:e5:aa:80:d3:ad:24:89:b6:d3:ba:f9:c3:a4:
fb:3a:0e:8e:6f:5d:34:36:59:a4:6f:8e:ff:e4:a9:ca:dc:30:
88:8a:74:13:a1:33:5e:6d:a0:7e:a8:33:60:a2:b9:b6:68:15:
d9:2a:51:93:c4:03:3f:76:4e:23:1c:1a:75:15:f3:2c:f5:3b:
89:e1:29:3c:8f:3e:db:12:5b:67:75:38:5e:15:68:38:e6:56:
d9:66:32:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:24 2024 by rpki-client on console-fra.rpki-client.org