Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/Fr5SKxAcryvuTdyGbiAo6gTVtu0.roa
File: Fr5SKxAcryvuTdyGbiAo6gTVtu0.roa (raw, json)
Hash identifier: ElYuRoRwL/SlwCDw4sJiWyzNkCpjfV10VI5/DhLKGCw=
Subject key identifier: 16:BE:52:2B:10:1C:AF:2B:EE:4D:DC:86:6E:20:28:EA:04:D5:B6:ED
Certificate issuer: /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial: 01856E8B467F07D2802A7D3913176F3AD439
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/Fr5SKxAcryvuTdyGbiAo6gTVtu0.roa
Signing time: Sun 01 Jan 2023 18:14:59 +0000
ROA not before: Sun 01 Jan 2023 18:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30840
IP address blocks: 195.191.118.0/24 maxlen: 24
195.191.119.0/24 maxlen: 24
193.202.120.0/24 maxlen: 24
193.23.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:46:7f:07:d2:80:2a:7d:39:13:17:6f:3a:d4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Validity
Not Before: Jan 1 18:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16be522b101caf2bee4ddc866e2028ea04d5b6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b0:4b:76:1c:50:cb:1a:95:24:ce:1a:13:c1:
f7:c9:9b:e1:32:7a:28:a3:db:ff:5f:7b:4d:08:b1:
ef:28:87:a9:73:ea:34:30:06:1f:b9:f5:64:fe:a4:
f2:55:6e:92:5d:64:00:4c:cd:c5:e0:be:87:92:b0:
23:7e:12:a6:c1:1f:13:8f:dc:da:a1:62:e8:f6:35:
5e:bf:e0:38:57:a2:ea:6b:1f:66:19:57:97:15:11:
53:13:fc:42:c2:90:2d:1f:30:39:d2:f7:30:84:5c:
01:b2:c9:a0:16:fc:1b:3b:62:87:83:c0:b0:9a:02:
b8:ff:58:4c:92:f1:0e:c6:3c:31:b3:58:93:18:97:
af:e8:65:ec:3c:90:77:2a:fc:2b:9b:37:9b:e9:a9:
1c:ad:88:a3:55:c0:93:da:af:0c:7c:c7:18:e4:da:
25:f9:2a:d4:a8:4e:62:4b:cb:16:4d:d9:dd:a0:44:
40:94:b6:5c:b8:97:ca:b3:de:4e:6e:88:c2:ee:b3:
91:dd:7d:c9:37:91:15:10:92:8e:4c:48:b3:49:24:
73:3e:f5:a2:68:24:4d:a3:5f:8d:3b:9f:75:f9:ee:
d4:51:5d:d4:f0:37:05:29:52:95:40:eb:b6:b3:e4:
b0:2f:48:54:42:9d:64:b2:62:88:ec:a5:ff:7f:9b:
1e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BE:52:2B:10:1C:AF:2B:EE:4D:DC:86:6E:20:28:EA:04:D5:B6:ED
X509v3 Authority Key Identifier:
keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/Fr5SKxAcryvuTdyGbiAo6gTVtu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.156.0/24
193.202.120.0/24
195.191.118.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:4c:b8:e8:4a:1c:47:0d:11:c1:a7:4c:b9:84:82:6b:11:b5:
aa:66:23:74:b4:95:29:93:c6:44:59:c8:68:dd:bc:8e:9a:25:
08:2d:dc:53:8b:40:c7:d8:63:7c:8c:d5:8c:5a:e9:c2:37:7f:
ec:ae:a5:74:8d:63:30:b6:1b:ef:a3:f3:2a:be:b5:a2:ba:52:
ed:ce:b3:32:31:f6:40:c6:be:75:a6:43:04:f5:da:98:76:51:
02:81:3c:00:60:7a:3d:a9:84:cd:17:82:17:88:58:57:be:73:
e6:e1:c6:80:75:85:c5:a7:a6:49:73:d9:93:1f:d8:16:66:46:
ab:cf:e8:5e:08:4e:12:ca:ed:17:83:95:18:29:60:f8:03:d3:
b2:80:59:ca:e3:a8:18:be:82:9b:a5:d0:13:c0:43:7b:b5:c6:
20:25:87:f1:b4:fb:7b:50:3b:eb:0e:8b:92:5e:bb:e4:27:d2:
4a:22:b4:7f:13:dd:6c:91:14:61:fb:66:92:31:7e:31:c4:80:
fa:e1:cb:c3:af:13:8b:13:32:95:c1:d1:e7:c1:64:6b:01:8b:
41:67:83:c3:0b:48:f0:5f:8f:8e:4f:6a:61:29:20:f4:d9:f0:
6a:79:52:96:d7:be:16:46:3b:19:c2:d2:e3:2e:fa:b8:cd:2e:
3a:e6:60:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:29 2024 by rpki-client on console-fra.rpki-client.org