Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/D5OMpQifMWmvoipdrQqMa11N0e8.roa
File: D5OMpQifMWmvoipdrQqMa11N0e8.roa (raw, json)
Hash identifier: gLpITbR+1xNo1i30wDj8/cr5XDeM1pU/gvhgbZvh7l0=
Subject key identifier: 0F:93:8C:A5:08:9F:31:69:AF:A2:2A:5D:AD:0A:8C:6B:5D:4D:D1:EF
Certificate issuer: /CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Certificate serial: 0185710C0A10504971455468EBB4E4472F23
Authority key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/D5OMpQifMWmvoipdrQqMa11N0e8.roa
Signing time: Mon 02 Jan 2023 05:54:52 +0000
ROA not before: Mon 02 Jan 2023 05:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59676
IP address blocks: 193.105.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Jun 2023 15:07:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:0a:10:50:49:71:45:54:68:eb:b4:e4:47:2f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Validity
Not Before: Jan 2 05:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f938ca5089f3169afa22a5dad0a8c6b5d4dd1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:22:69:80:89:db:63:d9:ae:4f:da:f3:e8:e4:
56:61:ac:57:77:ac:1d:e2:0e:8a:db:94:d9:9e:9f:
00:a5:1d:e0:a3:79:32:21:11:3f:8c:c3:7b:de:68:
5d:76:13:69:69:7a:77:03:f0:50:fd:83:92:88:27:
b1:24:1d:11:f6:59:e7:66:8f:95:4b:c4:22:37:26:
f7:b2:22:79:81:d1:43:c8:88:87:5d:e6:bb:3f:f9:
04:b1:04:c6:68:83:cc:9c:0c:9c:f2:a0:18:61:29:
02:0b:63:a5:fd:70:78:39:05:94:28:bc:a2:61:bd:
a3:c9:41:a8:97:97:e6:58:c2:e8:62:9f:52:55:08:
1d:f3:31:68:bc:9b:b0:e7:04:a1:ed:42:72:b0:92:
07:05:47:57:a5:e2:a6:71:47:db:d8:67:c6:15:46:
26:96:e3:8c:53:fe:e0:60:f8:31:3d:12:c1:10:92:
24:9b:af:e0:96:aa:33:e1:26:91:06:c9:e2:05:96:
da:7f:da:d9:e0:f2:d5:b6:3e:76:9e:7f:5f:b8:1e:
65:1b:58:c8:db:8a:c7:f7:33:7b:e1:f8:fa:45:5d:
21:6f:35:87:e7:c1:ac:f6:72:7f:0b:27:d9:59:7b:
0a:1c:64:38:c7:58:ca:83:75:5c:66:c3:a1:bd:38:
96:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:93:8C:A5:08:9F:31:69:AF:A2:2A:5D:AD:0A:8C:6B:5D:4D:D1:EF
X509v3 Authority Key Identifier:
keyid:BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/D5OMpQifMWmvoipdrQqMa11N0e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.150.0/24
Signature Algorithm: sha256WithRSAEncryption
08:62:ed:73:c4:45:32:b5:a3:81:b9:2f:3a:aa:84:be:93:34:
5f:0a:5a:f3:dd:8a:28:ab:a4:94:84:9d:e2:9f:d0:2e:18:4e:
44:4e:e8:ee:6f:39:a1:fa:02:47:fc:16:2a:fe:39:6b:f1:8d:
46:18:72:56:21:f7:4a:91:7c:27:e5:80:33:fa:ee:08:42:1d:
a3:57:f9:c5:88:9d:77:da:bd:fe:67:91:60:a5:d0:15:14:b8:
ab:25:db:2f:f5:f0:11:75:c0:f4:ed:d9:9f:c7:79:2f:4a:5f:
8a:47:68:ff:53:1e:ec:c8:e2:9d:13:ea:40:3a:ec:8b:14:95:
a6:dd:6f:42:b0:0c:ed:ed:af:3a:8d:a6:da:65:c8:71:17:9e:
07:e0:15:f7:8f:dd:8d:e8:59:dc:b2:60:a6:91:81:e1:70:99:
e5:86:4b:76:d2:04:30:ed:f7:ea:94:8a:d1:e1:5d:a7:1c:26:
7e:e4:9f:20:04:d3:e5:f3:f3:e8:bc:f7:02:a8:c1:d4:8e:14:
a9:df:f5:af:5c:41:9d:35:ab:d8:e1:59:64:89:fb:16:2f:36:
9e:53:e6:c6:1b:a0:55:77:c3:51:3e:e0:ab:3a:63:f0:1f:a9:
48:b8:46:b2:c8:26:8a:bf:d6:a1:1f:0e:54:18:21:9a:01:38:
c6:d5:e9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:34 2024 by rpki-client on console-fra.rpki-client.org