Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/cwjvuS4MnLhO2tlPp8TmX4Se2sU.roa
File: cwjvuS4MnLhO2tlPp8TmX4Se2sU.roa (raw, json)
Hash identifier: zU8BR0fGC2YSbrBtRXAmEspUSH6EuTkeoKcakWLnC2A=
Subject key identifier: 73:08:EF:B9:2E:0C:9C:B8:4E:DA:D9:4F:A7:C4:E6:5F:84:9E:DA:C5
Certificate issuer: /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Certificate serial: 0188D967008F5A80581C5C27F32474CAE555
Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/cwjvuS4MnLhO2tlPp8TmX4Se2sU.roa
Signing time: Tue 20 Jun 2023 15:23:06 +0000
ROA not before: Tue 20 Jun 2023 15:23:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26937
IP address blocks: 193.103.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d9:67:00:8f:5a:80:58:1c:5c:27:f3:24:74:ca:e5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Validity
Not Before: Jun 20 15:23:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7308efb92e0c9cb84edad94fa7c4e65f849edac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9f:3c:cb:1c:fc:2a:5f:48:c8:fd:0e:59:ae:
f2:0f:05:6f:3d:f2:03:de:ab:a5:68:a7:0f:09:75:
2d:d9:24:ef:79:54:31:e6:9e:a0:75:65:70:0f:f8:
8b:3e:d6:a2:3b:ed:9b:78:46:4d:42:64:39:75:c0:
b3:02:c6:c0:ac:c5:d4:15:3d:73:7e:36:e1:11:3c:
5b:19:48:f5:af:e8:e0:d7:26:b5:4a:1b:e7:30:ee:
69:1d:b9:f8:9a:7b:ab:ed:7b:85:c8:d0:4a:e4:cb:
fe:54:d1:eb:50:67:67:05:c8:ad:e7:59:ef:58:97:
7e:05:46:c2:21:0f:d3:c8:d3:b4:a0:5c:8d:e7:8a:
d2:ea:80:ea:b3:a3:4a:20:cf:91:5d:42:07:d4:0c:
0f:fe:80:cd:0e:c1:98:b6:e3:ef:3a:48:bd:2f:f4:
42:0d:c8:70:30:ee:e6:03:c7:08:8a:d3:bf:61:1f:
05:2f:71:10:18:f8:e5:cf:9d:b4:3c:45:97:c3:82:
7e:44:5c:f6:0f:5e:70:67:8b:14:a1:61:70:d1:48:
b7:57:db:28:09:ee:0c:e1:a0:7d:51:2a:63:9f:8a:
6c:91:ce:f7:71:4f:d3:8c:38:6a:f2:f1:00:ce:2c:
cd:50:16:01:3d:01:6c:b2:b5:d0:9d:93:a9:c6:b5:
61:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:08:EF:B9:2E:0C:9C:B8:4E:DA:D9:4F:A7:C4:E6:5F:84:9E:DA:C5
X509v3 Authority Key Identifier:
keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/cwjvuS4MnLhO2tlPp8TmX4Se2sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.103.194.0/24
Signature Algorithm: sha256WithRSAEncryption
06:6e:cf:f7:52:02:12:a2:82:87:4a:f2:85:78:56:3d:14:20:
58:ad:11:a8:a9:f8:a2:1a:e1:86:1c:e0:60:e0:dd:29:e2:8b:
79:02:29:d1:b5:d4:e8:e7:f3:10:62:9d:c6:19:a1:23:27:af:
db:08:15:ef:01:08:95:6f:72:d2:cb:62:8b:23:5b:8b:d2:85:
3b:27:0b:c7:e8:c0:01:ee:7b:a4:bd:78:2b:32:f0:b6:a7:bc:
92:b7:5a:74:8a:45:7e:ee:3d:5c:54:f0:fe:fb:cb:cb:1c:92:
41:ee:fa:0e:fc:9c:f1:6f:30:80:a5:d6:e1:c8:15:1e:01:6a:
a0:4b:72:3e:a7:0e:a0:20:4d:ab:2d:45:b1:c8:e4:22:87:eb:
64:36:3a:9e:50:1e:ea:9e:f6:5b:26:c3:b1:8f:a2:0a:d0:1c:
c8:07:ed:ef:68:5a:e5:e8:67:5d:be:90:aa:af:25:a9:b9:4d:
1e:b8:e3:22:f2:5b:df:87:4a:bf:25:78:b2:49:fa:98:e3:2e:
15:32:cb:dd:30:78:d9:04:8a:98:27:bb:8c:dd:69:ef:a0:1f:
d3:82:1f:9b:6b:f7:43:6c:a8:b2:2a:6f:de:23:ac:a0:af:d0:
cf:ac:a9:02:c7:6d:5a:77:b1:51:8b:16:45:c7:70:3c:30:b1:
d5:bc:8b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:37 2024 by rpki-client on console-fra.rpki-client.org