Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/lfAU9aQebUMS6lP2a2uGRYPmTfw.roa
File: lfAU9aQebUMS6lP2a2uGRYPmTfw.roa (raw, json)
Hash identifier: jejQ0J+lNlMXlhFvg52aplmGHNk+Yi3Keu+jhFkXw5k=
Subject key identifier: 95:F0:14:F5:A4:1E:6D:43:12:EA:53:F6:6B:6B:86:45:83:E6:4D:FC
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185738FEB8AB04FAF0CCC821D0827EAA129
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/lfAU9aQebUMS6lP2a2uGRYPmTfw.roa
Signing time: Mon 02 Jan 2023 17:38:09 +0000
ROA not before: Mon 02 Jan 2023 17:38:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47837
IP address blocks: 193.105.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Jan 2023 23:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:eb:8a:b0:4f:af:0c:cc:82:1d:08:27:ea:a1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95f014f5a41e6d4312ea53f66b6b864583e64dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ec:4a:25:a9:44:6c:36:6e:8c:8d:db:51:63:
17:49:92:77:3f:e5:4d:b9:67:1d:a3:6b:bb:6a:69:
70:31:f9:d4:db:fe:23:72:1d:6c:0c:b2:4d:db:0c:
a9:1b:b6:dc:71:30:93:12:8a:a4:0f:ce:2b:b3:9d:
60:a3:24:0f:74:b4:bc:6c:f5:b2:69:e4:36:8a:6b:
7b:9f:79:6a:43:83:56:ef:06:5f:8c:70:9d:c9:84:
1d:d7:c2:d5:30:df:36:ff:2d:14:b9:10:76:c2:52:
6e:7e:2c:cf:0a:e6:63:34:54:ba:9e:a7:11:6b:82:
f9:4e:27:81:34:ab:37:a8:87:e0:74:e3:47:81:69:
3f:1f:14:90:0d:33:46:fd:75:38:6f:3d:37:8c:ca:
3b:23:89:7b:af:f2:9d:01:eb:d4:39:02:19:50:1b:
c8:cc:bd:6c:8e:47:c2:1a:55:96:09:42:5a:60:53:
ca:cd:94:c6:ef:a2:df:02:1d:13:1b:b0:a0:36:49:
64:74:04:c6:40:5a:66:a0:5a:b6:07:07:b3:13:49:
29:9c:8e:76:78:cd:85:20:13:ed:0a:e4:4a:f4:fe:
b3:c7:3d:f0:24:3a:8d:f0:6b:40:d7:6e:73:b1:cf:
33:9a:fe:e9:c2:cf:f4:e0:94:82:40:42:a0:62:54:
14:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F0:14:F5:A4:1E:6D:43:12:EA:53:F6:6B:6B:86:45:83:E6:4D:FC
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/lfAU9aQebUMS6lP2a2uGRYPmTfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.184.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:49:41:d1:64:ab:9d:68:81:ec:70:e2:79:2f:c4:a1:af:1f:
d0:42:c4:fb:41:e5:89:23:9f:ea:5a:9e:c0:29:b7:89:76:0e:
50:0d:c4:8c:17:27:ba:18:6c:55:f1:01:f7:2d:16:62:03:77:
0b:2d:cc:42:d7:47:14:f4:7c:ae:d9:e2:55:aa:01:62:be:c1:
0c:bb:dd:a1:3c:7b:b6:10:c5:e7:7b:af:97:95:71:90:b2:d0:
5f:93:87:fd:e5:fb:91:bd:90:ec:ad:82:b9:03:07:49:af:d2:
bb:18:66:9b:d2:06:81:aa:8b:13:cd:f3:b1:b9:58:66:58:b3:
85:01:2a:97:eb:61:0e:8a:d1:f5:61:b4:6e:31:76:39:1f:15:
b6:3e:d4:3d:e9:ca:95:35:23:d0:9a:41:29:ca:36:a8:f0:a3:
2f:53:6b:01:ef:d0:4a:53:a6:d9:bb:5e:1e:db:f5:e8:2b:05:
f9:1a:fd:6c:b8:0e:45:37:de:59:02:cc:c7:85:3d:4a:d7:b7:
b2:d8:00:b6:69:d5:1b:c6:a7:42:a3:1a:7d:b4:81:58:30:c7:
29:7f:2c:69:4d:fb:7c:98:2b:23:8b:2a:d3:1c:bc:7e:a9:75:
05:c2:0b:c3:e9:39:87:67:25:d7:ea:e3:21:ef:68:c7:af:b6:
ef:22:b0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:49 2024 by rpki-client on console-fra.rpki-client.org