Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/aB9FhxW9xaYquq12oGJYljziAaw.roa
File: aB9FhxW9xaYquq12oGJYljziAaw.roa (raw, json)
Hash identifier: 9fZ94o1iT04pz9NFJbiv5qbaPji7xw8Za6PwfqYVUaI=
Subject key identifier: 68:1F:45:87:15:BD:C5:A6:2A:BA:AD:76:A0:62:58:96:3C:E2:01:AC
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0185DB010DC88E61E3F40070DE1EE2723FCF
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/aB9FhxW9xaYquq12oGJYljziAaw.roa
Signing time: Sun 22 Jan 2023 19:42:37 +0000
ROA not before: Sun 22 Jan 2023 19:42:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 193.93.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:db:01:0d:c8:8e:61:e3:f4:00:70:de:1e:e2:72:3f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 22 19:42:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=681f458715bdc5a62abaad76a06258963ce201ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ad:ab:e1:a6:42:c9:a3:27:d2:fb:e4:6b:05:
7f:67:0c:8b:8b:38:02:68:5a:6b:a3:38:67:d3:e1:
60:8e:ab:41:91:dd:48:bf:f1:80:5c:7f:8e:90:44:
ce:87:e8:4f:bb:13:81:b3:50:75:08:e1:c2:f9:0f:
ee:1c:86:84:2f:b4:e8:ad:96:70:3f:85:85:f2:a5:
42:dc:fa:57:22:f3:c6:81:fa:b0:92:14:c8:c5:55:
5e:94:51:f3:89:cd:9a:e2:9a:6f:e5:b1:a4:99:a1:
39:be:60:b4:c2:9c:66:0f:60:26:9d:f1:f2:da:f0:
98:84:5d:f1:5d:65:8a:a7:6e:c9:ab:9d:c5:a8:9d:
89:72:3e:90:01:15:d5:78:25:0a:0a:ce:41:e6:bc:
0a:3a:85:32:b6:2a:21:f8:28:fc:9d:f1:4b:b9:ec:
b9:59:5f:cb:5f:84:1d:c2:ce:ae:57:9b:8a:d9:19:
bd:18:b2:6f:90:e5:b1:91:7c:11:76:c1:de:1c:06:
1e:3c:d4:5f:22:90:4b:2c:a9:55:b1:6f:80:a3:e7:
f5:54:37:28:a8:98:98:9c:53:ba:e3:27:94:df:71:
d4:45:38:f1:c4:fe:33:0b:46:3d:81:3c:66:82:e6:
be:1e:64:dc:3f:52:62:7c:c3:ac:bd:c6:56:7f:f2:
72:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1F:45:87:15:BD:C5:A6:2A:BA:AD:76:A0:62:58:96:3C:E2:01:AC
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/aB9FhxW9xaYquq12oGJYljziAaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.54.0/24
Signature Algorithm: sha256WithRSAEncryption
60:b7:e3:e7:50:74:fd:fb:88:af:53:16:82:8e:7b:b2:d7:f7:
d5:de:a7:83:f8:1d:5d:e2:86:d7:db:3e:24:e6:d0:71:35:26:
1a:36:e9:64:fa:88:5e:75:ec:fa:20:39:13:34:49:c3:cc:41:
96:02:29:79:b1:54:ea:5a:a9:31:23:63:32:6f:4d:76:f2:75:
54:71:58:96:e1:32:de:3f:76:85:21:7c:44:72:f0:08:a3:3b:
14:5a:b4:b7:1e:a0:85:04:53:45:4d:30:a6:bb:d1:76:e9:c5:
2a:6a:95:b9:b1:7a:ab:ef:cf:f3:8d:58:b5:18:36:b7:e6:b6:
e1:c0:6c:37:21:b2:7b:3b:01:99:48:32:40:65:22:98:ff:8a:
11:e1:cf:88:87:33:af:f6:87:1f:fd:ad:f9:1e:4b:37:01:40:
81:59:bc:e2:a8:d1:ea:05:3d:22:68:4a:99:06:af:d5:78:76:
bf:67:8e:0f:9a:a4:d0:43:e1:95:a8:51:b1:a8:7c:21:31:44:
a6:fe:e8:66:06:ac:a9:f1:37:14:3b:91:f5:3b:f2:2c:39:d1:
85:fa:5d:9b:d6:21:9b:17:b4:1d:5b:2c:4f:32:eb:e5:cd:dc:
d6:96:89:62:88:77:8d:83:26:05:95:0d:66:5f:2b:ed:82:3f:
99:81:73:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org