Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/D69rB-kSs25mPWwhLA2j0iIrGko.roa
File: D69rB-kSs25mPWwhLA2j0iIrGko.roa (raw, json)
Hash identifier: 2frHUrWNWIQNNuxPUvBGnoxXIfEfTsauPz70X+YKE5Y=
Subject key identifier: 0F:AF:6B:07:E9:12:B3:6E:66:3D:6C:21:2C:0D:A3:D2:22:2B:1A:4A
Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial: 01856E1D2A87540E8C34EA9DE8BF078AE6AA
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/D69rB-kSs25mPWwhLA2j0iIrGko.roa
Signing time: Sun 01 Jan 2023 16:14:43 +0000
ROA not before: Sun 01 Jan 2023 16:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31662
IP address blocks: 193.186.252.0/24 maxlen: 24
2001:67c:934::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:1d:2a:87:54:0e:8c:34:ea:9d:e8:bf:07:8a:e6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Validity
Not Before: Jan 1 16:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0faf6b07e912b36e663d6c212c0da3d2222b1a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:55:80:a8:69:86:3b:82:8c:aa:c4:94:64:4d:
a8:ff:db:64:84:a5:07:3d:9a:5d:8b:1b:30:df:c2:
1d:ca:ce:40:f7:1d:a9:45:32:5d:73:66:2d:83:e4:
3b:f4:a5:d8:94:30:01:e7:33:f0:db:bb:cb:2c:ba:
d3:f6:c2:bb:b9:c1:9d:05:35:7b:60:bf:b5:37:c0:
e8:ae:3e:77:6c:2f:af:d1:cf:bd:ce:a5:2b:3d:77:
60:4b:57:93:ba:77:fb:63:f1:26:4e:d7:94:01:76:
3f:9c:5c:ce:b2:8e:d8:cd:64:ed:0c:d1:be:ee:42:
b0:d7:65:08:7f:70:a2:45:cd:da:cf:4e:db:61:cf:
0f:06:06:b4:f4:ed:97:08:21:2a:28:5a:63:7c:90:
0f:93:74:4d:31:1f:43:8e:fd:1f:60:36:54:d8:84:
9b:b9:1c:e5:33:f7:5c:6d:ac:f8:86:97:9f:77:1f:
97:63:75:3f:1f:51:ce:58:6c:12:54:37:b3:e3:ef:
5f:95:d7:24:9a:82:3b:cb:19:10:ca:b2:ad:92:94:
78:07:d1:b9:4a:41:74:63:54:7f:e3:6d:67:e4:ef:
a6:e7:cc:0a:1d:94:73:4e:23:50:cd:0b:f1:80:90:
4e:83:80:74:94:1d:eb:9e:3d:60:16:d5:a5:82:0a:
44:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AF:6B:07:E9:12:B3:6E:66:3D:6C:21:2C:0D:A3:D2:22:2B:1A:4A
X509v3 Authority Key Identifier:
keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/D69rB-kSs25mPWwhLA2j0iIrGko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.252.0/24
IPv6:
2001:67c:934::/48
Signature Algorithm: sha256WithRSAEncryption
05:36:da:d6:0e:80:fc:62:e0:63:5b:9b:b4:ce:e9:55:2d:0c:
12:69:62:ac:89:c1:6c:5d:dc:e7:1b:25:f0:7e:e7:3a:f1:73:
bd:04:cd:f0:05:ca:d7:48:ec:4b:a4:e4:0e:08:5a:e1:ff:ac:
96:a0:fa:78:a0:b4:56:31:40:81:df:ff:c1:b5:04:08:d3:33:
62:22:3e:e8:ca:64:57:e8:68:14:37:aa:47:94:78:7e:2c:de:
98:2b:51:a0:07:08:92:7c:8d:3a:63:41:c8:be:33:1d:97:ef:
ea:8b:fb:e1:3a:81:2e:dc:77:e0:bd:39:0b:59:32:44:68:85:
dd:4e:02:ab:58:e2:99:51:72:5f:36:09:e2:fd:e9:09:4d:3a:
90:28:27:73:68:76:6f:60:c7:2d:1a:87:35:cf:65:a3:f0:a9:
95:2d:94:92:07:c9:27:fd:5c:18:0a:ab:32:c2:28:e0:1b:49:
fe:10:ff:2f:c0:40:dc:72:5b:af:86:9c:84:39:a5:8d:5a:77:
0f:d9:60:93:63:22:7e:36:08:2e:74:8f:fd:2e:b4:55:64:48:
d3:6a:a1:74:58:80:d4:1b:82:fc:58:25:40:55:07:76:17:60:
66:95:21:6b:73:84:8b:41:28:3e:a0:9c:02:f0:1b:ff:e6:52:
22:f6:e0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:39 2024 by rpki-client on console-fra.rpki-client.org