Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Fen3pXoSPG3QTXIjkvM6kTtQ4kw.roa
File: Fen3pXoSPG3QTXIjkvM6kTtQ4kw.roa (raw, json)
Hash identifier: cMW4eJJShSKaj+/Dl7kGXoJl9QDeImwqY3u9zaaT99w=
Subject key identifier: 15:E9:F7:A5:7A:12:3C:6D:D0:4D:72:23:92:F3:3A:91:3B:50:E2:4C
Certificate issuer: /CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Certificate serial: 01856EF42F6EC910266C626771D6983C2471
Authority key identifier: 0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Fen3pXoSPG3QTXIjkvM6kTtQ4kw.roa
Signing time: Sun 01 Jan 2023 20:09:34 +0000
ROA not before: Sun 01 Jan 2023 20:09:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57609
IP address blocks: 193.222.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:f4:2f:6e:c9:10:26:6c:62:67:71:d6:98:3c:24:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Validity
Not Before: Jan 1 20:09:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15e9f7a57a123c6dd04d722392f33a913b50e24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:79:0b:5e:2b:0f:be:b1:21:c1:f0:83:32:f1:
a4:4f:3d:87:af:04:15:65:00:18:a4:7d:10:6e:3d:
b4:1d:61:d7:c9:8e:8b:31:a0:0f:4d:2b:8c:7c:a4:
29:0e:7e:88:0a:f1:7a:ee:67:48:e4:95:88:bd:16:
da:7e:f2:2e:2e:49:e3:fc:3a:ce:a4:18:a2:df:73:
cb:b1:4e:10:31:b2:48:95:be:c0:3a:9f:fd:93:74:
a4:1e:df:7e:f6:15:cf:86:18:b7:1d:9d:17:4f:91:
d6:72:72:97:ca:ee:19:00:9f:00:98:55:f4:d1:ff:
19:c3:f1:bc:ab:f6:38:1c:ba:c4:3e:97:d4:75:52:
8c:bc:86:d3:e0:7c:0b:2c:1f:f3:f3:1e:b9:1c:82:
2d:4a:b4:0b:f2:52:d3:0b:61:2d:e3:cf:78:84:2e:
f6:80:b9:41:41:a8:28:b7:81:c3:3a:bf:85:11:15:
d1:70:70:c8:fd:99:a4:76:6f:65:b3:95:d5:3b:12:
c7:cc:eb:aa:aa:ee:a2:ac:b2:bd:4b:42:ce:cc:86:
30:81:95:53:66:f0:c6:59:14:34:cf:81:4a:2c:f1:
0a:91:4c:c0:d0:9c:d3:06:af:a6:ec:bb:fc:6e:ec:
12:1d:77:62:f8:0c:46:9a:e2:a8:a9:fe:34:13:0e:
86:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E9:F7:A5:7A:12:3C:6D:D0:4D:72:23:92:F3:3A:91:3B:50:E2:4C
X509v3 Authority Key Identifier:
keyid:0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Fen3pXoSPG3QTXIjkvM6kTtQ4kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.58.0/24
Signature Algorithm: sha256WithRSAEncryption
40:85:c1:3f:77:9a:ea:5d:84:eb:45:0c:3a:72:2d:2c:62:24:
90:c8:76:4e:3c:0e:47:bf:4a:f8:4b:df:01:48:e0:c5:e6:c8:
32:51:21:1a:d6:6c:5b:61:9a:9b:c1:81:90:50:cf:25:1b:ba:
6e:1a:b2:d7:52:3f:6f:eb:74:42:41:0d:fb:bd:a2:2d:8c:f1:
73:fd:f3:61:03:49:e2:99:e4:95:da:ea:9e:58:79:62:be:01:
a4:6f:b9:de:ae:20:20:cc:7e:7b:19:45:9e:10:58:37:c4:fb:
8c:e2:74:e9:64:ab:57:86:bb:16:d0:4a:cf:04:25:c8:89:aa:
da:5a:4b:70:8d:52:93:89:5d:c9:99:c5:e1:82:13:b1:15:a2:
20:7f:d0:e6:d1:54:4d:46:2c:87:17:73:9f:3d:db:54:2c:28:
82:f4:35:a3:9c:49:5f:7a:4a:dc:6a:9a:ea:55:bf:bb:43:d1:
c6:c7:0d:83:e1:a0:51:a9:3d:61:61:b8:03:d5:b6:bb:30:fc:
c7:20:4d:e0:35:09:9f:a3:3b:3d:a8:80:07:92:c1:13:ce:b7:
52:c2:8a:d8:ab:29:bd:91:b6:2b:0e:d5:4f:ca:74:33:5c:b6:
77:11:92:e8:6c:4c:ff:d6:59:97:c1:59:f3:79:0a:36:c8:9a:
9d:ec:47:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:18 2024 by rpki-client on console-ams.rpki-client.org