Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/_ttnJxSN2C6XOac6pmz6lRYdIGk.roa
File: _ttnJxSN2C6XOac6pmz6lRYdIGk.roa (raw, json)
Hash identifier: 6oHI9xKRImIhMLN5IAJCFucXQNSyEQkrv4p9rNniBo4=
Subject key identifier: FE:DB:67:27:14:8D:D8:2E:97:39:A7:3A:A6:6C:FA:95:16:1D:20:69
Certificate issuer: /CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Certificate serial: 018CC8DF0885904F8F77B064E919D5554D1E
Authority key identifier: B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/_ttnJxSN2C6XOac6pmz6lRYdIGk.roa
Signing time: Tue 02 Jan 2024 06:31:49 +0000
ROA not before: Tue 02 Jan 2024 06:31:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8220
IP address blocks: 193.109.53.0/24 maxlen: 24
193.109.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 15:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:08:85:90:4f:8f:77:b0:64:e9:19:d5:55:4d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Validity
Not Before: Jan 2 06:31:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fedb6727148dd82e9739a73aa66cfa95161d2069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:75:3e:ef:25:03:06:8d:31:d2:b4:dd:54:b2:
cf:29:33:80:fa:30:2f:a8:61:79:51:9c:ba:0a:35:
da:71:e6:17:d9:42:b1:73:8c:6c:08:e5:7c:81:87:
9b:5a:b3:d6:1c:d6:c6:d5:f0:c4:66:73:b5:5f:50:
d2:74:29:ab:17:db:d6:54:d8:8c:57:78:da:91:ef:
fd:85:25:b6:a8:d3:ef:4a:5e:4c:15:a0:ba:4f:0f:
f8:4a:02:29:7d:54:a7:6c:21:e9:d9:43:56:ce:6f:
15:96:2d:76:a1:bc:bf:d0:c3:c0:49:56:4e:dd:92:
ca:dd:45:9f:9c:72:6b:a9:d3:af:b3:c9:67:12:4a:
c9:b0:0b:42:b5:e0:2f:42:cc:20:f5:56:ef:dc:0f:
1d:14:3c:9f:60:9f:8d:20:f3:3f:f6:11:25:e4:5e:
c2:33:79:26:29:53:61:38:c1:be:45:2d:11:53:c2:
4f:0b:48:fe:17:6f:5c:b1:80:5b:34:05:b5:8e:77:
cd:71:36:21:8f:9c:5f:6a:b9:b5:da:87:bc:fe:2e:
08:92:47:f4:98:3f:5c:12:72:e6:61:fd:cd:d0:e0:
fa:a5:79:00:f5:4b:54:ae:fc:d5:0a:89:68:9d:e3:
3b:e6:d8:3e:da:eb:92:03:bd:44:43:1f:5d:dd:2b:
c2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DB:67:27:14:8D:D8:2E:97:39:A7:3A:A6:6C:FA:95:16:1D:20:69
X509v3 Authority Key Identifier:
keyid:B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/_ttnJxSN2C6XOac6pmz6lRYdIGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.52.0/23
Signature Algorithm: sha256WithRSAEncryption
24:17:dc:67:34:85:73:18:c6:2a:2a:3c:80:5d:3b:f9:ae:79:
e1:de:23:6b:98:ad:7a:b8:a4:4a:6a:41:ea:86:d1:87:ee:61:
fb:16:61:6f:05:a6:3e:9b:f7:d4:05:dc:5f:29:15:a4:65:42:
5e:13:b6:ea:bc:80:a7:16:ab:71:84:5d:93:4f:d4:cb:19:48:
2b:79:a3:ee:4f:c0:95:9d:e4:4c:7f:bf:ba:b7:2a:5f:e0:d2:
b2:8f:68:bd:ef:42:a9:b8:a0:01:ac:b4:20:8e:9b:a5:ca:67:
ba:0e:ee:c8:76:49:fe:32:0a:89:5f:1b:df:3a:49:21:36:68:
22:d6:15:a9:79:f4:43:f5:6a:33:e6:91:7f:4f:85:a9:19:98:
fb:6d:7e:9c:44:88:13:51:f4:d8:44:2a:23:5c:bb:a6:62:fc:
02:b0:b8:f3:57:3e:e6:d3:bb:06:06:55:c4:e6:fe:34:16:26:
2d:0f:ca:41:7e:48:7f:d4:c1:78:4b:b5:91:34:6c:81:83:bf:
19:bc:64:ab:4a:48:ce:fd:4a:d1:20:df:33:c0:34:be:91:63:
66:44:c7:d3:76:82:e0:ce:40:ef:7d:c9:d0:0b:9f:b4:26:95:
34:19:71:37:db:0e:bd:67:15:10:2e:d1:33:a9:b6:ea:21:eb:
59:b1:22:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:18 2024 by rpki-client on console-ams.rpki-client.org