Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/1-CNyIjkgQYkYiRgEG6KFn9oHrd0.roa
File: 1-CNyIjkgQYkYiRgEG6KFn9oHrd0.roa (raw, json)
Hash identifier: FtDGBrFy5V0CMpKmxNLR7p1KPG/y02bsTgwfwGmTXWg=
Subject key identifier: F8:23:72:22:39:20:41:89:18:89:18:04:1B:A2:85:9F:DA:07:AD:DD
Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial: 0190C511768FAFF7E41393BC74A41AEDF1D4
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/1-CNyIjkgQYkYiRgEG6KFn9oHrd0.roa
Signing time: Thu 18 Jul 2024 08:59:34 +0000
ROA not before: Thu 18 Jul 2024 08:59:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50028
IP address blocks: 188.93.197.0/24 maxlen: 24
2a0f:d300::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Sep 2024 18:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c5:11:76:8f:af:f7:e4:13:93:bc:74:a4:1a:ed:f1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Validity
Not Before: Jul 18 08:59:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f823722239204189188918041ba2859fda07addd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:03:a1:c4:11:82:50:b4:9b:3e:a8:b6:d3:87:
ae:74:f0:17:52:34:b1:aa:b4:8c:9f:9b:73:13:86:
f4:e4:6a:6d:e8:55:77:8e:57:54:04:a8:3b:e5:40:
0c:88:45:af:f8:f0:b6:ee:92:7d:fe:3b:77:c0:b0:
c3:6d:0e:82:52:25:c6:03:48:b3:bd:c0:36:26:80:
f0:66:37:fb:72:d8:57:da:11:63:a6:96:97:ff:53:
cc:a1:de:4b:e3:2b:fa:e5:92:60:9a:bd:b9:6a:65:
0e:ef:4d:42:58:7a:94:ee:a9:a1:fa:5e:ff:6e:03:
3a:d6:48:75:fa:29:59:92:19:d0:d1:9b:63:94:53:
43:b0:ff:2f:ff:c1:71:26:1e:c3:1d:0b:ba:3e:96:
86:06:aa:e7:1b:3d:a0:d5:fb:30:0c:37:41:b9:d9:
e3:f7:9f:07:86:94:f7:4a:83:e3:df:1e:37:19:93:
9d:42:6d:12:8f:82:93:38:eb:1d:64:ad:ce:11:41:
3c:63:d7:b1:92:69:b8:a9:03:d4:80:c1:8e:ff:d0:
2b:84:c6:ab:30:0e:f1:15:7e:55:74:ab:ee:10:70:
67:31:a2:ae:8e:99:87:e5:24:c1:5f:96:19:68:20:
28:a8:d5:4c:4b:43:94:45:d4:bb:82:d7:06:e6:89:
85:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:23:72:22:39:20:41:89:18:89:18:04:1B:A2:85:9F:DA:07:AD:DD
X509v3 Authority Key Identifier:
keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/1-CNyIjkgQYkYiRgEG6KFn9oHrd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.197.0/24
IPv6:
2a0f:d300::/48
Signature Algorithm: sha256WithRSAEncryption
ad:f8:12:34:ff:0c:c4:7f:a8:34:02:55:5e:b0:db:49:f1:a5:
9f:a4:94:20:3b:44:e1:22:b5:70:b5:0b:52:e6:3c:a2:43:b1:
bb:0f:85:8c:0e:00:20:cb:d2:6c:51:3f:1e:03:e6:51:d2:22:
b6:9a:4e:bd:8d:9b:ae:67:e6:52:81:0c:36:cb:a9:22:cd:e1:
a7:85:96:c3:a9:b1:63:18:69:7d:10:1f:36:45:7e:9f:11:75:
7b:f0:33:80:82:28:35:29:bb:87:51:e6:b5:94:71:8a:7d:48:
21:c1:40:09:36:76:fe:66:8a:9d:c7:f5:d0:a4:c0:a1:0d:5b:
f5:6e:bd:41:04:92:c0:f6:78:83:fe:16:8c:c1:88:d9:e2:93:
2a:e3:0b:ab:d7:f0:3f:b7:0d:f2:3c:9f:00:cb:c5:73:d9:41:
90:1c:ea:32:a7:a8:83:07:a9:1a:76:0d:9a:2c:19:85:c2:f8:
ec:b5:02:05:32:7f:89:11:f3:35:51:e8:70:9b:6c:05:3c:0c:
d6:4a:2a:db:ff:05:7e:fe:67:39:e1:c2:f8:f2:f7:6d:28:41:
cf:74:c4:2b:0f:67:09:07:f7:a7:9b:9b:a9:10:8d:50:4a:0c:
98:f4:87:1f:9d:64:74:79:1a:95:ef:db:3e:c9:b3:61:80:80:
ef:7a:bf:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 20:37:39 2024 by rpki-client on console-fra.rpki-client.org