Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/_O22K7ZzG6G9ao1ZkwxZVhHDhpo.roa
File: _O22K7ZzG6G9ao1ZkwxZVhHDhpo.roa (raw, json)
Hash identifier: AGTuobUrTj4dlvWkUCX7TrfP1iMrEphFMH8kwoEkK/g=
Subject key identifier: FC:ED:B6:2B:B6:73:1B:A1:BD:6A:8D:59:93:0C:59:56:11:C3:86:9A
Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial: 0189D9778F599EE399F1828164D2C430A433
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/_O22K7ZzG6G9ao1ZkwxZVhHDhpo.roa
Signing time: Wed 09 Aug 2023 08:43:58 +0000
ROA not before: Wed 09 Aug 2023 08:43:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197099
IP address blocks: 193.7.192.0/24 maxlen: 24
193.7.194.0/24 maxlen: 24
193.7.193.0/24 maxlen: 24
2a11:a000::/29 maxlen: 29
2a10:fd40::/29 maxlen: 29
2a0d:be00::/29 maxlen: 29
2a0d:d340::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d9:77:8f:59:9e:e3:99:f1:82:81:64:d2:c4:30:a4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
Validity
Not Before: Aug 9 08:43:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcedb62bb6731ba1bd6a8d59930c595611c3869a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5f:ae:21:e3:5e:c6:32:c2:15:dc:a4:87:77:
90:02:df:5d:7c:de:74:cd:e3:3f:45:a6:a7:8a:c4:
87:4c:e2:f2:fc:e1:69:3b:61:63:a0:f7:d5:d9:30:
6d:f8:c0:a7:91:95:12:dd:4d:08:5c:70:e0:f6:77:
e1:9c:26:52:b3:0f:c0:0b:44:16:42:12:ac:5f:4c:
7d:ab:d4:90:7c:f4:4a:cb:58:68:5d:45:6b:94:63:
28:42:4e:7d:42:2b:05:3e:6a:b5:45:75:67:c0:46:
ad:59:cd:75:bb:ef:f6:d1:8b:84:3b:52:5c:ff:c3:
f6:5b:0c:e5:71:50:50:7f:9c:c0:8a:01:93:bb:78:
91:99:b0:52:91:a8:9f:33:d9:1e:98:eb:c7:92:e7:
06:2d:39:7c:6b:cb:68:bf:bc:d0:26:31:f9:7b:f8:
fe:20:56:23:6e:83:62:00:79:6e:de:2a:7e:c4:33:
ca:43:da:ac:1b:89:ab:33:f4:4d:85:5d:b5:18:21:
07:13:61:70:04:36:a3:e0:de:f8:5a:35:97:a1:c7:
1e:73:7b:11:b9:e3:cd:7c:80:0c:8c:17:b6:10:87:
dd:17:cc:44:6d:04:c3:70:03:e0:0d:a5:0f:78:69:
16:39:f7:c2:c2:85:59:54:d9:51:07:cf:b0:39:bb:
37:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:ED:B6:2B:B6:73:1B:A1:BD:6A:8D:59:93:0C:59:56:11:C3:86:9A
X509v3 Authority Key Identifier:
keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/_O22K7ZzG6G9ao1ZkwxZVhHDhpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.7.192.0-193.7.194.255
IPv6:
2a0d:be00::/29
2a0d:d340::/29
2a10:fd40::/29
2a11:a000::/29
Signature Algorithm: sha256WithRSAEncryption
20:af:58:42:a3:0f:ec:4b:50:35:44:4c:b5:58:42:b2:c9:b5:
eb:3b:11:65:b6:49:f9:a2:e0:63:d3:49:6d:34:64:75:63:8f:
f5:6b:bb:70:31:e3:ec:3e:c8:1a:4d:78:8d:21:07:87:30:0d:
ea:e8:6e:d4:20:2d:6a:51:8a:f6:3c:ea:6c:48:38:13:c8:ab:
d5:d4:0b:39:c6:7c:37:60:fd:91:31:1c:26:97:2c:e8:d2:2c:
5d:cb:99:fe:11:0f:73:e6:2f:21:84:19:5d:93:9b:58:ad:ac:
5e:f1:ef:d5:9e:d0:56:34:93:55:2d:c9:53:a2:45:6e:83:e6:
fe:fe:e4:48:79:c2:35:05:19:63:ac:94:31:c1:7f:a1:f1:72:
c4:f9:29:f6:18:b4:9f:f9:4d:a4:46:81:69:57:57:78:aa:7b:
2e:22:b6:58:9d:18:83:c8:df:e5:17:3b:99:b8:e7:ae:8c:df:
af:70:49:47:f1:1d:7d:96:e6:99:43:b2:4c:e4:61:15:aa:d1:
33:0a:54:5b:6f:e8:82:23:d1:92:cb:ae:6c:f7:f8:08:12:0d:
d6:38:d7:48:b6:17:0a:2c:85:54:44:d2:2b:89:b8:9a:ba:9a:
7d:94:87:6a:58:d3:0e:ef:b6:fd:95:a4:19:86:74:39:56:cc:
45:b1:61:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:42 2024 by rpki-client on console-ams.rpki-client.org