Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/bQw8mDXNLtfaoC-PcxPat4Ts6Lc.roa
File: bQw8mDXNLtfaoC-PcxPat4Ts6Lc.roa (raw, json)
Hash identifier: sJT5KuTZWneaTtPF3g0MOu9lSpcBNKaKoEVnW2k/3CQ=
Subject key identifier: 6D:0C:3C:98:35:CD:2E:D7:DA:A0:2F:8F:73:13:DA:B7:84:EC:E8:B7
Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial: 01857169BBEB54D772B7A4E169B2F2EB60D5
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/bQw8mDXNLtfaoC-PcxPat4Ts6Lc.roa
Signing time: Mon 02 Jan 2023 07:37:12 +0000
ROA not before: Mon 02 Jan 2023 07:37:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20860
IP address blocks: 193.7.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:bb:eb:54:d7:72:b7:a4:e1:69:b2:f2:eb:60:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
Validity
Not Before: Jan 2 07:37:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d0c3c9835cd2ed7daa02f8f7313dab784ece8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:41:89:9b:a3:0c:6e:e3:ba:12:a0:40:f6:47:
03:b8:da:53:97:fa:c9:ef:7f:20:3d:a1:c3:3d:61:
8e:db:75:45:5b:14:21:d2:43:3b:14:e4:c8:1a:94:
7f:4c:6d:41:1d:ad:1d:ef:99:99:f9:e3:3e:b9:cd:
eb:41:2b:b8:50:04:52:c1:06:56:84:91:b3:87:84:
b8:6d:1f:0f:43:4f:cc:88:04:07:09:ad:ab:4a:b8:
8b:63:0b:af:95:fa:4d:a9:ea:30:71:cf:9e:5a:34:
84:e1:e6:f2:28:27:c5:7c:34:b8:c1:4a:99:bc:96:
49:b7:64:37:2c:4d:de:77:c7:3f:65:a1:12:cd:f7:
3a:e5:2c:6e:bd:f0:4d:0b:45:7e:7a:cb:2b:83:23:
4f:91:33:c2:5d:38:b1:ca:26:8e:fd:6d:30:c6:18:
22:b8:4e:e5:5e:d3:75:c0:7b:08:63:9b:47:dd:9a:
48:79:3b:67:64:2a:15:09:d4:49:e6:92:20:68:04:
dc:03:70:b9:db:84:f4:fa:60:f7:a2:8d:e7:66:db:
a2:fb:6f:4e:31:b8:8d:70:00:ea:dc:2d:75:99:56:
8c:b9:65:ed:2f:a0:7f:59:e3:73:91:d8:67:f8:ac:
70:de:a4:08:71:b0:77:e6:d1:a9:93:fa:7d:09:00:
34:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0C:3C:98:35:CD:2E:D7:DA:A0:2F:8F:73:13:DA:B7:84:EC:E8:B7
X509v3 Authority Key Identifier:
keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/bQw8mDXNLtfaoC-PcxPat4Ts6Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.7.195.0/24
Signature Algorithm: sha256WithRSAEncryption
84:f1:e1:39:2a:6a:77:a4:aa:41:39:f0:96:9c:4a:3c:53:a5:
01:12:67:b0:5b:51:39:1c:54:65:38:f6:a5:da:86:9d:f6:a4:
e5:c9:94:07:1d:6e:4e:ba:d5:b8:70:56:91:78:35:1c:83:94:
71:e3:cc:6b:59:9b:e3:bb:16:4b:f4:3d:ba:05:ed:fa:ce:96:
58:06:1b:58:25:c6:21:ad:29:7a:27:8d:e2:8f:65:7d:9c:9e:
97:8f:46:a2:e8:74:b0:e2:21:8d:e0:0d:6e:6d:5b:46:bb:17:
0c:2f:bb:64:74:7b:1e:f7:99:b5:26:c8:71:0e:9f:a9:a1:45:
2f:cd:3e:fa:f4:a1:bd:ac:7d:63:37:a1:6f:fb:92:9b:ae:b5:
1d:2f:17:6b:a8:06:4b:8d:7f:24:3b:18:45:02:52:29:42:bd:
c2:d1:0a:54:ac:96:d7:3c:28:9c:61:d8:f5:39:17:8a:e7:09:
e5:f4:b1:06:3f:53:ab:b0:dd:62:59:d1:93:56:ed:8e:10:67:
bf:ec:d3:2d:7e:b1:e4:7e:fc:a1:f2:11:87:1c:bf:fc:e4:ef:
10:ff:b3:2a:9f:6f:f7:8a:15:6e:43:de:d2:22:6e:01:e0:89:
36:0f:fe:41:81:65:37:91:14:6e:22:3a:51:49:da:15:77:30:
c7:18:a6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:42 2024 by rpki-client on console-ams.rpki-client.org