Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/FaQWi3v2z7iB-jJt3NaP73GwWtw.roa
File: FaQWi3v2z7iB-jJt3NaP73GwWtw.roa (raw, json)
Hash identifier: cIRYVfg/WPNaz93Qs2hmmpR1DNN3WmJd5r8uKOE7BGI=
Subject key identifier: 15:A4:16:8B:7B:F6:CF:B8:81:FA:32:6D:DC:D6:8F:EF:71:B0:5A:DC
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 0190E883B7E19CED48E8F001B64297A47C9A
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/FaQWi3v2z7iB-jJt3NaP73GwWtw.roa
Signing time: Thu 25 Jul 2024 06:11:04 +0000
ROA not before: Thu 25 Jul 2024 06:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 193.239.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Aug 2024 19:56:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e8:83:b7:e1:9c:ed:48:e8:f0:01:b6:42:97:a4:7c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jul 25 06:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15a4168b7bf6cfb881fa326ddcd68fef71b05adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b5:28:7e:80:2b:e3:2a:1a:ee:32:75:03:cd:
76:6d:a0:fc:81:26:ba:40:fe:73:de:54:e2:fa:1b:
cc:6e:e6:f4:32:26:62:ce:86:f0:f0:20:86:69:fa:
fb:a9:82:31:e0:02:1a:16:0a:dc:ff:0b:16:65:d8:
76:90:55:1d:e2:68:c3:6e:05:2e:2e:41:24:f7:77:
1c:58:77:85:6d:92:73:bd:50:b0:f3:34:c3:88:5b:
15:f8:8f:55:f5:a8:03:83:b5:0a:b3:ae:c1:a0:d4:
31:05:62:d6:c4:68:58:25:d2:3b:65:76:9b:cb:90:
87:9a:29:3a:46:3b:bf:88:f4:be:cc:fe:d6:5c:68:
9d:0f:5c:18:d7:ac:c2:d7:5c:2b:44:5c:42:6f:41:
12:9a:ee:c6:52:73:61:11:0a:6b:a5:c4:3e:07:52:
9a:39:14:db:e7:8c:c4:83:0a:37:5c:de:2b:d8:32:
8c:99:c4:f5:f0:a5:5a:9d:92:4b:70:79:7d:68:4b:
d2:cb:ac:a6:90:e5:aa:bb:db:21:35:0e:26:f2:d2:
3e:92:de:40:65:99:45:0a:a2:47:37:18:b6:ee:f7:
73:d1:1c:d7:ef:fb:08:83:b1:31:f1:d8:48:76:e8:
9c:31:10:bb:a2:6c:15:3b:33:8d:ed:04:db:43:b5:
d3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A4:16:8B:7B:F6:CF:B8:81:FA:32:6D:DC:D6:8F:EF:71:B0:5A:DC
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/FaQWi3v2z7iB-jJt3NaP73GwWtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.196.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:eb:c3:e3:e5:99:5b:e7:e4:cc:c4:af:17:ba:0e:2b:2a:1c:
e9:c6:29:4c:36:22:d8:52:e3:d4:cf:b1:48:c7:4b:50:ea:3e:
21:35:1d:d0:28:83:b0:a5:a7:fd:a9:cc:b2:eb:16:2c:c8:d8:
9d:60:da:21:39:71:c4:50:76:07:d3:4e:ba:2f:1c:ef:d2:47:
46:35:a7:80:df:c7:32:84:1c:8c:eb:1d:7a:01:c2:96:1c:4a:
b3:9b:a7:b2:98:13:ad:c1:40:e2:e2:c4:9a:46:0c:34:62:3a:
3a:90:7f:8d:74:91:55:a1:98:2b:cd:06:98:70:64:8c:cd:e8:
7d:2b:e2:f8:f7:cd:a3:c3:8c:23:e1:b3:a1:c9:d1:63:9e:bf:
ba:a0:55:5c:b1:70:fe:fb:0f:b9:a7:ef:af:d3:38:9d:4c:27:
e9:fd:5d:83:47:02:f3:8b:37:c2:cc:81:bf:a7:9c:7a:aa:f2:
16:0c:09:48:d9:23:00:a5:9d:b9:db:bc:dd:bf:cd:ca:65:bc:
66:c7:c9:f9:df:3f:d9:b7:0b:d5:b0:c8:81:d4:40:be:0f:4d:
08:8f:91:df:0b:cc:55:95:21:e9:25:43:85:cd:8c:aa:14:10:
34:56:bc:9b:87:0b:47:b3:56:8b:1e:18:15:5b:76:6b:af:30:
e1:a7:30:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 22:17:03 2024 by rpki-client on console-fra.rpki-client.org