Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/g4IMAG4Hk_VhEfWM_o3zr_SzqcM.roa
File: g4IMAG4Hk_VhEfWM_o3zr_SzqcM.roa (raw, json)
Hash identifier: xfg+Qg72+X/lcibzP8xPtOXuIrJXAhqm0jb323QXENA=
Subject key identifier: 83:82:0C:00:6E:07:93:F5:61:11:F5:8C:FE:8D:F3:AF:F4:B3:A9:C3
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 0191F3FBC3B02D972BCD5AA57B306A9DBA06
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/g4IMAG4Hk_VhEfWM_o3zr_SzqcM.roa
Signing time: Sun 15 Sep 2024 04:40:48 +0000
ROA not before: Sun 15 Sep 2024 04:40:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 193.239.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Sep 2024 15:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f3:fb:c3:b0:2d:97:2b:cd:5a:a5:7b:30:6a:9d:ba:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Sep 15 04:40:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83820c006e0793f56111f58cfe8df3aff4b3a9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:6a:47:24:22:ae:24:62:90:c7:0c:e3:4c:
ad:e5:16:23:93:b9:2d:b4:58:ba:1a:56:34:e0:7d:
5e:5e:23:e3:c8:0d:5c:ad:ce:fa:6f:7c:f7:8f:69:
ca:0a:8f:6d:02:b7:b5:c4:95:2c:3e:3d:dd:50:6a:
13:12:0e:f5:f3:6d:fa:3e:95:23:94:a2:a6:a7:89:
ad:e0:6d:fe:e9:6f:ef:ef:b7:6a:bd:dc:41:c8:d5:
13:db:5a:0e:d5:c6:ac:ae:2c:44:64:af:b3:cc:3a:
1c:3b:18:72:9b:52:6f:81:42:7a:e5:3f:c1:82:48:
88:99:81:a5:ec:22:a1:a6:29:39:f7:20:51:09:8b:
bb:ff:72:c3:d8:dc:37:76:c9:19:b1:9d:b7:cf:5c:
e5:69:79:0a:7f:5a:67:a5:7c:cb:6d:99:d0:1c:b9:
9f:09:07:a9:15:4c:ea:56:71:24:5c:99:eb:dc:6e:
6f:c3:fb:1b:51:19:10:5f:54:f2:28:4d:4a:4f:f1:
01:7a:16:12:52:51:4f:5b:cc:9f:39:ee:9a:04:6e:
37:f7:93:6d:87:53:00:3f:27:c0:ba:cb:6c:74:bc:
ae:9f:77:d9:09:33:ce:58:c5:57:8e:50:ca:f5:01:
3d:75:ae:d2:56:a5:a7:4d:d8:70:d4:37:77:b8:63:
7b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:82:0C:00:6E:07:93:F5:61:11:F5:8C:FE:8D:F3:AF:F4:B3:A9:C3
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/g4IMAG4Hk_VhEfWM_o3zr_SzqcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.196.0/24
Signature Algorithm: sha256WithRSAEncryption
96:3e:f6:06:ec:05:4d:80:52:fe:e0:b2:93:6c:59:17:f4:db:
f8:a2:27:a2:cc:6d:07:ef:25:00:64:2c:78:6d:bd:f4:59:b2:
30:05:27:3e:28:bd:ea:84:a9:9f:56:dd:a6:50:79:75:34:a2:
25:8f:4b:63:c4:28:f8:ea:a7:10:9a:1e:26:25:2c:f7:85:8a:
f0:ae:7d:aa:9b:9a:4f:cc:d0:03:3d:ea:c5:1e:53:d3:54:7d:
ce:74:12:f2:e2:8c:2b:4c:6b:4b:e9:f7:e8:c6:5d:fc:15:0b:
fe:0e:d9:b8:5f:f6:a8:95:64:e7:aa:2d:a5:e9:a3:fb:1e:6d:
e1:4d:2d:5e:b3:df:c4:14:38:c1:80:65:e3:2f:55:8b:5e:60:
67:5f:05:fe:0b:b0:46:fe:3a:54:2a:e8:4e:35:79:62:3b:46:
7b:4f:90:79:67:81:54:7b:1e:e2:02:dd:fb:b6:30:f5:71:67:
03:59:48:ee:27:3d:13:6d:36:b9:5f:53:54:f3:dd:29:0d:43:
79:c1:5c:5e:67:4d:1e:48:5c:87:52:21:cc:ff:ae:e6:01:65:
fd:f1:8f:74:bb:35:ef:2f:0b:df:b7:0c:4a:34:df:30:3d:97:
e3:90:2a:92:73:be:8b:45:0d:01:82:8b:3a:c2:d5:65:c9:2c:
c1:e3:9c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 19:06:12 2024 by rpki-client on console-ams.rpki-client.org