Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/hioAay9U-9zz5bxF2uK9VPeUTnU.roa
File: hioAay9U-9zz5bxF2uK9VPeUTnU.roa (raw, json)
Hash identifier: stgMmFrr6/ty57aKDT/BsHS/v74Uhg7o0+iytyEMIj8=
Subject key identifier: 86:2A:00:6B:2F:54:FB:DC:F3:E5:BC:45:DA:E2:BD:54:F7:94:4E:75
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018A830587A31FFBB68CF1D08EA7D175E296
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/hioAay9U-9zz5bxF2uK9VPeUTnU.roa
Signing time: Mon 11 Sep 2023 06:54:52 +0000
ROA not before: Mon 11 Sep 2023 06:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.239.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Sep 2023 02:32:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:83:05:87:a3:1f:fb:b6:8c:f1:d0:8e:a7:d1:75:e2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Sep 11 06:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=862a006b2f54fbdcf3e5bc45dae2bd54f7944e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e0:32:0a:6a:6b:eb:04:b2:39:78:da:3f:37:
c6:ee:6b:d9:5e:ff:b6:83:5a:9b:39:58:13:e6:b0:
98:1c:1f:ff:ae:cf:e9:f6:ed:35:f3:31:85:5a:02:
dd:60:13:fa:87:97:10:59:58:05:97:59:5f:15:9f:
e8:14:23:83:52:2c:d7:08:be:e0:e6:c8:73:cc:ad:
68:db:b8:09:47:a1:88:43:3c:72:41:34:86:8e:95:
3c:c7:db:43:59:bb:ab:93:97:6a:31:d0:fa:d3:39:
ad:39:63:26:39:9d:0e:79:87:ae:8f:93:bb:02:cb:
e2:bc:60:e7:11:00:09:82:a2:77:ce:01:87:00:5a:
ec:40:61:b9:b0:81:71:62:14:81:55:68:a5:7d:9e:
a0:f3:6a:92:71:5e:c5:5e:5a:d3:32:fe:e7:0a:7c:
a2:82:36:be:be:f7:8b:fc:08:02:34:fe:fe:2c:78:
5d:14:0c:a2:55:8f:7c:05:67:c2:82:0c:52:87:7d:
a0:18:ea:f0:38:07:67:7e:eb:cb:fd:8d:d8:ac:57:
2f:d2:f2:d1:46:60:51:c1:d1:56:f4:d9:49:99:aa:
0b:16:ee:6f:5e:57:38:20:24:e1:e4:03:18:b7:b4:
48:3c:9e:a4:cb:23:e6:d8:b2:14:57:9a:7a:b0:da:
ce:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2A:00:6B:2F:54:FB:DC:F3:E5:BC:45:DA:E2:BD:54:F7:94:4E:75
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/hioAay9U-9zz5bxF2uK9VPeUTnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.197.0/24
Signature Algorithm: sha256WithRSAEncryption
74:9b:70:84:33:da:9b:06:12:66:ca:ad:05:c3:0c:e4:77:ac:
f2:b3:50:6a:e7:43:23:8e:52:92:41:8b:a6:7b:4a:52:ad:c4:
55:a6:9f:95:fe:0a:ea:66:9c:4f:7f:66:14:55:85:d6:f5:e4:
44:ca:f1:50:07:e8:8f:cc:cc:16:fa:e2:bc:26:69:d2:cb:da:
ad:85:1f:b7:35:16:5e:34:2c:5d:44:9c:da:c4:83:e2:5f:ff:
9e:db:8e:d8:48:3d:b7:06:d9:4e:47:aa:ce:25:78:72:5d:de:
e7:45:82:f3:f6:de:36:81:03:7c:7a:87:ab:2b:b3:16:81:db:
1e:b4:c6:1b:aa:ba:d3:c4:a1:57:82:00:e0:be:4a:f5:17:a8:
d7:f7:ef:b5:6e:d8:36:cb:85:f2:cc:95:66:aa:6b:d2:42:a1:
30:17:39:e1:f5:27:da:19:db:45:c4:22:60:c6:80:48:80:53:
82:e2:7e:c0:b4:4d:6b:09:71:04:31:f2:c0:e8:80:54:dc:a7:
79:90:86:d3:b1:b0:a4:47:cd:53:c0:45:0f:0f:cb:97:d6:88:
3c:2f:8b:7f:a7:80:b2:ea:71:b2:24:b4:75:2c:ab:3c:e4:ac:
d1:73:dd:c4:85:98:91:40:e2:da:d7:f3:97:d6:74:a2:89:87:
27:0f:11:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:43 2024 by rpki-client on console-ams.rpki-client.org