Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/vc6wTGdStHq1oRwe9PqYZyFJbdU.roa
File: vc6wTGdStHq1oRwe9PqYZyFJbdU.roa (raw, json)
Hash identifier: J4PvLkRO0Cva56hpKjvDqA0SC52SHeC73/kK/KtHXtY=
Subject key identifier: BD:CE:B0:4C:67:52:B4:7A:B5:A1:1C:1E:F4:FA:98:67:21:49:6D:D5
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 0190C1E564A9A781F51C32E368576B5C6E2E
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/vc6wTGdStHq1oRwe9PqYZyFJbdU.roa
Signing time: Wed 17 Jul 2024 18:12:34 +0000
ROA not before: Wed 17 Jul 2024 18:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31715
IP address blocks: 193.239.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 23:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c1:e5:64:a9:a7:81:f5:1c:32:e3:68:57:6b:5c:6e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jul 17 18:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdceb04c6752b47ab5a11c1ef4fa986721496dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:29:aa:b6:60:bc:95:ef:35:14:1e:82:23:
90:31:69:11:3e:ce:41:9b:2a:96:6b:88:13:15:a0:
d1:96:ca:8e:f9:84:13:26:85:cc:e7:e4:ea:21:14:
d7:23:f5:04:2b:53:cd:f7:bb:ed:6c:bb:71:61:bd:
54:8c:ae:c6:a1:df:60:3a:a9:e9:43:24:37:3d:ed:
61:65:2b:28:44:23:c2:2e:7e:eb:61:c4:56:16:9c:
a5:63:44:9b:47:b6:9e:93:bb:03:59:96:46:62:d9:
01:4c:eb:6d:ef:1e:37:79:37:70:66:38:d8:8a:1f:
10:9e:22:cc:0e:0c:c2:bf:13:78:ee:51:da:37:40:
34:0b:6e:66:03:e8:2d:73:c2:70:9e:66:f0:47:c7:
17:17:af:f9:2e:c0:7f:14:99:ad:b7:31:7e:37:4a:
35:c3:37:f6:3f:1c:50:47:4e:2f:c1:6b:a9:64:40:
f4:44:be:1c:16:25:52:00:dd:eb:db:af:76:8b:5c:
8d:cd:1c:ff:43:e8:dc:9c:8a:09:8e:13:39:fb:e4:
e3:6e:47:b7:2a:11:1a:8f:d3:da:3e:d2:34:38:90:
2d:e1:a5:5c:2c:ab:29:18:df:62:72:79:94:5a:78:
25:94:19:c6:d6:2c:98:c8:7d:e9:50:63:c0:01:0e:
28:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CE:B0:4C:67:52:B4:7A:B5:A1:1C:1E:F4:FA:98:67:21:49:6D:D5
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/vc6wTGdStHq1oRwe9PqYZyFJbdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.197.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:a8:f1:c4:f1:37:93:72:28:8f:cd:18:4f:ff:0f:18:ba:d6:
c4:74:37:83:94:89:4c:33:26:84:07:dc:fc:a9:df:56:ff:f3:
67:73:36:a9:5d:bd:7e:b4:88:fa:8c:21:91:30:14:44:2b:3d:
8d:1c:62:ef:a4:ea:04:53:e0:62:5d:c0:d6:c1:ad:e4:a3:77:
6b:06:cd:de:57:62:44:93:c9:9b:d3:3e:42:74:07:24:ad:b7:
f3:aa:d1:11:b7:28:fe:da:47:84:d5:0d:28:49:4f:e4:63:56:
bc:52:4d:b2:8f:95:88:af:8c:9b:32:10:b2:6c:c9:57:66:e0:
b5:ba:c9:43:67:bb:c6:45:f0:20:f6:db:69:c3:e6:2f:52:38:
fb:11:78:91:57:83:fd:ba:90:91:bc:47:0e:64:c4:87:b2:88:
8b:4c:7b:e7:2e:91:79:71:c8:1a:e6:ae:0c:13:42:d3:73:ba:
52:7e:02:aa:9c:80:87:4c:6c:bf:d1:34:29:da:cc:bc:28:c5:
77:59:b3:63:fe:63:73:d1:c1:2a:c2:bb:52:8b:b7:46:c9:04:
5b:2a:ea:47:06:87:dc:f3:5c:7f:94:25:3e:a0:f4:dd:87:bd:
d1:1b:b1:32:08:36:4c:30:08:51:e7:e1:e6:49:38:fc:74:b5:
05:ea:6a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 02:45:14 2024 by rpki-client on console-ams.rpki-client.org