Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/Ku7DODep434FpP0hHNhku22WqoU.roa
File: Ku7DODep434FpP0hHNhku22WqoU.roa (raw, json)
Hash identifier: rCFBwH9PTYPRAtzdgludCLKdvVM6NDQN5UqYhEk03SE=
Subject key identifier: 2A:EE:C3:38:37:A9:E3:7E:05:A4:FD:21:1C:D8:64:BB:6D:96:AA:85
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 018C4967ADFC00C0E8290774501587C1F679
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/Ku7DODep434FpP0hHNhku22WqoU.roa
Signing time: Fri 08 Dec 2023 12:29:40 +0000
ROA not before: Fri 08 Dec 2023 12:29:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209474
IP address blocks: 193.111.78.0/24 maxlen: 24
193.17.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:49:67:ad:fc:00:c0:e8:29:07:74:50:15:87:c1:f6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Dec 8 12:29:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2aeec33837a9e37e05a4fd211cd864bb6d96aa85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:91:cf:66:16:f1:56:b9:2d:ff:46:17:39:c8:
4c:d0:15:81:e8:1c:56:d9:34:64:f5:c5:85:21:47:
54:b7:ff:fa:ba:fa:7a:17:4d:2b:cf:42:b4:75:cf:
c9:be:7c:63:cf:33:66:14:47:03:29:51:2c:50:93:
21:64:47:85:a7:c5:e3:98:0a:ad:09:0e:06:e8:e6:
11:a6:72:f6:22:90:70:74:79:6f:b7:c7:e1:74:16:
fe:9f:bf:bf:b7:b0:79:61:d1:5b:61:5e:01:18:1f:
82:9e:d2:d0:2c:9f:87:b5:ee:00:cb:10:d2:b1:ab:
e5:c8:d5:26:d2:4e:49:e6:5b:c0:7a:32:db:9f:53:
ff:2e:7c:5e:8e:95:8f:a7:1f:ae:e2:35:d4:b3:b3:
63:ea:c1:29:3d:eb:e6:bf:70:3d:78:95:1f:2c:aa:
18:92:82:ed:3d:6b:a7:8c:51:bd:69:ef:8e:84:dc:
19:5d:e0:cb:35:56:e9:e8:32:78:36:aa:c8:65:96:
18:83:23:65:a8:a7:70:6a:db:8c:e7:29:ca:e0:2d:
60:3d:d3:49:79:55:34:30:b4:15:54:d3:8f:d4:ca:
00:2f:a3:6e:87:e4:06:b7:41:76:9e:8c:60:51:ce:
14:cb:48:36:69:db:c4:3f:03:38:4a:7b:4e:55:42:
e9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EE:C3:38:37:A9:E3:7E:05:A4:FD:21:1C:D8:64:BB:6D:96:AA:85
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/Ku7DODep434FpP0hHNhku22WqoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.6.0/24
193.111.78.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:32:17:21:36:d9:94:38:90:e2:5f:00:73:b6:70:f2:f8:99:
aa:4f:37:2c:2f:8e:d8:db:94:c9:00:8e:2e:9f:a3:32:17:77:
cb:5d:a6:67:e4:73:56:8e:84:9c:18:7e:62:a2:e9:91:3c:f6:
70:79:9a:79:46:c3:10:72:43:30:17:df:cf:8e:d7:51:fa:8e:
e7:99:7c:3d:e3:47:03:86:05:20:0b:6c:e0:93:27:a9:fe:d0:
5d:a1:b3:79:4a:f3:fd:de:c0:67:c6:c0:2a:2a:5a:a0:d2:7f:
1b:c2:7e:eb:bf:91:9a:05:2d:72:1c:0c:fe:3d:9f:ed:67:37:
05:4d:47:cb:28:8f:25:d4:e2:d4:4b:57:69:10:8a:ff:73:48:
2a:75:ad:f7:84:53:fb:66:65:84:96:5f:a5:36:6b:11:ca:15:
6c:54:07:b0:f7:87:9a:af:22:a6:8b:c3:69:d5:e5:fc:99:2d:
4b:88:cc:84:86:76:48:6b:78:7d:4b:79:c5:74:2f:0c:7c:bf:
90:c0:2c:36:87:0c:ec:ff:b2:43:ac:0c:69:23:f2:b2:58:35:
c6:5d:c8:00:2c:29:08:1e:9e:cb:d4:e4:d4:31:92:aa:24:67:
a1:4c:c6:0d:74:48:88:68:d8:1c:96:71:bd:94:9f:6b:af:e8:
db:47:4b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:50 2024 by rpki-client on console-fra.rpki-client.org