Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/5CyidAyek62vHQkBx-_g_RamCr8.roa
File: 5CyidAyek62vHQkBx-_g_RamCr8.roa (raw, json)
Hash identifier: r06c3gxWmZ1Pg0AGHbsEuUa9rOHszKsqWRredZYnAl4=
Subject key identifier: E4:2C:A2:74:0C:9E:93:AD:AF:1D:09:01:C7:EF:E0:FD:16:A6:0A:BF
Certificate issuer: /CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
Certificate serial: 01857321D3F3CCDE84AC46F515D177FD25E4
Authority key identifier: 9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/5CyidAyek62vHQkBx-_g_RamCr8.roa
Signing time: Mon 02 Jan 2023 15:37:54 +0000
ROA not before: Mon 02 Jan 2023 15:37:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8220
IP address blocks: 194.115.212.0/22 maxlen: 22
193.98.156.0/24 maxlen: 24
193.102.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:21:d3:f3:cc:de:84:ac:46:f5:15:d1:77:fd:25:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
Validity
Not Before: Jan 2 15:37:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e42ca2740c9e93adaf1d0901c7efe0fd16a60abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e3:4b:44:10:4f:7d:63:d5:d4:15:db:bf:5c:
31:69:ce:39:d5:f5:39:92:2d:7b:d4:c1:82:25:2b:
0c:31:a5:e3:ad:7e:c6:34:ea:37:37:0f:f5:6f:48:
f0:41:b5:3b:e9:83:a5:b9:31:3d:c1:ce:c3:3b:ec:
dc:b6:e2:b1:5c:18:89:8c:c2:b7:9b:dc:7c:dc:67:
78:ee:6f:71:59:3e:7e:88:73:a0:19:9e:d6:ba:66:
c4:0c:e1:37:ff:29:f1:c2:0c:46:3b:e7:73:65:84:
82:d8:99:56:bd:ce:cb:b4:03:23:24:21:00:3c:e3:
29:41:49:06:dc:7d:20:a2:0f:49:4a:f5:6d:26:31:
fc:4a:17:26:9f:b9:ea:c6:fa:b8:9f:94:47:e4:c6:
a5:0c:92:76:ab:30:f0:9e:e1:17:da:11:24:85:8f:
43:6e:55:48:25:16:fd:a0:f9:b0:ed:a1:77:c9:ac:
b6:42:65:16:5d:a5:2b:fc:3d:d4:56:1c:b0:0c:32:
29:29:d2:94:85:67:42:30:7f:5a:8b:af:ee:98:34:
39:b5:bf:18:55:33:5c:0c:34:23:9b:2d:5f:7d:f0:
7e:51:43:ec:76:e0:17:50:c9:25:28:4f:72:20:ce:
bd:16:ac:50:79:13:14:2c:97:eb:d5:a4:2f:5e:b2:
20:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2C:A2:74:0C:9E:93:AD:AF:1D:09:01:C7:EF:E0:FD:16:A6:0A:BF
X509v3 Authority Key Identifier:
keyid:9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/5CyidAyek62vHQkBx-_g_RamCr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.98.156.0/24
193.102.132.0/24
194.115.212.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:f7:2e:5c:cb:74:67:21:8b:0a:18:02:90:94:fe:8f:84:43:
50:37:c2:86:28:59:4b:3d:7a:84:e9:e8:4c:7c:7e:3e:8d:6d:
17:fa:a3:7d:45:b2:b9:4c:04:5b:3f:d2:fa:55:d3:fa:28:30:
67:09:85:3c:dd:0a:e2:a3:3c:39:cd:63:ed:45:b2:ab:57:06:
5b:1e:d3:f2:17:98:3e:7a:e5:c6:e7:17:c9:6c:e3:d6:a9:15:
88:90:bf:f1:be:f9:d2:05:b9:d6:c3:c7:3e:6e:4b:85:1d:55:
a5:66:b5:72:51:c2:84:84:e1:c2:83:73:b4:69:71:9e:5e:b3:
f2:57:cc:ef:b3:58:aa:04:35:38:41:b2:98:f3:ef:c3:a2:cd:
3e:ff:e2:b8:54:0c:a8:fb:67:1c:55:1a:96:78:3d:ca:78:ca:
c2:34:62:d9:bb:cd:68:a1:ed:45:a6:d0:0a:4c:43:f0:1b:09:
2a:96:94:2f:57:83:84:bd:83:74:c9:75:21:4e:26:ef:bc:ee:
45:91:5c:80:aa:c1:60:18:24:d2:4e:80:16:ef:af:85:69:c2:
0f:fe:27:e9:69:1c:54:47:5f:c5:36:e8:95:5f:a6:dc:b2:90:
3a:7e:b0:ad:46:4a:b2:e2:04:1a:5a:a1:ed:6e:1d:39:cd:ac:
6d:b2:2e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:56 2024 by rpki-client on console-ams.rpki-client.org