Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/bFATnaaTRX3GYjOeyeD77DqCbQY.roa
File: bFATnaaTRX3GYjOeyeD77DqCbQY.roa (raw, json)
Hash identifier: 6oFeUcOf6hdwzHNX8Z0HASHX0BhhY3xz4KoyEGjiUU4=
Subject key identifier: 6C:50:13:9D:A6:93:45:7D:C6:62:33:9E:C9:E0:FB:EC:3A:82:6D:06
Certificate issuer: /CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Certificate serial: 01856F14BE5D67668D5AEE037D285B9863E6
Authority key identifier: 93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/bFATnaaTRX3GYjOeyeD77DqCbQY.roa
Signing time: Sun 01 Jan 2023 20:45:08 +0000
ROA not before: Sun 01 Jan 2023 20:45:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50557
IP address blocks: 193.105.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:be:5d:67:66:8d:5a:ee:03:7d:28:5b:98:63:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Validity
Not Before: Jan 1 20:45:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c50139da693457dc662339ec9e0fbec3a826d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b0:02:ab:74:59:1d:7a:c4:cf:89:68:0d:f6:
f6:70:3d:6f:5f:9b:34:76:23:0b:2d:d0:6c:08:cf:
a1:9e:02:26:ed:5f:ea:9d:23:d4:d9:61:80:41:c0:
e0:33:da:30:ce:95:87:a8:e4:45:c3:91:3b:da:0a:
ce:2d:dd:1b:2d:94:c5:44:5f:d4:66:30:70:02:6e:
76:26:2d:a1:23:33:c8:5a:0a:57:28:d6:63:03:77:
18:bc:5f:fc:b5:96:b6:61:22:1a:80:28:45:03:aa:
1b:c3:cc:1c:50:4b:8f:3b:a2:f6:e2:15:cd:57:a4:
fb:b2:bc:89:a5:7e:6b:a4:47:93:47:68:9c:32:77:
f4:9d:f3:04:83:08:89:79:96:ba:34:e1:87:9f:9b:
61:15:6b:03:8c:ee:49:2c:c9:a2:c5:47:94:4c:35:
a4:ed:62:aa:af:b6:3a:af:b9:a0:8e:ca:a3:69:bf:
d1:3c:d5:32:fd:28:d0:f5:ce:ac:e3:8e:dd:b7:98:
28:c7:08:be:ee:c9:c1:19:43:dd:82:98:71:47:e3:
8b:fc:29:d6:a7:62:1f:3e:58:5a:ba:f5:b0:ae:b5:
50:d2:e6:22:08:99:b7:12:db:0a:c5:eb:4d:ad:1f:
35:07:d6:21:3b:2c:8e:03:5d:fa:63:2c:5f:05:8a:
6d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:50:13:9D:A6:93:45:7D:C6:62:33:9E:C9:E0:FB:EC:3A:82:6D:06
X509v3 Authority Key Identifier:
keyid:93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/bFATnaaTRX3GYjOeyeD77DqCbQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.110.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:6a:19:26:c8:1c:c8:b8:b9:f3:d5:a6:0d:ac:2f:54:e7:2b:
af:63:28:c9:95:9f:be:84:c4:0d:fb:8a:10:02:1d:34:f5:d5:
de:df:8e:b3:a9:35:d9:18:6b:7a:7b:73:9e:52:0e:85:c8:df:
02:96:a5:c7:38:3b:90:fe:c6:11:4e:83:e1:d9:86:45:c0:84:
39:b4:fa:b9:9d:d2:5b:3b:d6:17:e9:da:52:4b:65:15:ad:ce:
2f:5f:c3:f8:fd:e8:97:57:f0:0c:dc:5a:79:d8:f5:59:27:91:
ef:15:ea:6e:db:d9:15:5c:27:19:ea:ef:94:9e:e4:84:ab:90:
f4:4c:43:ce:d2:07:5d:e9:af:27:ad:9b:17:0d:40:57:06:47:
ee:76:c5:25:e9:74:e2:e5:41:86:80:7c:15:2d:b3:e8:a3:f4:
da:73:55:63:2b:ae:02:c1:8a:3d:e0:d9:59:c1:0e:0a:50:d9:
2f:87:30:86:32:9b:fa:b0:b3:bd:ff:c7:2e:5b:b9:f6:f2:26:
1c:5e:03:f8:45:19:c0:32:34:92:da:25:22:91:82:04:da:21:
f9:06:e5:09:07:a7:eb:f5:d1:e7:2f:c3:5e:f5:30:bb:4c:20:
6a:cb:70:d8:d3:65:7b:a4:62:2b:9b:41:00:81:a7:a0:d6:ad:
fe:78:ae:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:18 2024 by rpki-client on console-fra.rpki-client.org