Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/C6kkvlPCZR5NwKhl_wrXYFVBErM.roa
File: C6kkvlPCZR5NwKhl_wrXYFVBErM.roa (raw, json)
Hash identifier: wpFOFlgjwU3kn+tqQhEogrd2kS2eCRQ+3oWT8Pt2ElU=
Subject key identifier: 0B:A9:24:BE:53:C2:65:1E:4D:C0:A8:65:FF:0A:D7:60:55:41:12:B3
Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial: 0185728C82997524BDFAF5CCAF1C8973D607
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/C6kkvlPCZR5NwKhl_wrXYFVBErM.roa
Signing time: Mon 02 Jan 2023 12:54:49 +0000
ROA not before: Mon 02 Jan 2023 12:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48920
IP address blocks: 193.23.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:82:99:75:24:bd:fa:f5:cc:af:1c:89:73:d6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Validity
Not Before: Jan 2 12:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ba924be53c2651e4dc0a865ff0ad760554112b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:15:4b:ae:9f:ce:c5:a0:66:78:cc:a7:80:7e:
ae:43:b8:e6:b2:e8:e8:2f:29:57:4f:2a:d6:ec:76:
de:9f:ce:47:23:39:c5:08:ea:9c:06:e6:cc:59:b1:
da:9b:74:e1:47:79:a5:fd:fd:f9:a2:02:0e:d4:8d:
ce:36:e9:b6:69:b3:f6:de:d0:6c:5d:8d:d4:59:e4:
96:78:4c:02:dd:5e:3b:a2:c0:82:1b:37:0f:da:0b:
16:5e:2c:06:e0:fd:44:6c:0f:f7:6b:66:6f:9e:15:
bd:64:fc:7e:1a:fd:50:9d:25:97:0a:29:6f:0f:38:
42:1a:4b:75:53:11:82:55:c7:8d:6a:03:76:8a:af:
1e:ae:29:4d:71:6e:25:9c:23:77:9c:bf:3a:57:8e:
bd:f8:d1:b2:04:4f:85:7a:82:16:ce:71:7a:cd:5e:
fa:74:c7:0c:0d:f2:a5:33:66:5e:a5:5c:39:03:b3:
cc:70:10:19:cb:9d:57:15:64:9c:e7:92:47:11:0e:
d6:2b:c2:9d:7c:83:d8:1d:81:b3:19:f2:b2:cd:df:
28:76:2e:d2:ca:9a:81:19:07:21:a9:99:d2:09:bd:
16:3e:bb:2c:da:72:80:29:0d:15:bc:98:f9:6d:67:
f5:3f:aa:3d:c6:00:16:62:64:66:cb:21:12:3e:7e:
5e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A9:24:BE:53:C2:65:1E:4D:C0:A8:65:FF:0A:D7:60:55:41:12:B3
X509v3 Authority Key Identifier:
keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/C6kkvlPCZR5NwKhl_wrXYFVBErM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.31.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:51:f0:37:98:8e:fc:5c:ae:5e:d7:c8:c2:44:82:eb:90:6e:
54:09:38:f3:37:32:98:15:2a:a9:91:8d:4e:d9:46:00:bb:28:
be:ae:7c:eb:37:b5:8e:e8:e0:c2:93:04:0b:38:51:ef:1f:64:
9b:4c:66:62:a3:3c:36:ef:1d:1f:df:db:d4:76:28:49:0c:19:
ac:15:c6:c4:ea:38:29:d5:3a:94:04:72:20:33:18:be:8c:c1:
86:2d:03:b3:ab:92:5c:86:ae:43:2d:5d:36:7b:34:e2:e6:f9:
51:f5:a9:26:0b:d9:94:b2:94:c3:bd:ac:7e:8c:4b:4c:98:78:
e7:77:46:15:be:25:75:23:15:e6:da:26:27:c3:67:d0:dd:56:
76:22:68:54:f2:98:18:29:a9:84:8f:89:4c:bb:ee:7c:85:4e:
5b:d5:41:11:93:d0:e4:51:d9:4c:95:9f:f4:92:32:11:13:e6:
e4:c5:6d:32:35:d9:9e:fe:40:ba:03:4c:d7:3a:27:eb:39:66:
00:56:2c:a4:c1:5d:db:c5:d5:cc:b0:8a:88:7b:a9:0c:6e:df:
49:61:09:9b:1d:9e:9b:9c:80:86:8d:14:4c:86:bf:5f:07:64:
85:9b:41:4a:43:5a:50:70:e6:38:f8:30:ed:94:79:63:ed:40:
8e:20:fd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:20 2024 by rpki-client on console-fra.rpki-client.org