Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/_aYE-zKam7BJ8Wsr8LuKnuBb_Xo.roa
File: _aYE-zKam7BJ8Wsr8LuKnuBb_Xo.roa (raw, json)
Hash identifier: SJL7Jbsh+HbmN3AQWAD7n7Y3ivtYY7D05bU7tnEasgw=
Subject key identifier: FD:A6:04:FB:32:9A:9B:B0:49:F1:6B:2B:F0:BB:8A:9E:E0:5B:FD:7A
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 018A1D2E547712F3531636F95FB9434E663F
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/_aYE-zKam7BJ8Wsr8LuKnuBb_Xo.roa
Signing time: Tue 22 Aug 2023 12:18:10 +0000
ROA not before: Tue 22 Aug 2023 12:18:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211439
IP address blocks: 193.242.117.0/24 maxlen: 24
193.108.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1d:2e:54:77:12:f3:53:16:36:f9:5f:b9:43:4e:66:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Aug 22 12:18:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fda604fb329a9bb049f16b2bf0bb8a9ee05bfd7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8f:f0:4a:37:dc:ef:d8:33:78:ba:70:fc:44:
ad:51:9f:30:a0:7d:44:0c:f9:ee:5c:8b:ac:d5:cb:
da:a6:f3:c0:ee:fd:ed:d9:5a:7e:eb:4f:69:dc:52:
7d:c0:8f:07:e9:78:fc:79:c5:78:3a:70:61:9d:7c:
82:08:6e:f0:fe:df:82:ea:bc:9c:ad:47:05:60:d4:
5c:b3:17:06:c4:3f:20:c6:6b:4d:aa:7b:84:ee:e2:
9d:42:35:2d:52:72:89:7a:93:95:d5:4b:1e:99:7f:
13:f1:75:bc:61:d2:90:7f:64:24:c7:81:cc:b6:90:
f2:c4:06:dc:aa:9c:6f:60:e9:f8:e0:5b:00:eb:8c:
76:71:5d:ee:ba:e7:40:83:6c:0a:8c:fc:9c:dc:01:
11:56:7a:4a:a5:fd:c3:c5:d3:39:a0:d5:19:d6:2a:
8d:63:5c:e3:17:26:69:fc:04:68:ee:c7:1e:50:37:
54:48:39:d2:af:59:31:ca:a2:9c:66:0f:5d:a3:42:
2d:d7:9f:8e:14:f6:18:7b:ec:1b:52:09:32:9a:3c:
ca:d1:fe:7d:fd:09:17:5d:1d:7f:6a:c6:e0:2b:94:
5f:4a:d0:28:0e:02:37:73:9c:38:54:b5:01:01:38:
3d:c0:93:75:66:3d:af:7e:12:2e:95:32:db:b7:df:
16:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A6:04:FB:32:9A:9B:B0:49:F1:6B:2B:F0:BB:8A:9E:E0:5B:FD:7A
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/_aYE-zKam7BJ8Wsr8LuKnuBb_Xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.102.0/24
193.242.117.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:03:8c:7b:33:85:df:47:96:61:a5:7b:96:7c:9c:8b:f8:66:
8c:12:0a:d8:2d:a9:00:00:27:7a:1a:fd:8c:a0:cf:bb:d5:3d:
6b:7e:12:6f:d8:86:4a:50:48:96:3e:7d:5a:a1:af:c7:f8:2a:
60:5d:9f:c9:aa:75:c3:22:5f:69:a1:f7:e9:04:cf:c6:44:b7:
67:b0:98:df:03:fb:16:03:a3:11:60:20:15:4d:99:af:2c:20:
0e:13:f0:7b:40:5b:5a:4e:73:7c:e1:24:ef:1b:c4:c7:4d:92:
44:2c:c4:67:42:de:e1:20:f7:07:94:b9:90:e7:00:43:eb:b7:
33:5b:27:a4:09:cd:6c:03:24:14:c4:67:d8:6e:15:fb:79:a9:
7c:f6:e8:d8:32:73:c6:34:bd:07:99:13:fb:88:07:2b:49:8b:
30:00:89:7d:16:2c:f4:93:d1:b5:a7:80:d4:27:94:46:61:f4:
d4:2c:fd:7d:04:9a:f4:eb:df:e0:1a:f8:30:d8:af:62:80:fb:
82:f1:df:10:c6:51:82:65:34:49:5f:40:f5:0c:4b:73:fd:49:
d9:47:9c:32:ec:09:fe:19:2a:ac:12:de:1c:4c:aa:c9:3a:01:
c7:5a:e3:ca:53:79:a3:aa:bd:fc:af:d3:97:f4:96:9e:cb:05:
d8:42:93:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:36 2024 by rpki-client on console-ams.rpki-client.org