Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/hCTzzDBnXLvO_xq9qAmtE8_WXLU.roa
File: hCTzzDBnXLvO_xq9qAmtE8_WXLU.roa (raw, json)
Hash identifier: QWsxzu1zyV/8/DUeqWOvoLWmW6wmZkCGuI53bOoK4s8=
Subject key identifier: 84:24:F3:CC:30:67:5C:BB:CE:FF:1A:BD:A8:09:AD:13:CF:D6:5C:B5
Certificate issuer: /CN=e41bf78b70ac276cbf65bb909f9934082f4d2d79
Certificate serial: 01856E8B31E0C4B7184E4DA026C60BE7EF8B
Authority key identifier: E4:1B:F7:8B:70:AC:27:6C:BF:65:BB:90:9F:99:34:08:2F:4D:2D:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/hCTzzDBnXLvO_xq9qAmtE8_WXLU.roa
Signing time: Sun 01 Jan 2023 18:14:54 +0000
ROA not before: Sun 01 Jan 2023 18:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205237
IP address blocks: 193.104.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:31:e0:c4:b7:18:4e:4d:a0:26:c6:0b:e7:ef:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41bf78b70ac276cbf65bb909f9934082f4d2d79
Validity
Not Before: Jan 1 18:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8424f3cc30675cbbceff1abda809ad13cfd65cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:04:cb:bc:9f:b6:35:13:2a:d7:9f:be:a2:d1:
2f:bf:95:6a:73:20:d4:18:e9:c4:e1:4c:0d:69:ae:
6d:73:e7:85:93:0c:e5:ff:31:2f:97:aa:ac:50:62:
60:14:82:16:be:14:37:05:f7:88:41:c1:13:d2:a9:
96:3e:35:b7:fb:d1:ce:0c:6f:5a:fa:64:c2:e1:2a:
ce:d6:f9:c7:f4:f1:3b:2c:ba:2f:a9:7e:de:16:85:
55:7f:e9:68:52:1c:41:08:f4:01:ae:a1:63:d8:3f:
90:ff:80:d0:33:08:80:a4:4f:03:14:ec:26:b6:ef:
f7:a9:5f:55:80:77:f1:5e:79:03:fa:c2:82:14:4b:
77:b6:ce:13:09:3f:6b:2c:7a:8d:53:55:7d:e1:b4:
6d:bd:05:9b:ed:e0:6a:51:e6:c2:c1:3a:55:07:e0:
16:eb:72:e5:f1:e3:3b:be:da:98:91:08:a7:3b:13:
46:c5:f8:07:12:96:46:64:fd:57:43:bf:8e:b6:23:
f1:f9:f1:d1:cf:0e:4f:37:f1:1b:17:48:af:b2:16:
f4:78:d5:e6:35:b2:2d:b0:03:f4:68:06:04:6c:d0:
4c:c7:09:d8:3c:5b:6c:0f:c7:ce:64:78:1b:b2:9e:
be:7b:b7:9d:c5:c5:8f:5c:26:1e:be:c7:e5:44:ff:
d3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:24:F3:CC:30:67:5C:BB:CE:FF:1A:BD:A8:09:AD:13:CF:D6:5C:B5
X509v3 Authority Key Identifier:
keyid:E4:1B:F7:8B:70:AC:27:6C:BF:65:BB:90:9F:99:34:08:2F:4D:2D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/hCTzzDBnXLvO_xq9qAmtE8_WXLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.25.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:c0:d4:ce:c3:44:00:d9:d6:fc:a5:2a:bf:eb:62:9f:c6:f9:
8e:9f:9b:c6:93:b3:a2:7c:36:af:16:7c:e4:c5:d3:fc:79:c2:
42:0a:63:86:aa:7c:5f:5c:b2:83:ff:96:7a:5f:09:92:35:79:
1e:98:a8:08:a5:d6:b9:e1:1b:64:32:18:e0:3b:d5:c6:fb:50:
07:f7:cf:b0:a1:7d:15:24:6f:0b:9a:c8:47:32:64:f3:41:47:
5d:79:54:ed:57:dc:3b:2e:79:f1:77:80:af:47:d7:c5:16:70:
d2:8e:08:66:61:ef:80:b6:53:b4:92:a4:0b:ba:bd:2e:31:31:
da:c7:5f:2c:f3:ab:bb:ac:0f:ed:18:f0:14:48:3a:82:67:34:
c6:41:1d:88:e0:73:01:fc:28:53:81:36:57:d0:ad:96:4b:b1:
a3:26:95:d9:52:9e:6a:7a:e9:c4:63:4e:90:c3:49:29:28:17:
e8:08:4f:61:a1:8c:58:05:2e:3a:90:61:a3:d5:d7:4d:a8:b9:
54:80:e6:77:a1:53:8e:31:97:74:7f:f2:c4:3d:c6:e0:e9:0d:
7a:3a:43:7e:6a:19:13:8b:fc:ba:f8:34:7b:dc:77:2e:22:be:
c1:29:22:30:8f:9a:30:43:cf:c8:d1:38:e3:c6:34:af:58:74:
98:c7:39:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:09 2024 by rpki-client on console-fra.rpki-client.org