Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/SAUoNaGXGX43r26151qcn5FWzxc.roa
File: SAUoNaGXGX43r26151qcn5FWzxc.roa (raw, json)
Hash identifier: SLBEs6qnSelFUKsulu4FU5Y9DXh3XRlH4ThOJRkf99s=
Subject key identifier: 48:05:28:35:A1:97:19:7E:37:AF:6E:B5:E7:5A:9C:9F:91:56:CF:17
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 018B3751266248B7F8F0867C23FEC65742B1
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/SAUoNaGXGX43r26151qcn5FWzxc.roa
Signing time: Mon 16 Oct 2023 07:09:06 +0000
ROA not before: Mon 16 Oct 2023 07:09:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209604
IP address blocks: 193.35.154.0/24 maxlen: 24
193.223.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:37:51:26:62:48:b7:f8:f0:86:7c:23:fe:c6:57:42:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Oct 16 07:09:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48052835a197197e37af6eb5e75a9c9f9156cf17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a0:c5:4e:46:a2:ad:33:e2:66:dd:d2:23:6a:
6d:f5:11:aa:a2:a0:93:f5:3b:d4:cd:85:4f:27:5b:
d7:9a:26:e1:3f:27:fa:dd:00:13:78:54:09:83:fb:
8c:9c:cc:12:a5:64:76:37:17:13:0a:d4:08:ea:c2:
94:ef:f9:69:60:86:28:6b:87:6d:e1:16:b1:08:41:
ce:27:a5:a6:f5:1e:54:0a:3a:a8:b3:b8:b5:ba:32:
d6:56:17:06:d9:ba:38:b2:21:83:39:65:27:f3:36:
5e:51:fb:61:4e:e3:a1:18:fe:b2:48:b6:2b:32:76:
8e:d9:d8:46:ba:79:c1:7d:66:c3:11:6f:e3:c9:89:
7a:af:b2:e5:f3:11:2a:05:b1:80:9e:7a:71:58:27:
7b:29:3e:36:8b:83:87:f1:04:f7:92:24:9c:5e:d6:
f0:35:50:ca:1f:3a:ed:06:62:ac:94:a0:08:2f:ff:
a2:c4:b2:be:df:65:19:d2:de:12:79:f9:96:c0:25:
45:d4:4b:4b:8b:a2:ae:6d:c1:15:c2:5e:96:2b:71:
7e:96:a5:07:76:c1:2c:05:ce:c0:91:1e:d6:26:2b:
a4:96:74:de:46:50:f3:55:88:bf:6a:43:92:af:7e:
71:ef:6b:bb:cb:a3:63:13:4b:f1:05:c6:68:4a:0e:
75:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:05:28:35:A1:97:19:7E:37:AF:6E:B5:E7:5A:9C:9F:91:56:CF:17
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/SAUoNaGXGX43r26151qcn5FWzxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.154.0/24
193.223.107.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:d1:cf:8d:1b:a8:28:5f:c6:21:24:2c:c7:ff:73:4c:82:1c:
bd:38:64:bb:bc:d3:75:f2:ef:71:5d:c1:9b:73:3d:04:fb:ed:
08:13:69:4b:5d:d3:89:f0:b0:42:c0:5b:18:d7:54:e0:97:1e:
10:7b:b2:f3:e4:dc:6a:d1:ec:2f:57:f5:0b:d9:a7:f0:4d:e2:
b0:82:b8:a5:2c:bd:92:24:20:f2:bc:45:b7:5e:9c:39:10:98:
b1:a1:d8:c8:1d:be:84:c9:e2:f3:4c:a4:a1:39:c4:97:33:f9:
23:0c:d0:84:ce:b1:5e:a4:91:00:e4:83:a1:52:85:c3:42:a8:
a8:74:73:a1:55:25:97:bf:bc:e2:2e:f7:c8:c5:71:7d:23:5a:
57:e8:f2:bc:1a:7c:2c:31:42:47:30:2b:9a:07:b6:96:b4:77:
06:88:3d:05:ba:ec:19:76:61:12:63:37:72:5d:ea:ad:2d:f9:
d1:2d:dc:14:b3:dc:d5:4c:47:3b:12:e7:44:b5:bb:87:3f:99:
9c:e0:60:b6:05:eb:f1:35:07:64:1a:dd:c1:57:ee:bf:4b:de:
b3:27:2a:84:d2:c5:37:d4:1b:34:21:fb:f0:d0:01:e1:29:2a:
fa:a7:d8:d5:b5:d1:5a:a2:ef:a6:96:85:07:9f:4a:7c:15:82:
22:93:f5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:24 2024 by rpki-client on console-ams.rpki-client.org