Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/Ck_vpcrR_vtg3r3sRnCxzJdIpjE.roa
File: Ck_vpcrR_vtg3r3sRnCxzJdIpjE.roa (raw, json)
Hash identifier: 5J5JJybuKZ0TXNKobJTnb7vlltAox8i4d5Fdy1j9CCU=
Subject key identifier: 0A:4F:EF:A5:CA:D1:FE:FB:60:DE:BD:EC:46:70:B1:CC:97:48:A6:31
Certificate issuer: /CN=ef7fd5d33061a9de920af1c2a13513d46dd24612
Certificate serial: 018CC493453D5FBD024C804E19DED983D7A6
Authority key identifier: EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/Ck_vpcrR_vtg3r3sRnCxzJdIpjE.roa
Signing time: Mon 01 Jan 2024 10:30:35 +0000
ROA not before: Mon 01 Jan 2024 10:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4755
IP address blocks: 193.32.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 12:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:45:3d:5f:bd:02:4c:80:4e:19:de:d9:83:d7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7fd5d33061a9de920af1c2a13513d46dd24612
Validity
Not Before: Jan 1 10:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a4fefa5cad1fefb60debdec4670b1cc9748a631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ec:06:03:28:28:73:be:ab:66:c1:ba:8a:83:
fb:93:40:85:15:d4:5d:95:23:ed:cc:dd:76:ef:52:
5f:16:04:1c:10:d8:67:8a:f1:da:c2:4f:86:2c:87:
1d:26:41:d9:f4:b7:b3:e1:3a:77:35:e2:f8:f7:b2:
66:33:5c:92:38:1e:61:58:33:b7:01:f9:48:07:89:
6b:d4:30:1b:88:c4:5c:47:e2:02:3d:b7:e5:46:dd:
67:df:bc:7b:b1:c5:fe:f5:04:cb:fa:a1:59:3a:10:
0d:cc:59:b1:28:06:ba:0a:30:5b:86:2e:fd:a3:8f:
7b:15:6a:9c:68:46:9f:29:8d:64:da:64:58:65:2f:
81:a3:22:d0:de:0b:cb:22:0b:ce:5e:1d:c2:0f:c4:
14:e0:4e:e8:df:05:7d:4e:71:e2:65:c6:5c:bb:3a:
95:f5:f4:e4:b8:69:6b:e1:46:c1:4e:d1:c8:86:b4:
3e:d7:21:49:96:d8:af:57:96:80:93:a7:31:82:5b:
48:d1:29:0b:27:38:16:79:96:00:9c:03:03:62:de:
7d:ac:19:df:a4:58:83:f5:d3:f2:bb:47:db:4b:4d:
d4:37:b5:93:07:ea:4e:28:46:a8:97:3d:9e:2b:2e:
80:0f:de:21:65:6d:3e:00:8e:85:ef:99:25:49:f0:
5b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4F:EF:A5:CA:D1:FE:FB:60:DE:BD:EC:46:70:B1:CC:97:48:A6:31
X509v3 Authority Key Identifier:
keyid:EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/Ck_vpcrR_vtg3r3sRnCxzJdIpjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.247.0/24
Signature Algorithm: sha256WithRSAEncryption
92:fb:1f:39:9c:16:8b:eb:4b:41:34:fa:3f:ab:66:9f:31:f5:
ff:12:b6:28:d1:36:ad:2d:bb:26:6d:2b:a4:47:f0:4c:8b:a8:
06:8d:0e:96:0b:a8:e7:70:d3:62:b6:7a:6e:ae:a2:71:26:d0:
cd:24:32:50:0f:96:34:1b:55:33:82:2c:31:75:ce:1a:21:cb:
98:04:13:5d:35:1a:74:02:71:2c:92:9d:f3:4c:b3:0a:a5:98:
08:c0:c4:bd:bb:25:3f:7c:82:91:14:5b:02:f5:d0:59:18:16:
18:47:aa:22:1c:1a:2e:5f:aa:42:f2:b8:1b:03:9f:8c:f4:08:
0f:37:c1:89:71:0e:ba:7f:bc:b3:af:61:28:da:22:61:94:17:
79:55:e6:00:22:b9:cf:b0:f5:eb:06:69:be:5b:d5:00:3e:68:
ac:77:03:61:32:1b:e7:e5:f7:78:5d:95:bd:cf:64:d3:19:22:
4c:a1:a0:ea:55:f5:49:93:6d:b8:aa:60:d8:df:4f:64:7b:0c:
68:7d:25:58:2c:b2:ca:52:e3:89:f4:90:9b:5e:13:b4:cc:bb:
26:b6:87:7b:a1:44:01:4a:61:d1:a1:3b:fa:6b:52:c7:6f:3e:
62:a5:4c:73:bb:0d:8b:fa:84:99:96:b2:c1:a7:0b:27:45:0f:
e1:61:3b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:25 2024 by rpki-client on console-fra.rpki-client.org