Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/fH5jrGcYExMPNrWlODbV9Jotlts.roa
File: fH5jrGcYExMPNrWlODbV9Jotlts.roa (raw, json)
Hash identifier: vAoWGjytp5dKaFQsUHs0+/k6GuXmZcBLQjT2NMJxUhU=
Subject key identifier: 7C:7E:63:AC:67:18:13:13:0F:36:B5:A5:38:36:D5:F4:9A:2D:96:DB
Certificate issuer: /CN=509c8f32a1f4281f71463895d543c7179cf7f959
Certificate serial: 01856E8B22839A8786B82DB4AD258F1E9986
Authority key identifier: 50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/fH5jrGcYExMPNrWlODbV9Jotlts.roa
Signing time: Sun 01 Jan 2023 18:14:50 +0000
ROA not before: Sun 01 Jan 2023 18:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209999
IP address blocks: 193.41.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:22:83:9a:87:86:b8:2d:b4:ad:25:8f:1e:99:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c8f32a1f4281f71463895d543c7179cf7f959
Validity
Not Before: Jan 1 18:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c7e63ac671813130f36b5a53836d5f49a2d96db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7d:e9:68:10:e5:1c:8d:bd:e9:12:d1:f3:4e:
7d:d4:2a:d5:d3:e1:af:fc:c4:c9:6c:0b:ba:07:a3:
82:82:17:53:8a:13:38:bf:b1:d9:a8:6c:14:b9:93:
b8:ca:7a:2b:fd:8e:a1:80:3b:8e:b9:51:74:21:8e:
c6:36:f0:8d:73:66:e4:6f:a4:31:6b:d4:c0:6e:4c:
a5:d3:62:ea:f2:82:be:a7:36:7b:de:e1:23:b1:4f:
eb:52:52:7d:bf:b2:a2:94:ce:21:6b:28:77:71:05:
23:fe:d9:25:76:b2:f5:a4:d9:7c:27:79:45:5c:bd:
ca:67:40:ce:ef:61:e5:c8:a5:cf:7a:6c:2f:79:5d:
db:e7:7b:43:ce:6e:11:db:35:92:ae:a3:32:ff:6a:
12:4f:a7:75:8a:3b:fb:3c:c1:b8:07:f9:e5:67:d4:
7f:03:47:6f:c1:7c:4e:7d:ae:3a:56:a9:87:3c:cd:
47:b3:58:4b:5b:cb:06:bf:b1:fa:ad:1e:fa:35:86:
db:26:30:3a:81:9a:43:39:ca:34:5a:df:23:d0:df:
50:e8:86:a6:c2:62:51:de:5e:47:04:67:1f:18:d4:
bb:80:77:3c:fe:2f:e6:30:fe:b2:47:2c:8d:93:e8:
ac:90:11:ca:0a:a0:35:10:a2:58:f3:47:6a:ab:05:
1c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7E:63:AC:67:18:13:13:0F:36:B5:A5:38:36:D5:F4:9A:2D:96:DB
X509v3 Authority Key Identifier:
keyid:50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/fH5jrGcYExMPNrWlODbV9Jotlts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.56.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:74:bb:68:00:98:71:eb:18:e0:54:c2:f9:18:eb:3e:17:a9:
50:44:26:b1:94:44:1b:ba:6b:2c:e0:54:50:bb:d8:5e:69:81:
e1:5a:2b:ad:ca:f7:17:c2:41:eb:8d:03:b2:3a:61:60:2b:90:
72:64:aa:b6:a0:a9:5f:56:2a:eb:db:3f:39:e7:58:ee:e4:3d:
39:c1:96:55:f1:89:3b:af:02:0d:03:1d:6a:d9:15:80:f5:bc:
60:55:10:74:c4:65:30:78:ee:22:39:ac:ef:60:a8:7f:cf:fd:
8c:d7:1b:13:39:2a:2b:dc:d5:f0:52:02:e7:f9:9c:aa:92:90:
3b:2c:b3:bb:46:30:73:b3:e3:cc:9e:ed:12:bd:a8:aa:95:7b:
bf:76:a6:75:b7:0d:58:2f:e9:94:a8:c5:c4:e6:0b:cc:b8:fa:
6b:d2:60:fc:af:e4:f0:52:c5:63:40:d4:f8:15:ef:70:77:60:
48:6f:1b:17:35:b7:17:a8:11:c9:3b:b2:11:bb:e0:ad:de:a9:
33:8a:2c:a9:4e:b3:0c:55:d8:ea:2b:54:df:1e:3c:b0:39:6a:
30:8f:d2:d9:3a:02:f4:88:63:3d:bd:83:aa:6e:e4:b5:4e:13:
f1:fc:ea:25:3c:29:2f:d4:e6:f1:9c:b0:07:6b:7d:d0:78:61:
4a:17:47:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:50 2024 by rpki-client on console-fra.rpki-client.org