Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/EhkucGFOioh89LHSSvZ1hKdQdNw.roa
File: EhkucGFOioh89LHSSvZ1hKdQdNw.roa (raw, json)
Hash identifier: UxmWP8tlLdpELyHx2ADC7rPuf8XKSmVkOzV0Q8vp7Yg=
Subject key identifier: 12:19:2E:70:61:4E:8A:88:7C:F4:B1:D2:4A:F6:75:84:A7:50:74:DC
Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial: 0187378F5B2A6C31F90283F0D2D6E5261F64
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/EhkucGFOioh89LHSSvZ1hKdQdNw.roa
Signing time: Fri 31 Mar 2023 12:05:54 +0000
ROA not before: Fri 31 Mar 2023 12:05:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.22.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jul 2023 12:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:37:8f:5b:2a:6c:31:f9:02:83:f0:d2:d6:e5:26:1f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Validity
Not Before: Mar 31 12:05:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12192e70614e8a887cf4b1d24af67584a75074dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d9:40:5c:c1:31:18:f6:56:04:7d:bb:0b:1d:
a9:38:b8:3b:96:aa:f0:71:b0:82:33:52:31:91:56:
c7:d3:9a:c6:ea:38:3b:9a:86:c2:78:5a:b1:91:1a:
96:9a:79:a6:a2:fc:73:d9:ca:23:97:0a:ab:6c:5a:
c7:36:cc:cb:a1:19:d6:85:84:29:f5:2c:01:55:4d:
c6:63:38:b8:9b:bb:ac:22:85:a2:1a:37:01:95:e7:
bf:18:4c:29:72:a7:2d:01:a7:1b:e4:13:26:14:a3:
fc:14:53:8c:a9:d7:5f:45:28:c2:b4:c2:7f:c3:89:
46:5c:ae:4a:7b:bb:55:f8:3f:ac:51:a1:78:2a:8a:
42:cc:8a:f7:85:a4:13:8c:2b:52:10:a8:de:c3:a4:
34:4f:c2:d3:8b:20:d9:f0:70:2e:16:47:3e:0b:96:
aa:33:ca:27:91:c5:aa:b9:a9:94:81:82:1f:4f:67:
82:92:2d:d7:df:94:93:23:cd:60:3e:00:f0:a1:bb:
ae:59:24:90:fb:cb:8a:fa:5d:95:15:ad:91:64:6a:
88:db:6b:8f:a3:60:af:0d:84:12:56:24:e0:92:ff:
1d:47:0b:37:85:62:4d:03:cf:3a:8a:8a:3f:d6:45:
76:93:07:f0:85:42:04:68:93:a2:da:fd:f3:03:10:
90:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:19:2E:70:61:4E:8A:88:7C:F4:B1:D2:4A:F6:75:84:A7:50:74:DC
X509v3 Authority Key Identifier:
keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/EhkucGFOioh89LHSSvZ1hKdQdNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.129.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ba:07:1a:85:17:87:da:51:46:d0:d4:4f:cc:b0:21:ce:43:
05:63:91:d8:07:bd:c5:db:2d:ca:51:46:64:85:1b:f9:21:42:
0b:4e:ed:2a:2f:99:00:4b:3f:ee:34:db:27:3e:33:dd:b2:bb:
d2:d8:b8:89:72:03:bd:67:77:d2:44:18:20:a4:c4:03:d0:eb:
23:89:3c:36:e3:0c:0e:3f:85:59:c2:26:30:09:c6:82:9f:4e:
8d:9c:c2:3d:2b:a3:ad:9c:5d:00:5d:38:d9:2d:f5:90:cb:53:
92:f3:cb:b4:57:06:be:fd:4c:79:9b:96:9c:ce:a4:af:07:55:
22:d2:ba:56:1d:a8:e9:25:58:11:79:1c:a9:6a:99:6a:73:b8:
cc:4b:21:e0:69:65:73:3f:ca:4e:86:40:21:15:83:92:b1:68:
10:b8:55:ef:ba:09:54:db:ee:83:7f:1e:a5:04:20:87:b3:4a:
f4:57:64:8e:74:78:e0:ef:16:86:88:e7:0c:87:56:98:0d:82:
d4:b5:43:98:66:2d:33:7c:e4:df:c2:f0:a3:fc:b8:88:43:28:
77:73:b9:a5:79:a3:52:7a:8a:a4:86:60:69:02:2e:ed:fe:3b:
74:99:ea:d0:ff:1d:f1:ed:29:de:24:85:a0:af:ef:1b:eb:fd:
88:0f:82:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:01 2024 by rpki-client on console-fra.rpki-client.org