Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/Xouamt5U8lDuSWJVCeSf-72PAFM.roa
File: Xouamt5U8lDuSWJVCeSf-72PAFM.roa (raw, json)
Hash identifier: 2SLI7S38jtTSAGFsIHhat0ZJqiBOO1SJl63OvZfEuQo=
Subject key identifier: 5E:8B:9A:9A:DE:54:F2:50:EE:49:62:55:09:E4:9F:FB:BD:8F:00:53
Certificate issuer: /CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
Certificate serial: 018571FA07C2BACCDE5DDF8B1558FF527883
Authority key identifier: B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/Xouamt5U8lDuSWJVCeSf-72PAFM.roa
Signing time: Mon 02 Jan 2023 10:14:49 +0000
ROA not before: Mon 02 Jan 2023 10:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196882
IP address blocks: 193.104.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:07:c2:ba:cc:de:5d:df:8b:15:58:ff:52:78:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
Validity
Not Before: Jan 2 10:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e8b9a9ade54f250ee49625509e49ffbbd8f0053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:80:85:8e:cd:a5:46:f9:e9:66:99:7b:57:ce:
4e:f3:b9:3d:4d:ba:df:ec:76:ab:73:9a:e4:83:ed:
89:6c:ea:7f:bd:cb:da:ec:0d:74:3f:48:7e:ea:f3:
7e:d1:19:f7:01:24:df:41:eb:62:50:cc:85:fc:e6:
c7:2c:25:de:a1:41:95:c3:2f:4e:47:e2:ca:9c:e0:
60:77:02:f6:8b:a4:91:88:dd:20:61:9d:d0:d3:2e:
24:27:af:e0:c6:41:be:b4:9e:bb:68:36:7b:0e:34:
80:94:1f:92:0a:9a:9d:dd:dd:5d:20:f7:df:ab:5c:
33:e1:63:4a:1e:95:fc:87:20:b6:e2:6e:28:8c:0f:
79:08:84:9e:6c:25:f6:a8:f6:9f:32:02:27:a6:5f:
e5:6c:06:54:32:f4:75:2c:be:f8:d5:f0:ca:68:b5:
ca:2f:bc:30:2a:02:d6:1c:df:bf:e2:bf:7e:c0:2a:
84:5e:83:70:b9:f4:b3:bb:3d:38:d6:2d:fd:69:c7:
6d:85:d0:c2:df:c7:f9:23:be:2e:23:24:c5:c9:c6:
c3:df:4a:1a:fe:15:b7:32:a8:63:79:ae:a6:71:a5:
e8:0d:a9:28:bf:0b:98:6d:8f:e9:e1:f4:09:4f:92:
4f:05:42:8f:f6:cd:62:cf:ab:8d:16:a4:ad:43:d0:
71:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8B:9A:9A:DE:54:F2:50:EE:49:62:55:09:E4:9F:FB:BD:8F:00:53
X509v3 Authority Key Identifier:
keyid:B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/Xouamt5U8lDuSWJVCeSf-72PAFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.235.0/24
Signature Algorithm: sha256WithRSAEncryption
19:a6:4b:86:5f:f2:b3:60:7e:b7:e3:57:b6:6c:76:b4:7e:41:
4b:88:85:d9:56:4e:dd:18:bd:ec:31:b6:7b:e4:bd:2a:33:1a:
a4:b7:f3:96:03:e4:54:3f:f8:bd:1b:77:d1:5c:4b:73:50:ee:
65:d0:1e:d3:ce:cb:1b:90:64:75:22:3f:c6:ca:15:c7:d3:00:
76:c5:5b:44:74:af:6e:50:71:d6:da:36:7b:6e:a2:f3:cc:95:
16:9a:ad:bf:07:e1:ed:b8:cc:71:1f:05:f2:b9:de:7d:61:57:
bd:5c:f4:c4:07:7c:35:bd:fc:a0:da:06:ba:48:2b:41:77:e5:
cd:46:7e:c4:e2:5c:78:3f:e5:e7:34:61:ac:60:9b:07:42:ee:
45:e1:11:5b:a4:d4:05:6d:69:ef:b3:9c:0c:17:83:4d:0f:aa:
2e:67:4f:91:08:43:85:c3:8c:13:11:82:99:f6:f8:ca:2b:34:
b5:e7:5e:43:30:21:88:3e:fe:d1:60:cd:c6:8c:fa:d2:cf:02:
d7:0a:04:2b:91:c1:d0:fc:ef:a7:5b:4c:1b:49:3f:ec:a1:85:
a8:21:ef:33:3e:e1:43:99:04:3c:49:d4:e6:50:43:90:f7:d6:
ba:52:dd:0c:a7:ac:ac:4e:fb:2d:5c:bb:90:d4:0b:24:6d:84:
ca:2a:45:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:05 2024 by rpki-client on console-fra.rpki-client.org