Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/boBIewoGgkqRwFqZEEHYeuKzAvk.roa
File: boBIewoGgkqRwFqZEEHYeuKzAvk.roa (raw, json)
Hash identifier: ZbjDSmKb4it5ikrasGEOtWyH0/jNcHQJns5o1sFbPFs=
Subject key identifier: 6E:80:48:7B:0A:06:82:4A:91:C0:5A:99:10:41:D8:7A:E2:B3:02:F9
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 01865FAC0FE530EBBCBDD08BED3D4D986F73
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/boBIewoGgkqRwFqZEEHYeuKzAvk.roa
Signing time: Fri 17 Feb 2023 13:59:17 +0000
ROA not before: Fri 17 Feb 2023 13:59:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211995
IP address blocks: 193.228.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Dec 2023 12:42:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5f:ac:0f:e5:30:eb:bc:bd:d0:8b:ed:3d:4d:98:6f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Feb 17 13:59:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e80487b0a06824a91c05a991041d87ae2b302f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:79:ca:6e:96:50:87:95:96:c4:34:7c:bf:99:
8c:05:80:05:d4:4c:bb:e3:5f:45:d5:48:e3:0e:f0:
09:9d:f5:cf:f0:d0:12:e4:ce:d6:37:7b:de:bf:f1:
19:72:60:bc:8b:08:d7:4b:6e:0a:5f:a1:12:30:e8:
5c:6a:d2:80:13:e3:90:14:fc:74:03:47:94:d2:ba:
aa:de:45:7c:8a:19:27:22:f5:84:f1:b4:20:45:5b:
9b:d0:ce:c6:16:d6:8f:0b:0f:0a:30:be:8f:67:fc:
2b:60:c6:2c:24:4d:1d:d6:49:c7:06:b2:a5:f7:61:
1d:a5:c0:8c:2c:fd:36:06:28:6f:c1:f1:78:fa:60:
b2:0f:e7:b7:e6:ca:3c:bb:22:4b:64:d1:7f:ec:49:
a9:aa:4d:e6:9f:8e:91:e9:1b:fd:0a:59:62:74:aa:
8e:b1:65:3f:4e:1a:35:a2:6a:f5:ce:6a:17:7c:c9:
86:e6:b0:41:da:3e:c2:95:0f:16:99:ff:88:3d:11:
f5:45:f7:fa:87:db:53:c0:67:d7:72:81:95:ca:6a:
41:ea:77:36:7e:1b:91:3f:3a:e6:e5:8d:6a:13:31:
1f:2d:11:62:97:1e:b0:74:8c:17:92:36:3f:cc:60:
4c:30:52:bf:8a:f1:a4:26:ba:cb:60:55:be:f8:34:
4f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:80:48:7B:0A:06:82:4A:91:C0:5A:99:10:41:D8:7A:E2:B3:02:F9
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/boBIewoGgkqRwFqZEEHYeuKzAvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.139.0/24
Signature Algorithm: sha256WithRSAEncryption
85:de:5a:92:41:0c:35:b7:81:ab:45:cf:86:b2:77:8a:ac:b0:
ab:27:e6:fb:17:09:42:0d:4c:fb:e2:85:e7:40:e3:86:7a:d0:
ba:eb:6a:14:ac:dc:51:d9:e7:f9:a9:6f:3b:74:3b:28:08:78:
9c:f9:c3:d8:62:c9:a4:28:67:7d:90:86:9d:6f:c4:a2:d7:4c:
84:d5:54:91:7d:7b:97:c6:e6:f0:4d:75:f6:f4:58:bb:6c:e8:
2b:cb:9d:65:9a:0f:fb:4c:d0:3b:a9:01:f8:ed:94:64:6c:c4:
ac:00:aa:de:33:0b:09:fd:7b:ec:3f:b2:03:98:6e:9d:2f:29:
0c:2d:b7:b6:7a:b6:f1:9a:30:7d:57:a7:ee:80:7b:b1:ec:9e:
d5:50:99:6e:4f:d0:db:db:f9:b8:76:66:fe:8f:70:c3:58:c2:
14:dd:ee:ce:86:eb:43:ef:08:4b:50:74:a2:99:53:b5:cc:7e:
ee:a4:13:13:68:5d:c9:6a:24:91:38:fc:f5:2f:6b:66:ea:17:
0b:f8:0e:74:9c:b5:7f:54:14:1c:22:7e:32:97:36:14:1b:3b:
96:92:a3:fb:17:67:6c:0f:4b:fa:3f:a7:c3:b9:b6:d0:fb:76:
2b:11:c5:e4:7a:02:5e:87:f8:1a:bc:c3:72:4a:04:d6:7e:62:
b5:bb:11:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:12 2024 by rpki-client on console-fra.rpki-client.org