Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/178025-c7d9-423f-a53b-e23f408d189b/1/ch9FEFyThdRxJdNdyh9xgzhoi94.roa
File: ch9FEFyThdRxJdNdyh9xgzhoi94.roa (raw, json)
Hash identifier: SRLNopV2DyBF5eg1C5f0uoibUDyc6FoMt+VQFFvsd44=
Subject key identifier: 72:1F:45:10:5C:93:85:D4:71:25:D3:5D:CA:1F:71:83:38:68:8B:DE
Certificate issuer: /CN=fdb941f2f7c534080e0f777a7ae997992e11e1af
Certificate serial: 01856F14C88813A5131521127B8710D9CEF0
Authority key identifier: FD:B9:41:F2:F7:C5:34:08:0E:0F:77:7A:7A:E9:97:99:2E:11:E1:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_blB8vfFNAgOD3d6eumXmS4R4a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/178025-c7d9-423f-a53b-e23f408d189b/1/ch9FEFyThdRxJdNdyh9xgzhoi94.roa
Signing time: Sun 01 Jan 2023 20:45:11 +0000
ROA not before: Sun 01 Jan 2023 20:45:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51747
IP address blocks: 193.247.126.0/23 maxlen: 24
193.247.74.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:c8:88:13:a5:13:15:21:12:7b:87:10:d9:ce:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdb941f2f7c534080e0f777a7ae997992e11e1af
Validity
Not Before: Jan 1 20:45:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=721f45105c9385d47125d35dca1f718338688bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e5:51:84:cf:b3:0c:56:f2:ca:7c:ab:53:81:
98:55:97:41:77:e4:10:bb:e8:0d:44:6d:bd:33:b4:
9a:e9:9d:c5:8a:99:98:e2:1f:9a:f3:80:38:c5:26:
dd:55:00:fe:65:93:01:bd:86:a5:ae:c4:9f:8d:e6:
18:33:57:8e:9d:e3:eb:b9:09:42:88:e7:1a:3d:05:
41:bc:5a:4e:46:49:3e:67:28:18:b9:d6:29:28:9a:
8c:07:79:91:b0:76:40:55:f9:86:11:2e:14:7a:05:
00:08:22:82:00:46:47:c3:02:46:38:0c:2a:4b:00:
71:16:16:7c:00:15:ce:02:c1:42:81:d5:ce:4e:4d:
85:d4:42:9f:bd:ee:ab:92:4c:a3:52:41:fb:0d:d4:
c0:de:85:e7:66:08:1b:99:38:f2:4b:28:b6:0c:73:
0e:42:9c:5f:fd:fd:97:2e:2e:f7:fd:16:35:e4:40:
50:4f:4d:e0:40:27:f5:09:53:b3:56:36:87:7d:70:
b5:12:d5:d5:2c:c9:15:cd:f7:82:fd:54:27:0f:fb:
ea:b9:15:bc:d9:d3:20:5a:43:9e:bb:06:4f:95:ac:
e0:5b:7f:3e:81:a1:7d:43:06:3f:2e:58:2b:bf:40:
64:b5:e5:db:12:17:e8:26:f9:d9:ed:cd:09:3a:c6:
0a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1F:45:10:5C:93:85:D4:71:25:D3:5D:CA:1F:71:83:38:68:8B:DE
X509v3 Authority Key Identifier:
keyid:FD:B9:41:F2:F7:C5:34:08:0E:0F:77:7A:7A:E9:97:99:2E:11:E1:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_blB8vfFNAgOD3d6eumXmS4R4a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/178025-c7d9-423f-a53b-e23f408d189b/1/ch9FEFyThdRxJdNdyh9xgzhoi94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/178025-c7d9-423f-a53b-e23f408d189b/1/_blB8vfFNAgOD3d6eumXmS4R4a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.74.0/23
193.247.126.0/23
Signature Algorithm: sha256WithRSAEncryption
37:88:3c:ef:cf:50:3c:18:2a:70:10:df:8d:84:a9:68:28:4f:
31:14:7e:77:06:ba:13:1e:b8:86:d1:ce:47:c9:30:a4:97:6a:
b3:c9:63:52:66:da:3c:e7:60:bf:f3:21:07:53:3b:e0:03:14:
11:38:a6:c7:f9:f9:d2:7b:17:4f:88:c0:98:3f:d8:1c:57:05:
d8:21:e7:96:41:56:76:6f:4f:34:ed:43:dd:09:ff:c7:3c:03:
b9:30:03:30:98:fb:fe:89:c6:eb:5c:16:b5:08:16:86:d4:7d:
c1:c6:47:d4:01:15:fb:e6:7d:f7:20:cb:4d:fd:7f:50:f6:72:
f1:87:b2:c6:fb:77:ec:10:b3:50:c8:ef:4d:18:a7:c3:4d:02:
d0:88:af:4f:67:88:76:f3:61:b0:28:07:f1:52:2d:fa:cd:ac:
d1:6e:05:63:1c:6f:25:85:f1:43:a5:35:27:ed:e3:22:fc:6c:
2f:d8:ad:cc:b2:60:76:f7:66:37:2e:3e:d8:89:6d:8e:74:0e:
ea:23:f4:2f:b1:e8:d2:7b:4e:7e:17:bf:69:ed:d6:5d:7b:1e:
1a:74:86:f5:89:4a:f0:2d:80:81:b4:68:a8:aa:98:9f:74:1b:
88:0a:8f:9e:ab:e8:c2:e8:ed:ef:8d:4a:37:c0:57:6d:62:e4:
6d:53:48:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:26 2024 by rpki-client on console-ams.rpki-client.org