Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/_VfRSvOX8FhfNAMEcbZtPw7lCYI.roa
File: _VfRSvOX8FhfNAMEcbZtPw7lCYI.roa (raw, json)
Hash identifier: DqlpmDtpJgiu/O2K9aar3KErXHz2jh9x8eM3hq1eVcM=
Subject key identifier: FD:57:D1:4A:F3:97:F0:58:5F:34:03:04:71:B6:6D:3F:0E:E5:09:82
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019128487C9CC9333FE2AAFE110869FCE6D8
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/_VfRSvOX8FhfNAMEcbZtPw7lCYI.roa
Signing time: Tue 06 Aug 2024 15:22:04 +0000
ROA not before: Tue 06 Aug 2024 15:22:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35278
IP address blocks: 193.222.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 11:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:28:48:7c:9c:c9:33:3f:e2:aa:fe:11:08:69:fc:e6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 6 15:22:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd57d14af397f0585f34030471b66d3f0ee50982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:38:4a:51:21:6a:3c:a8:af:46:35:fb:d5:73:
8f:9d:80:54:42:06:bc:3a:84:f8:c7:75:54:96:46:
80:6b:9e:01:b9:b5:a5:1d:a9:94:18:f8:3e:5d:f0:
48:f5:a8:3c:d8:ad:4f:9b:75:a9:91:d2:41:92:1f:
e8:20:31:f4:06:66:7d:94:56:28:f5:3d:7b:7c:47:
a1:47:6f:f1:51:9d:ec:46:bf:4f:36:fa:5a:fb:66:
05:fe:c9:0e:84:a4:f9:ed:13:8e:a4:a3:5b:12:57:
57:6b:b7:81:9e:c5:0e:94:6e:34:4f:d8:d0:06:9f:
8e:3c:36:a9:d0:66:01:31:60:42:d7:2b:87:ec:60:
90:2c:b2:9c:53:7d:c2:3a:35:42:f2:2f:c7:b0:53:
15:05:3b:ab:9b:41:4d:78:eb:fd:62:40:4e:95:70:
14:e0:06:1d:a2:63:8b:31:cd:cc:d0:18:f4:1b:b8:
a0:2e:ce:5c:30:d3:a4:21:6b:8f:ec:84:00:f8:07:
85:62:b5:f1:f5:41:38:f3:8f:0c:ef:b2:d5:92:5f:
69:6b:22:78:4b:f4:a6:fe:be:bd:39:d7:2c:26:6a:
e1:69:b1:00:17:53:31:be:af:97:2f:89:5d:0b:ef:
75:18:02:d9:ad:e9:cf:0b:6b:87:8d:6e:1a:83:c0:
6a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:57:D1:4A:F3:97:F0:58:5F:34:03:04:71:B6:6D:3F:0E:E5:09:82
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/_VfRSvOX8FhfNAMEcbZtPw7lCYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.62.0/24
Signature Algorithm: sha256WithRSAEncryption
10:aa:d5:9b:d9:82:e1:f9:9a:18:8e:d7:70:fc:7c:cd:3c:f4:
73:4b:09:88:02:d3:9c:e1:9e:02:3b:27:ec:46:93:95:1c:50:
85:de:d5:90:67:2d:4a:52:64:93:34:d4:3c:8b:ae:f6:f5:b0:
09:01:2b:dc:37:22:b5:13:8b:e9:93:f4:36:22:80:36:5b:d4:
0a:05:ed:85:30:17:e4:a3:61:2c:59:7f:10:ce:d0:42:42:a5:
02:7a:84:d5:51:a3:82:ce:8b:8b:88:7f:fd:c4:c9:91:f3:3b:
60:6a:63:93:28:d5:a2:ee:65:5a:5c:71:e2:bb:c0:fe:5e:39:
e9:08:5f:9b:e8:9a:f3:14:d4:8d:17:48:a0:c5:70:1f:08:98:
06:1b:6c:0c:ba:6a:da:93:5a:31:d1:2f:c9:30:74:09:b0:98:
f9:bc:81:7e:8c:5c:45:b5:74:8b:c2:ab:76:3a:fa:e7:03:10:
bf:b0:5d:16:aa:81:66:b7:30:22:8c:2f:c5:5e:e2:e5:e5:be:
fb:3f:a2:4a:7f:97:ba:bb:51:a0:1e:e5:0e:94:f7:60:5b:94:
1c:a3:b1:66:13:f2:40:70:93:7c:c2:0c:1d:27:af:da:f2:15:
85:20:eb:0e:60:23:e0:83:ab:a5:37:b5:40:05:95:01:29:68:
70:e3:96:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 14:14:25 2024 by rpki-client on console-fra.rpki-client.org