Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e05ab2-23b8-4af2-b488-d3d03797259d/1/e9N214YK_McfznzSFMnpCrcrqfw.roa
File: e9N214YK_McfznzSFMnpCrcrqfw.roa (raw, json)
Hash identifier: pvbi/IH873L/W+x6DehZg/Y27HPbT31qTtdHept3/I0=
Subject key identifier: 7B:D3:76:D7:86:0A:FC:C7:1F:CE:7C:D2:14:C9:E9:0A:B7:2B:A9:FC
Certificate issuer: /CN=bc69e6902d4e1c41246f4a121b4a5bdecf86e388
Certificate serial: 01856F393BD98DC225EC0366979915E4736B
Authority key identifier: BC:69:E6:90:2D:4E:1C:41:24:6F:4A:12:1B:4A:5B:DE:CF:86:E3:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGnmkC1OHEEkb0oSG0pb3s-G44g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e05ab2-23b8-4af2-b488-d3d03797259d/1/e9N214YK_McfznzSFMnpCrcrqfw.roa
Signing time: Sun 01 Jan 2023 21:24:59 +0000
ROA not before: Sun 01 Jan 2023 21:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201746
IP address blocks: 193.5.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:3b:d9:8d:c2:25:ec:03:66:97:99:15:e4:73:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc69e6902d4e1c41246f4a121b4a5bdecf86e388
Validity
Not Before: Jan 1 21:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bd376d7860afcc71fce7cd214c9e90ab72ba9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ec:f5:79:96:6d:72:0c:ab:78:5f:9e:16:7b:
a4:1d:08:4f:c7:1e:76:a1:c5:1b:d7:18:95:26:09:
0c:ab:32:52:74:58:93:0b:6f:96:74:6a:f1:21:d3:
f9:00:47:38:78:0c:9b:74:87:07:c0:c4:98:12:e3:
3e:59:3b:72:17:89:b9:49:83:37:05:a1:25:1a:53:
8d:7f:8f:12:3e:cf:9a:8b:c0:0c:ae:52:6f:6e:1f:
88:8d:6c:c9:08:74:aa:cd:c9:71:97:5f:0a:88:0b:
33:17:ac:ba:b6:88:8b:0b:f5:83:4e:65:5c:21:54:
87:b8:dc:d4:30:9d:80:f0:e4:25:73:ed:fe:fd:de:
83:0e:00:e7:8c:ab:50:5d:74:db:5c:ad:bb:8b:0c:
82:ca:ef:ef:69:e4:8f:bb:f1:f2:e7:9b:9c:a8:08:
a2:aa:a9:4d:58:1a:49:65:06:cf:08:46:4b:dd:85:
b8:c1:00:6e:fb:39:45:b0:ba:e0:56:e3:7b:37:9b:
92:a2:ff:ef:b3:c0:84:77:30:37:a9:f4:3a:83:bc:
b0:a6:a4:ee:d2:34:9d:9d:c9:be:21:40:f3:81:23:
ef:c2:f6:93:c8:3b:57:7a:27:c9:d0:27:12:ba:be:
b0:35:2f:c3:65:de:9a:b4:32:50:b7:4b:c4:b4:ac:
f6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D3:76:D7:86:0A:FC:C7:1F:CE:7C:D2:14:C9:E9:0A:B7:2B:A9:FC
X509v3 Authority Key Identifier:
keyid:BC:69:E6:90:2D:4E:1C:41:24:6F:4A:12:1B:4A:5B:DE:CF:86:E3:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGnmkC1OHEEkb0oSG0pb3s-G44g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e05ab2-23b8-4af2-b488-d3d03797259d/1/e9N214YK_McfznzSFMnpCrcrqfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e05ab2-23b8-4af2-b488-d3d03797259d/1/vGnmkC1OHEEkb0oSG0pb3s-G44g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.150.0/24
Signature Algorithm: sha256WithRSAEncryption
43:dd:e8:62:30:e2:33:03:a6:93:17:11:5d:c1:02:2d:55:03:
e0:fb:ba:87:6f:68:9a:1f:dd:26:3a:16:09:ac:2b:97:d5:01:
1e:5f:29:2a:aa:c5:4e:88:27:79:18:20:9b:09:88:b7:db:a7:
e0:5e:86:83:58:dc:42:30:b8:70:e0:21:f5:9e:46:fb:b2:90:
f6:d0:16:e0:cd:1e:22:3a:5b:8f:98:77:70:97:53:e0:25:04:
0c:23:28:ee:a8:2b:6e:91:55:01:1c:4a:56:84:7e:3e:f5:8c:
61:a7:99:08:90:46:79:8f:8f:bf:95:43:e7:27:10:3a:e1:9f:
1d:1c:a2:bd:47:1c:b2:3c:91:88:8d:17:e1:34:ce:48:67:41:
fb:cf:8a:6b:02:a6:d6:f6:cd:c4:86:af:4b:7e:53:69:8b:14:
e8:3a:5c:9f:2d:75:5f:76:eb:aa:e9:30:77:5a:51:2a:f4:74:
59:e8:6f:08:99:38:fb:3f:5e:3c:c0:df:a9:6f:15:61:d8:16:
fd:3c:bf:76:1a:a1:5d:d6:6e:1a:e0:f9:53:a4:76:2d:3f:80:
5d:13:1c:08:36:5e:44:e3:c7:d0:25:d4:9a:2c:ea:5b:4c:fa:
8f:bd:f3:ab:dc:a6:cd:2f:4f:92:cc:af:50:28:d1:8e:29:dc:
af:58:d1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:56 2024 by rpki-client on console-ams.rpki-client.org