Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/j6U71Jpmmw8_-DAYL4DHiz82jTA.roa
File: j6U71Jpmmw8_-DAYL4DHiz82jTA.roa (raw, json)
Hash identifier: ZuShA0RccnQK5kM6Gm6dofhQj1NjEpHvzwHeN3mcutE=
Subject key identifier: 8F:A5:3B:D4:9A:66:9B:0F:3F:F8:30:18:2F:80:C7:8B:3F:36:8D:30
Certificate issuer: /CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
Certificate serial: 01857142E95250940A6772B8013BDAF995D1
Authority key identifier: D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/j6U71Jpmmw8_-DAYL4DHiz82jTA.roa
Signing time: Mon 02 Jan 2023 06:54:48 +0000
ROA not before: Mon 02 Jan 2023 06:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34906
IP address blocks: 193.189.94.0/24 maxlen: 24
193.189.94.0/23 maxlen: 23
193.189.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:e9:52:50:94:0a:67:72:b8:01:3b:da:f9:95:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
Validity
Not Before: Jan 2 06:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fa53bd49a669b0f3ff830182f80c78b3f368d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:6b:23:75:c0:07:de:f7:8e:ae:5e:91:ea:
53:63:25:ea:fe:47:4a:f6:54:bf:5c:c2:ba:f4:cb:
b9:b4:22:0e:7a:7e:c3:6d:7d:22:ec:65:d0:f8:90:
80:86:ff:69:32:a3:1d:3c:41:5a:f0:da:b2:65:83:
70:33:cd:45:b0:1e:2f:09:8f:4f:f0:ac:6e:8a:55:
59:16:91:83:c7:35:2c:ad:66:2c:c4:9a:36:e4:1d:
b7:15:e0:63:5d:bb:e9:71:eb:b9:ae:0c:f2:64:3c:
82:0f:72:fc:9d:2e:bf:0e:df:22:89:22:40:4e:2e:
13:ec:d1:64:40:f8:69:e9:4b:c1:3a:76:2b:38:8f:
1b:17:ac:d3:85:9b:69:9b:9d:a1:13:f0:87:58:40:
bf:44:f6:f0:ac:9f:db:f4:b2:70:a2:01:dc:66:24:
a6:91:4a:21:c9:95:59:37:dc:af:63:9f:e0:d4:a6:
4e:e8:4d:f8:a5:4f:4c:82:ee:8a:f3:4f:84:14:26:
7f:e5:0b:26:f7:d1:83:c0:02:59:9c:52:aa:69:91:
5e:67:2c:cb:8b:a9:28:9e:fc:17:8c:37:a3:d5:5c:
f2:55:b4:8e:3a:c5:f7:be:96:25:8a:40:73:6d:d4:
7f:b5:1b:2c:20:80:0a:91:d4:fd:a2:49:71:c1:be:
91:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A5:3B:D4:9A:66:9B:0F:3F:F8:30:18:2F:80:C7:8B:3F:36:8D:30
X509v3 Authority Key Identifier:
keyid:D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/j6U71Jpmmw8_-DAYL4DHiz82jTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.189.94.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:f3:61:64:4e:03:c2:d0:cb:e9:22:19:77:e1:be:79:61:3a:
b3:d0:54:4e:d7:99:07:45:59:28:b1:cc:4a:e2:14:55:56:36:
44:9a:24:b9:c3:dd:fb:b3:af:6a:7a:cd:13:71:21:e4:02:43:
b6:44:06:c8:65:58:bf:64:0a:b2:b9:9c:91:71:fd:25:c6:bc:
07:5d:5c:ec:f9:0a:6a:e0:be:ba:41:8d:7d:90:da:d2:4d:1f:
88:e6:53:af:01:a7:bd:ce:1c:7a:47:92:39:b9:71:24:fc:7a:
ac:14:22:02:03:52:37:31:2e:a3:8f:4f:dc:74:7f:51:f6:1a:
c6:3d:eb:30:d7:a2:81:9c:1a:83:45:24:ca:3a:26:b3:ce:a1:
70:00:a4:0a:13:5b:22:b0:bc:37:26:ef:30:58:7f:bc:d7:6b:
89:8c:50:4d:9a:72:2e:52:8a:ec:9b:47:52:dc:2a:c6:a7:85:
b2:2a:8e:52:c4:7b:95:80:f5:f6:27:51:da:33:ba:7f:a8:cc:
d4:04:e1:19:9a:a6:dd:ff:50:41:ee:92:d0:4a:6e:f4:c3:95:
7f:0c:14:e9:88:1f:3d:13:ce:1c:85:c9:65:7c:9b:8d:d7:af:
cf:1a:d1:1a:c1:93:3b:6d:a8:7b:0b:61:e0:18:ba:9f:c8:ae:
2b:45:93:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:10 2024 by rpki-client on console-fra.rpki-client.org