Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/9fWn3DNczOo0GF46Krnr4CQTgYc.roa
File: 9fWn3DNczOo0GF46Krnr4CQTgYc.roa (raw, json)
Hash identifier: PdeNjFQcbkJK5duFFQzhkr6Z/h+ovvndFvIMZFMMfU4=
Subject key identifier: F5:F5:A7:DC:33:5C:CC:EA:34:18:5E:3A:2A:B9:EB:E0:24:13:81:87
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018E7BC66C1AC0DE7845669E85F52EE90B5A
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/9fWn3DNczOo0GF46Krnr4CQTgYc.roa
Signing time: Tue 26 Mar 2024 17:19:45 +0000
ROA not before: Tue 26 Mar 2024 17:19:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205663
IP address blocks: 212.16.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7b:c6:6c:1a:c0:de:78:45:66:9e:85:f5:2e:e9:0b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Mar 26 17:19:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5f5a7dc335cccea34185e3a2ab9ebe024138187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7f:a3:95:e6:b0:19:94:c8:3b:ba:c4:8b:e4:
a8:28:6b:37:df:2d:06:f6:5b:88:6e:6f:20:97:4e:
71:2e:c2:dc:d5:22:93:1a:69:72:fc:83:c2:be:9b:
e2:2c:11:d8:3e:8b:ad:7d:4f:7f:34:32:03:af:9c:
b7:71:73:f3:91:24:c3:4b:3c:08:2d:25:86:81:41:
d6:d2:da:64:5d:d0:56:37:68:69:59:28:fb:90:47:
bf:c5:a5:80:38:98:92:ad:8c:09:2d:06:38:22:b6:
b3:09:d7:3e:74:21:01:1c:00:fa:29:a1:df:e0:5a:
a7:87:d9:f7:73:e8:f4:70:7d:91:e8:b5:d8:59:37:
fd:6c:0b:59:41:9a:bb:4f:60:75:b3:92:85:7f:85:
66:49:82:22:fb:29:04:70:4a:bf:78:22:e8:b6:1d:
52:d7:e3:e9:70:fb:4a:9f:68:5f:54:b1:6b:2d:53:
34:df:fd:27:83:25:4b:7b:a4:7c:9d:ea:d4:3f:01:
49:29:43:c6:18:21:7a:ea:f1:df:88:9e:7b:cc:60:
00:f9:13:25:b8:a3:3e:81:ef:3b:e9:65:8b:67:ba:
64:c1:a2:b7:59:da:4e:ed:ec:c1:8c:13:4f:d2:bc:
2b:54:61:a8:bf:d2:61:44:f1:f5:1d:42:6b:cd:10:
b8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F5:A7:DC:33:5C:CC:EA:34:18:5E:3A:2A:B9:EB:E0:24:13:81:87
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/9fWn3DNczOo0GF46Krnr4CQTgYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.93.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:28:00:d4:2a:9d:81:26:09:60:0c:19:a3:b6:04:32:b3:5d:
94:dc:c3:40:10:af:4c:94:62:38:51:57:49:65:f4:55:90:0a:
fc:37:a3:06:47:49:21:77:b8:b6:b9:68:d9:6c:59:f8:f3:91:
76:eb:dd:7c:49:e9:49:7f:1d:ec:f4:2e:b3:4e:da:c0:15:03:
f3:e6:d8:98:3a:25:47:de:90:05:02:60:cf:43:a2:a0:c2:4a:
24:bd:44:7d:f8:e2:88:9d:ba:11:03:65:35:9e:dd:88:dc:d8:
48:27:59:df:ca:1e:ed:69:58:b0:7c:a2:17:d4:bb:08:4a:4a:
03:67:e5:46:fa:b0:91:59:b6:80:55:91:4b:65:96:70:84:71:
5d:47:6f:a4:41:08:ae:5e:ab:bd:22:0f:e5:ac:88:c8:b8:01:
c1:8e:74:46:1f:f7:c0:68:aa:45:fd:3c:5d:fd:74:21:6a:2e:
05:50:4d:de:37:8e:28:aa:c8:9b:29:98:ba:9d:13:11:7d:57:
1f:88:e7:2e:e7:26:30:13:0a:27:cf:4f:f3:e6:39:da:18:4a:
7a:01:6a:cc:e5:bc:7f:24:b6:42:1f:0d:8a:de:f1:db:d7:a2:
25:c9:31:14:66:87:81:7b:9e:e3:9e:ef:2c:d1:99:64:2f:f5:
ba:9d:7c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 16:08:32 2024 by rpki-client on console-ams.rpki-client.org