Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c931bc-e90c-4aa9-917c-4a2567aa5fce/1/aGGE4NPZaSmbBnHNvi1clx-oEA8.roa
File: aGGE4NPZaSmbBnHNvi1clx-oEA8.roa (raw, json)
Hash identifier: BksOLVonOia0KPv8PgjOJ//n8PFCMy5a/ZGVbZEqyZw=
Subject key identifier: 68:61:84:E0:D3:D9:69:29:9B:06:71:CD:BE:2D:5C:97:1F:A8:10:0F
Certificate issuer: /CN=7b94377f71a28799169ee5f2810d9f87cc6ad1b2
Certificate serial: 01856D41A8CFF6F8BB3198CC9FE61444CFF9
Authority key identifier: 7B:94:37:7F:71:A2:87:99:16:9E:E5:F2:81:0D:9F:87:CC:6A:D1:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c931bc-e90c-4aa9-917c-4a2567aa5fce/1/aGGE4NPZaSmbBnHNvi1clx-oEA8.roa
Signing time: Sun 01 Jan 2023 12:14:57 +0000
ROA not before: Sun 01 Jan 2023 12:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48314
IP address blocks: 193.238.88.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:a8:cf:f6:f8:bb:31:98:cc:9f:e6:14:44:cf:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b94377f71a28799169ee5f2810d9f87cc6ad1b2
Validity
Not Before: Jan 1 12:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=686184e0d3d969299b0671cdbe2d5c971fa8100f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6d:eb:36:1c:29:07:15:a6:ad:6c:b1:86:c9:
85:c2:cc:ef:ad:c4:0c:b7:d0:1d:70:dd:a8:7d:05:
9e:31:cc:ce:26:a6:d1:fb:53:ac:37:42:75:88:1d:
8b:48:68:38:67:26:67:2c:d8:72:e2:25:81:2c:5b:
95:bd:3b:52:57:8e:0e:ea:2f:4b:39:03:84:c0:0c:
4d:e4:a9:3a:c0:8b:15:d8:74:39:c5:39:8d:a2:9c:
ea:6e:0d:63:0a:be:95:90:4b:c0:02:4d:15:60:58:
ea:dd:69:c5:a5:55:02:fb:dd:a9:fa:0c:52:60:5b:
22:09:c8:14:0e:1b:d8:c3:9b:e7:73:a0:f2:a9:35:
ef:c3:ba:1d:f9:47:cd:f2:59:a7:2a:f3:1b:4d:fd:
00:8d:e3:be:93:09:16:bb:96:5b:2d:16:3f:e3:52:
ab:5a:a6:35:41:ef:19:df:15:36:ee:13:e1:65:94:
58:22:fb:34:d8:27:ad:c5:1c:99:99:b7:d9:41:4c:
53:dd:ee:17:00:92:a4:11:33:dd:54:cb:e2:d7:fa:
26:5b:65:99:2a:9e:2f:aa:c3:c9:31:b2:19:1c:eb:
36:d8:0c:f5:98:2f:cc:b1:6c:4b:78:59:4b:62:1d:
c5:c8:2c:51:a1:b9:f5:b5:63:f2:74:a4:9c:7a:43:
39:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:61:84:E0:D3:D9:69:29:9B:06:71:CD:BE:2D:5C:97:1F:A8:10:0F
X509v3 Authority Key Identifier:
keyid:7B:94:37:7F:71:A2:87:99:16:9E:E5:F2:81:0D:9F:87:CC:6A:D1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c931bc-e90c-4aa9-917c-4a2567aa5fce/1/aGGE4NPZaSmbBnHNvi1clx-oEA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c931bc-e90c-4aa9-917c-4a2567aa5fce/1/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.88.0/22
Signature Algorithm: sha256WithRSAEncryption
51:62:45:fe:11:a2:2e:f3:1d:7f:1a:47:4d:57:3d:af:23:dc:
b7:15:25:f8:21:52:30:54:bf:ed:59:09:70:69:0a:ae:9f:26:
a6:3c:b7:19:fa:df:26:cf:44:fc:dc:b8:b0:d3:cf:69:76:62:
60:c2:e9:cc:c2:40:31:36:51:01:77:15:09:d3:65:d7:5d:8f:
0b:38:b0:7e:2d:e1:e5:a3:1b:3a:4f:43:5a:05:f6:36:e4:10:
71:c6:5b:a4:0d:0d:0d:09:ff:ef:93:c4:83:95:9d:c0:2c:91:
59:b0:0c:84:7a:c2:12:b2:d2:e8:65:1e:e8:24:cc:6c:5f:ab:
cb:9a:23:65:08:ab:55:7d:00:2e:b5:26:3d:20:1a:86:b7:84:
65:af:d7:35:8e:50:ef:7b:c1:b5:f1:27:1b:71:df:70:6f:95:
b5:e6:25:14:a0:bf:3c:c5:31:fb:00:24:6e:8b:25:16:4e:48:
53:28:48:43:5e:1d:d9:8c:09:1e:39:f5:01:85:dd:ba:03:10:
63:f4:b9:02:6f:f6:ca:de:fc:ca:6a:26:64:3f:42:da:50:31:
07:f3:c9:29:de:23:cc:94:1e:cd:2c:82:4f:c8:f4:c1:ef:7b:
0b:dc:47:31:b1:5d:fa:90:92:6e:c4:37:94:54:37:41:66:4e:
e9:f5:ea:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:22 2024 by rpki-client on console-fra.rpki-client.org