Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/5Jl4Ijcuua1HrwoHjZQEn59yYWQ.roa
File: 5Jl4Ijcuua1HrwoHjZQEn59yYWQ.roa (raw, json)
Hash identifier: I/DACBI6g0prSOPJYRacNHJTSBvV/WVcP8JvsfQZnXc=
Subject key identifier: E4:99:78:22:37:2E:B9:AD:47:AF:0A:07:8D:94:04:9F:9F:72:61:64
Certificate issuer: /CN=fbf380b6675b9ccd5f812e069fff175478fb38a4
Certificate serial: 01856E8B567C0156E89510AFB0F0532ACBEB
Authority key identifier: FB:F3:80:B6:67:5B:9C:CD:5F:81:2E:06:9F:FF:17:54:78:FB:38:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/5Jl4Ijcuua1HrwoHjZQEn59yYWQ.roa
Signing time: Sun 01 Jan 2023 18:15:03 +0000
ROA not before: Sun 01 Jan 2023 18:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57696
IP address blocks: 193.107.64.0/24 maxlen: 24
2a07:1780::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:56:7c:01:56:e8:95:10:af:b0:f0:53:2a:cb:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf380b6675b9ccd5f812e069fff175478fb38a4
Validity
Not Before: Jan 1 18:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4997822372eb9ad47af0a078d94049f9f726164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2f:75:0d:6b:58:63:a9:1d:2a:12:b7:62:bf:
79:67:0c:1a:f0:f3:55:b0:d9:e5:9f:76:e2:91:4c:
d4:c0:25:9a:08:ce:41:fe:ee:68:70:f3:cb:2f:b1:
c6:81:b2:3c:cc:ca:e4:05:d5:43:82:90:78:84:09:
e1:da:1d:9c:92:a6:e3:f1:51:74:5a:17:ec:18:c0:
e7:75:34:ca:0a:d3:4f:77:4a:c5:3d:c1:b1:84:ff:
ac:64:90:0d:18:62:29:ce:bc:7b:7c:be:1b:26:62:
a4:67:75:a6:f5:ff:cd:6c:d1:3b:f2:2c:53:c4:23:
14:bc:53:a4:77:f2:df:ed:25:8e:be:26:49:30:2f:
9e:93:79:f4:46:49:26:13:b6:cc:cf:43:34:e6:30:
6e:9a:69:d8:6e:84:2f:59:fe:24:e8:ee:4e:39:5f:
af:d1:78:f7:9d:76:79:fa:78:d7:2c:d3:4c:41:f9:
57:ed:84:2b:a4:ab:48:dc:e5:bd:f8:3f:f8:cd:d9:
60:1b:c1:b7:17:20:d4:7e:bf:a2:23:e7:3f:43:0c:
cb:9b:f4:7d:ab:ad:b8:ac:bf:ef:3d:ab:db:a0:c7:
27:4c:2e:8f:dc:db:b4:b8:75:a0:08:db:3d:a7:79:
07:2b:65:52:6a:92:73:cd:14:fe:e4:aa:49:08:f1:
2c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:99:78:22:37:2E:B9:AD:47:AF:0A:07:8D:94:04:9F:9F:72:61:64
X509v3 Authority Key Identifier:
keyid:FB:F3:80:B6:67:5B:9C:CD:5F:81:2E:06:9F:FF:17:54:78:FB:38:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/5Jl4Ijcuua1HrwoHjZQEn59yYWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.64.0/24
IPv6:
2a07:1780::/29
Signature Algorithm: sha256WithRSAEncryption
15:37:89:cf:fa:57:ec:0f:c5:1c:ca:d2:75:6c:f0:2b:9a:6d:
93:0d:7b:61:3e:35:ff:85:72:45:68:a9:96:f6:cb:41:bd:fc:
70:7a:af:b9:6a:07:1d:e7:1c:51:14:45:d0:e6:45:41:96:f1:
7d:52:57:09:cc:00:b3:34:c4:30:11:e8:e4:81:c3:ee:66:bf:
5d:ad:cc:57:65:5b:c4:f6:f6:14:68:f0:69:61:52:e4:10:26:
ec:0a:84:3d:35:57:17:28:98:da:67:ca:64:85:32:f4:a2:fb:
93:ee:04:56:eb:0e:b6:ba:8b:41:1b:65:f4:5e:49:5b:6c:f1:
7f:bd:ae:e8:07:e2:de:92:41:ef:39:97:97:5a:28:77:a5:93:
45:1e:4f:3c:82:93:33:c3:1a:e6:f2:35:de:1a:a1:ef:4b:87:
98:01:fd:d8:a8:83:e7:a0:69:fe:0c:44:1f:1b:c1:5f:71:cc:
b5:06:b2:c7:6a:92:2d:fa:5a:70:5c:07:fb:be:22:20:ec:88:
6c:75:c0:72:e7:cb:a1:32:64:a3:cb:ce:35:bf:72:01:2e:ae:
b8:f3:95:13:c7:d2:b8:7d:13:5b:ea:43:b9:8c:ee:5c:b1:ea:
da:e2:81:dc:af:2a:86:ac:d7:89:1a:1f:49:6e:3a:21:82:4f:
4f:c0:17:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:02 2024 by rpki-client on console-fra.rpki-client.org