Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/URkGIUqfO8fvpFSRd-nolIQpLRU.roa
File: URkGIUqfO8fvpFSRd-nolIQpLRU.roa (raw, json)
Hash identifier: LH9FX/32ncaaCIWPnsChr5Qg5+DW/PFeCvrQk/+lzQM=
Subject key identifier: 51:19:06:21:4A:9F:3B:C7:EF:A4:54:91:77:E9:E8:94:84:29:2D:15
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 018571278985AAE99CFC1C7AC50B727CB08F
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/URkGIUqfO8fvpFSRd-nolIQpLRU.roa
Signing time: Mon 02 Jan 2023 06:24:54 +0000
ROA not before: Mon 02 Jan 2023 06:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43726
IP address blocks: 193.26.214.0/24 maxlen: 24
91.198.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:89:85:aa:e9:9c:fc:1c:7a:c5:0b:72:7c:b0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 2 06:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=511906214a9f3bc7efa4549177e9e89484292d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d5:41:fa:41:77:61:ff:13:1b:9d:65:25:bd:
b6:57:68:a4:25:be:c2:83:47:23:04:0f:98:c7:17:
02:8a:01:9c:07:78:dd:ea:42:e5:67:ca:c0:72:e3:
bd:e4:60:51:b6:7b:67:1d:af:66:04:ef:47:fe:4c:
9a:b6:d6:2f:3f:3a:fd:be:b2:69:bc:59:ef:b4:96:
7a:1e:00:1c:4d:5b:b5:0a:74:40:5b:37:18:c6:e7:
31:c1:12:05:ac:1f:6c:6d:dd:18:4c:31:99:46:79:
e6:7b:ad:7e:6c:b1:e6:ee:78:26:ec:86:66:af:ce:
98:c7:ff:34:7d:0f:c9:28:48:a6:b9:0c:fa:eb:2c:
80:ca:ec:27:7d:01:22:89:fc:b1:19:2e:1d:84:f5:
a3:b3:d6:e0:69:87:e6:7b:8b:c9:8e:23:20:60:c4:
c8:88:da:05:55:86:e4:70:0f:cd:c6:4c:41:6b:8a:
43:3e:4c:ec:b2:19:b3:04:4c:2e:e4:62:27:36:fc:
d1:05:cd:ed:ac:9f:bd:6d:e8:9c:14:83:bd:1b:62:
da:3d:18:65:17:a0:e2:cb:a6:ba:9b:9d:eb:23:a2:
c8:c1:01:d0:c1:fa:fc:0f:78:86:b3:c6:ba:fd:ef:
4a:ea:e8:a2:9b:9f:7f:93:bc:e2:66:99:5f:49:f2:
70:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:19:06:21:4A:9F:3B:C7:EF:A4:54:91:77:E9:E8:94:84:29:2D:15
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/URkGIUqfO8fvpFSRd-nolIQpLRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.130.0/24
193.26.214.0/24
Signature Algorithm: sha256WithRSAEncryption
18:36:7a:9b:1e:81:14:8c:49:22:26:7b:e7:47:03:ab:a7:e3:
00:74:9f:44:7a:b5:25:69:cb:40:c3:45:96:a0:92:60:f9:f5:
6d:df:1d:3f:17:4b:a3:4f:08:33:a5:e4:1b:e1:fc:7e:10:5d:
bb:ed:fa:79:46:56:da:32:9d:52:b1:2e:7d:3c:14:86:8e:c1:
09:ad:5c:35:05:0f:93:cf:d0:48:69:62:65:9f:20:09:e0:9c:
09:77:fc:c0:d2:9e:42:4d:16:6d:75:45:e4:0b:27:3e:1a:c6:
fb:3e:34:26:3a:ea:22:eb:60:4f:a9:34:e7:01:0d:a6:fc:e1:
2e:4a:dc:b5:fe:30:4e:86:db:a5:56:50:04:ea:0b:ae:5c:9e:
8b:b1:52:29:a0:00:3f:48:db:53:cb:3b:c8:7f:88:38:11:f3:
11:20:ef:b0:dc:27:eb:10:6e:bb:7a:0a:f2:40:a8:f3:e6:09:
fd:40:c0:e0:a1:91:98:eb:11:9d:97:49:7f:ef:c5:e6:71:14:
9b:03:6b:f2:d3:3c:17:67:15:9b:65:4a:e5:29:59:a9:51:87:
d3:aa:3f:5c:ac:4a:2e:01:bf:52:72:4a:e6:0e:62:b3:14:12:
90:e7:e6:65:15:ee:05:12:96:12:29:50:ea:1f:3d:9f:90:27:
34:6c:4d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:06 2024 by rpki-client on console-fra.rpki-client.org