Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/ASz8g2Yp2nl6hsqk_x4aMIuwQhE.roa
File: ASz8g2Yp2nl6hsqk_x4aMIuwQhE.roa (raw, json)
Hash identifier: qRpoesT3dzhQ0ELH+khHKVH04S+F9laePil1j1Sh8gg=
Subject key identifier: 01:2C:FC:83:66:29:DA:79:7A:86:CA:A4:FF:1E:1A:30:8B:B0:42:11
Certificate issuer: /CN=547ce483c8241d7a4e6625977798035b638586c6
Certificate serial: 018BF626D3C6810701830E6BC63A90B40E43
Authority key identifier: 54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/ASz8g2Yp2nl6hsqk_x4aMIuwQhE.roa
Signing time: Wed 22 Nov 2023 08:30:21 +0000
ROA not before: Wed 22 Nov 2023 08:30:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44138
IP address blocks: 193.28.94.0/24 maxlen: 24
2001:67c:1b0c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:26:d3:c6:81:07:01:83:0e:6b:c6:3a:90:b4:0e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547ce483c8241d7a4e6625977798035b638586c6
Validity
Not Before: Nov 22 08:30:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=012cfc836629da797a86caa4ff1e1a308bb04211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:18:58:25:fe:e8:af:c8:c6:e2:57:9d:e2:c7:
1c:67:0c:e7:75:59:74:85:29:46:75:75:e9:4b:7d:
c0:62:86:c9:9c:a6:e0:b7:63:5c:90:fe:a7:8e:7a:
d8:17:34:be:e4:e1:c3:5c:4c:5f:67:2b:ab:5d:46:
b1:30:b9:60:d8:24:e7:27:13:5b:15:cc:8d:79:fa:
16:e5:e7:a9:8d:d6:ff:4f:9a:f7:6f:c6:0c:bc:91:
81:93:98:72:24:67:f7:fc:3c:28:46:0b:02:16:23:
81:a0:a5:3f:0e:a1:ea:8b:d7:b8:7a:d1:53:62:ca:
8f:8b:65:29:f3:30:af:70:a8:cf:b1:82:40:34:06:
d8:a6:b0:1c:83:72:87:95:e0:fa:90:19:cb:bc:02:
63:3e:55:1a:d2:b2:c6:8b:2c:29:d0:5d:79:d0:7e:
af:08:03:68:cb:cd:6f:0d:5f:5e:5e:1a:36:74:b2:
42:4c:19:e3:14:09:dd:76:1a:11:df:a9:2c:91:dd:
f1:1e:f4:7a:c3:1f:71:3a:dc:76:31:72:77:37:5b:
14:f6:bd:3d:0a:a1:aa:c0:f7:7f:14:01:ce:cc:c6:
9f:8a:75:72:d0:34:08:48:b8:3d:8f:c7:98:9b:38:
cc:17:8f:07:23:3e:16:d0:0a:7c:9f:cd:8c:fc:4c:
59:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2C:FC:83:66:29:DA:79:7A:86:CA:A4:FF:1E:1A:30:8B:B0:42:11
X509v3 Authority Key Identifier:
keyid:54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/ASz8g2Yp2nl6hsqk_x4aMIuwQhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.94.0/24
IPv6:
2001:67c:1b0c::/48
Signature Algorithm: sha256WithRSAEncryption
c1:38:c1:db:6b:6b:d0:e0:9a:e7:e5:d2:15:7a:38:9f:d8:be:
40:bb:c0:f4:a5:92:87:49:7d:40:a7:84:9e:23:ee:8e:bc:34:
32:66:7c:4f:f7:ec:90:50:81:e5:be:62:d0:62:1c:d9:72:51:
36:23:f9:dc:a4:b4:94:18:69:56:a7:4c:be:64:76:09:49:01:
3e:1f:39:f3:07:5a:5a:2d:f5:8d:4e:0f:a9:db:1a:bf:a9:db:
7d:38:b5:40:50:a2:88:52:cb:44:c3:57:15:42:a4:59:1d:21:
cf:bb:85:2f:98:99:ed:6d:df:b0:eb:61:49:46:24:f1:7b:e7:
c5:80:29:43:73:aa:bf:e0:0d:e3:96:15:a8:0c:0b:16:84:72:
d1:63:a9:60:01:8e:52:e1:c6:28:30:b6:85:02:b8:1b:25:1d:
5e:1c:ae:2d:ca:d8:49:bb:be:65:01:4e:cf:9a:1f:23:17:99:
1c:03:be:4e:f0:53:92:c1:26:ce:ea:67:1a:8f:54:84:9f:0e:
54:38:ab:4e:e8:0e:43:f7:fb:93:ea:f8:17:0d:1c:c7:5b:23:
0a:2e:0b:3a:cc:07:f6:42:30:7e:62:ea:9f:98:cc:5a:49:58:
3f:a7:85:4b:43:38:4d:90:0d:14:41:d0:ff:ca:fe:21:73:cf:
85:1c:9f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:19 2024 by rpki-client on console-fra.rpki-client.org