Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/1-p7_x1P2WHnFFYRrqheSQmIRlRg.roa
File: 1-p7_x1P2WHnFFYRrqheSQmIRlRg.roa (raw, json)
Hash identifier: YO2mqrk54iiIT+rbGmEplODlCT13lXXQXpm6Y0mPlQs=
Subject key identifier: FA:9E:FF:C7:53:F6:58:79:C5:15:84:6B:AA:17:92:42:62:11:95:18
Certificate issuer: /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Certificate serial: 0185724C82732DB66E40411A6BD9B6E539C5
Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/1-p7_x1P2WHnFFYRrqheSQmIRlRg.roa
Signing time: Mon 02 Jan 2023 11:44:54 +0000
ROA not before: Mon 02 Jan 2023 11:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 193.106.251.0/24 maxlen: 24
193.106.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Feb 2023 13:13:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:82:73:2d:b6:6e:40:41:1a:6b:d9:b6:e5:39:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Validity
Not Before: Jan 2 11:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa9effc753f65879c515846baa17924262119518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bf:08:fe:fc:b7:38:05:a3:dd:05:0d:7a:1e:
75:08:79:57:71:ad:4b:f1:3a:c6:35:b2:1b:76:f7:
8e:6e:df:1e:5a:eb:73:89:42:91:0f:a1:23:d3:7d:
b2:4e:2b:c2:e1:60:59:4d:79:52:a4:4b:65:b7:ad:
ab:cb:2e:b7:1a:d0:7f:36:70:84:0a:f4:fb:09:3a:
9c:a2:78:d0:ca:3c:7c:fe:61:cc:88:18:64:ef:e6:
17:a7:3e:79:f6:0e:2d:94:dd:0b:9c:cc:88:e0:ff:
1e:44:1a:b5:f7:84:cd:cd:d9:96:76:c3:25:9b:ce:
7b:ad:5d:e9:cc:f7:ac:60:fb:3d:a9:7c:1f:1c:eb:
ad:f8:0d:07:df:a3:8e:06:a8:4b:e9:77:bd:61:2f:
47:71:49:34:9e:18:63:89:84:1c:a8:59:84:ba:5b:
40:c8:41:33:f1:42:22:8f:87:3e:d1:04:7e:ae:47:
f7:f7:6d:d4:dd:f2:e2:47:1f:80:5f:79:86:38:6b:
db:bf:1e:af:db:ee:4b:dd:5e:ce:74:3d:e8:9b:2b:
3c:0f:72:a9:a1:34:4b:38:ca:e7:00:e9:83:bb:65:
bc:e3:66:60:02:24:eb:50:b0:90:8b:02:4e:92:c2:
03:36:c4:f5:ff:81:00:e1:f1:56:f3:7f:fd:33:f2:
59:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9E:FF:C7:53:F6:58:79:C5:15:84:6B:AA:17:92:42:62:11:95:18
X509v3 Authority Key Identifier:
keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/1-p7_x1P2WHnFFYRrqheSQmIRlRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.249.0/24
193.106.251.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:cc:8d:06:da:2b:1b:67:bf:8c:5d:cb:fe:2e:02:72:6e:47:
10:76:7d:12:92:99:58:f0:ce:14:e2:0e:ce:f2:f8:d2:86:d1:
82:4c:c5:8c:fe:32:43:35:4a:af:4e:55:95:66:d2:0c:2d:f0:
eb:da:d1:0e:8c:e8:ec:fc:02:cc:1c:d8:40:86:fb:b2:3b:52:
c3:0f:ef:88:5c:ef:2b:11:68:5c:d0:0c:07:c0:a7:50:52:1f:
55:df:8c:92:d0:96:70:48:16:24:4c:d4:77:46:35:99:0c:24:
34:5f:86:a5:de:44:ea:3f:9b:20:2a:63:67:1d:f5:07:37:2d:
84:6e:6c:53:dc:78:35:e4:1c:15:f4:45:10:44:c3:44:35:a3:
da:15:24:4a:9f:bd:c7:2f:39:22:a4:f0:17:90:48:c5:e2:63:
11:76:b7:c9:c1:38:84:90:c0:07:28:60:51:b7:0c:91:ce:78:
f4:5a:fe:88:9c:54:cd:59:83:6f:3c:c8:8b:84:d6:59:25:87:
f3:57:4d:fc:97:50:07:ce:8b:72:9e:e3:bb:09:50:fb:be:95:
2d:fc:29:ae:3c:dc:43:3b:91:54:7b:f6:30:95:a0:26:84:ef:
1e:3d:90:61:d8:a1:45:2c:1c:e1:6c:d6:71:e2:ad:5f:40:0a:
13:83:00:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:20 2024 by rpki-client on console-fra.rpki-client.org