Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/SOgMlgqk9CCL-Gn-EAWVT5Sjs_k.roa
File: SOgMlgqk9CCL-Gn-EAWVT5Sjs_k.roa (raw, json)
Hash identifier: 1Jq4xnY43CTQr0SbdY01NMQWs56fYE0xZFcao3QLueI=
Subject key identifier: 48:E8:0C:96:0A:A4:F4:20:8B:F8:69:FE:10:05:95:4F:94:A3:B3:F9
Certificate issuer: /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Certificate serial: 0185724C814340D7FF73307D7EFABA9D8267
Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/SOgMlgqk9CCL-Gn-EAWVT5Sjs_k.roa
Signing time: Mon 02 Jan 2023 11:44:54 +0000
ROA not before: Mon 02 Jan 2023 11:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50499
IP address blocks: 193.106.248.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Feb 2023 13:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:81:43:40:d7:ff:73:30:7d:7e:fa:ba:9d:82:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Validity
Not Before: Jan 2 11:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48e80c960aa4f4208bf869fe1005954f94a3b3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5a:7c:3e:4c:4a:13:d3:88:56:e3:4c:f5:10:
c1:db:8c:49:80:41:b4:49:d1:6b:ff:77:7e:bb:d5:
23:a8:f6:8a:b0:39:67:64:26:26:f1:4c:bd:04:f8:
4a:92:08:16:99:fb:88:e8:ce:d5:b6:e3:5b:5f:66:
56:e6:e1:e5:0d:88:bb:5e:5d:1b:b5:ef:65:99:51:
64:aa:3a:bb:5b:f9:b0:75:5e:56:d3:af:4a:de:ef:
98:4f:2a:1a:9b:8c:7d:1b:6f:ca:40:31:6b:a6:5c:
9f:54:7c:f5:e0:6a:96:35:2f:15:e8:81:2e:b0:94:
42:6e:5a:64:c6:cd:34:20:d3:a9:1e:27:ff:b2:fd:
14:c4:d6:2b:10:38:c1:bb:36:22:b6:72:8c:b4:c2:
ef:91:5f:6d:ad:70:8b:40:6d:43:6d:04:21:b0:27:
46:f4:17:1c:60:28:ac:a3:a8:25:b6:a3:3c:ec:f6:
6a:66:af:f8:b8:3b:18:b1:e2:2a:89:89:19:e8:3b:
24:fb:86:d5:4c:fa:ba:20:59:36:c8:97:aa:4e:eb:
44:84:08:f0:89:b3:2c:ce:dd:55:da:cd:21:e9:3c:
b0:5b:75:85:51:cd:c5:48:80:8b:6b:d8:da:b9:6a:
cc:02:18:2f:92:ea:8c:4c:eb:cb:41:22:73:3c:2f:
74:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E8:0C:96:0A:A4:F4:20:8B:F8:69:FE:10:05:95:4F:94:A3:B3:F9
X509v3 Authority Key Identifier:
keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/SOgMlgqk9CCL-Gn-EAWVT5Sjs_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.248.0/22
Signature Algorithm: sha256WithRSAEncryption
75:00:9c:21:f7:b7:cd:84:36:93:b1:da:60:eb:b2:d0:37:b0:
c4:dc:b3:7d:c7:76:00:b7:1d:63:33:8e:c0:51:96:47:5b:48:
66:1d:be:13:de:69:08:2a:f1:e7:3c:c1:0f:dd:cc:d3:57:c2:
af:40:72:70:04:84:8a:6d:f6:3c:2e:17:44:7b:5c:bc:37:5a:
ec:d8:71:13:40:9a:9b:df:e7:44:3f:2c:77:b4:e0:8e:f5:94:
1b:ad:78:4f:6e:b4:30:59:9c:3e:1b:00:96:68:fd:0b:48:7d:
42:f9:65:5e:11:66:9f:cc:77:9b:98:c4:ee:a5:79:b9:28:a4:
59:22:72:0a:ad:f6:53:f0:5f:e0:4f:66:34:95:f3:d8:03:c3:
4f:15:4c:14:d5:25:d9:31:6a:58:5c:ac:e9:80:f8:76:85:c4:
32:25:1a:9d:66:b1:eb:d3:33:0d:1b:74:7e:36:9d:24:78:e5:
90:d0:6d:f8:12:c1:ee:ff:d3:15:eb:f6:fd:fa:99:2b:5b:2c:
2f:3f:7d:de:a9:72:24:6b:5c:4a:57:23:21:6a:50:67:10:b6:
b3:74:87:ed:32:a0:2c:43:ed:f8:0c:eb:32:52:8e:2e:24:42:
06:d1:a6:43:0b:15:f9:f9:63:92:e0:33:e8:2a:0f:3e:1c:d6:
64:1c:24:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:59 2024 by rpki-client on console-ams.rpki-client.org