Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/_Fb954UXSsPFRRmWGnQeO3qbp00.roa
File: _Fb954UXSsPFRRmWGnQeO3qbp00.roa (raw, json)
Hash identifier: M4/IxW6syOX4RuifgZ/m2wWnuJyI2EEUTHFOiwEyAAM=
Subject key identifier: FC:56:FD:E7:85:17:4A:C3:C5:45:19:96:1A:74:1E:3B:7A:9B:A7:4D
Certificate issuer: /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Certificate serial: 0186124271B1602E04BB542D6C4569921A75
Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/_Fb954UXSsPFRRmWGnQeO3qbp00.roa
Signing time: Thu 02 Feb 2023 13:13:09 +0000
ROA not before: Thu 02 Feb 2023 13:13:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 193.106.251.0/24 maxlen: 24
193.106.250.0/24 maxlen: 24
193.106.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Apr 2023 09:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:12:42:71:b1:60:2e:04:bb:54:2d:6c:45:69:92:1a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Validity
Not Before: Feb 2 13:13:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc56fde785174ac3c54519961a741e3b7a9ba74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b1:2f:83:f2:f0:a7:49:96:54:84:17:35:ca:
3d:2b:8d:de:d7:55:3e:4e:cb:0a:20:a1:05:de:20:
4e:30:14:1e:14:97:74:fd:54:17:5b:d8:88:90:dd:
1c:95:ba:21:7b:65:82:9c:aa:a5:3d:9e:84:7f:7a:
64:df:be:5e:b4:06:d7:6a:c3:97:59:57:87:a3:be:
f9:c7:23:5d:3e:8d:1b:3e:83:06:30:24:9a:60:8b:
da:ba:98:c2:ed:1b:5c:86:b3:e6:26:9e:98:79:61:
32:9a:35:df:13:8c:e2:8e:d2:5e:a3:5f:24:87:e3:
e1:71:6f:1f:f5:f5:47:bc:9a:14:91:d5:0c:f9:24:
c4:2c:ad:96:e5:3e:eb:c6:50:1b:8c:ca:87:20:8b:
3d:52:f5:7f:a2:51:dd:86:e4:95:ec:c5:53:db:e8:
2a:d8:54:95:06:43:d4:9b:2a:85:20:03:16:63:b6:
18:1e:e7:94:68:19:e8:38:6a:72:74:f3:e2:1d:e4:
37:b7:dc:6c:48:34:12:a2:76:fd:6a:50:36:04:05:
65:a0:8a:24:4d:23:03:2c:6a:76:3c:cc:6c:62:f2:
9e:55:4e:0e:43:31:cd:d8:27:55:95:ac:7d:c5:71:
15:0a:a0:de:ae:7a:e7:ca:fc:3d:6d:ca:80:cc:13:
ea:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:56:FD:E7:85:17:4A:C3:C5:45:19:96:1A:74:1E:3B:7A:9B:A7:4D
X509v3 Authority Key Identifier:
keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/_Fb954UXSsPFRRmWGnQeO3qbp00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.249.0-193.106.251.255
Signature Algorithm: sha256WithRSAEncryption
5a:b1:e4:f1:74:6d:b3:3a:25:64:9a:f2:1e:1d:da:7a:ae:a5:
66:3f:2c:f5:15:cb:74:44:d7:c7:74:4f:3b:20:81:ee:08:94:
f7:66:2a:5b:75:9c:4d:df:3f:c2:12:60:cf:8f:2b:72:54:ad:
3f:91:45:8c:a4:5f:e5:e7:de:ec:23:59:2f:59:55:1a:71:d1:
1f:eb:1b:78:09:0a:45:04:ad:5e:59:66:61:e0:a6:8e:1a:1d:
08:e8:57:57:e7:d9:53:81:4d:27:6e:95:47:f0:fc:0d:0d:33:
b8:99:03:13:69:3f:2f:09:5e:96:dc:58:3a:00:97:e8:a3:37:
59:bd:8c:88:f8:b1:35:64:8c:25:cc:09:cb:e3:13:f4:e1:91:
da:44:f7:75:da:c2:72:0a:cb:5b:bf:56:c8:df:c0:f2:93:ff:
0a:76:0a:65:6a:69:22:b9:8f:16:84:23:bc:e4:e6:ec:31:ad:
83:c0:32:86:b1:99:a9:46:f3:66:cf:e3:02:86:4d:70:ca:d2:
a6:b7:bd:d9:22:c9:1c:de:b2:15:e6:ce:77:7e:82:b6:1b:06:
5e:0d:cd:b8:fa:61:ed:54:0b:e3:d2:bf:c7:65:4c:78:2a:b9:
6c:0d:c1:e5:ea:d0:a5:bb:58:3f:7c:8e:4a:92:57:25:da:28:
07:eb:b3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:59 2024 by rpki-client on console-ams.rpki-client.org