Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/jO_A6zFgQn1IMHiGBfIhWQd0qQo.roa
File: jO_A6zFgQn1IMHiGBfIhWQd0qQo.roa (raw, json)
Hash identifier: C6Ft119i9gZDVrGHJWi+ZfzUAVYg2BBRfHhv7R6qHSQ=
Subject key identifier: 8C:EF:C0:EB:31:60:42:7D:48:30:78:86:05:F2:21:59:07:74:A9:0A
Certificate issuer: /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Certificate serial: 0186124B99E25577B3D553FBA7FA02DCD9F9
Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/jO_A6zFgQn1IMHiGBfIhWQd0qQo.roa
Signing time: Thu 02 Feb 2023 13:23:09 +0000
ROA not before: Thu 02 Feb 2023 13:23:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50499
IP address blocks: 193.106.250.0/24 maxlen: 24
193.106.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Mar 2023 14:23:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:12:4b:99:e2:55:77:b3:d5:53:fb:a7:fa:02:dc:d9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Validity
Not Before: Feb 2 13:23:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cefc0eb3160427d4830788605f221590774a90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:97:da:b9:f7:6b:e0:d6:b5:8f:5a:42:13:a5:
fe:48:82:79:88:26:56:3a:c7:d6:2e:64:d0:cd:d2:
9c:0a:ec:9b:ef:12:9f:05:29:12:01:1f:3f:a2:f2:
13:d0:b9:6e:96:0e:41:af:1e:c7:bc:21:32:46:59:
16:e8:79:40:a7:15:c8:c9:2d:0a:37:e7:14:cb:f5:
6d:56:4f:3d:44:f9:4b:67:21:a4:8c:21:48:aa:f0:
be:1e:6b:ad:5e:e0:16:3b:78:f2:46:cd:86:a9:09:
2b:c4:37:29:90:e3:74:14:23:3a:c7:ce:07:45:20:
c7:11:8f:d1:5c:a6:3c:0e:4d:d7:51:34:37:95:24:
63:23:ff:7d:9a:71:d4:aa:68:40:25:7d:6b:95:17:
e5:25:3f:2f:ad:d9:09:d2:e1:73:b8:9f:c2:5a:90:
23:85:05:e5:6e:3e:01:d6:73:17:de:41:9c:97:02:
8d:1c:23:a0:40:c6:a1:62:f1:b9:fd:23:4b:70:44:
39:71:38:35:62:e9:c0:8f:d8:2a:e0:a5:fa:a7:28:
aa:ee:6f:f6:0b:94:b3:c3:99:78:0d:18:5b:6a:8c:
77:3c:1e:19:e7:b4:e8:0c:b9:7c:45:18:42:e7:9b:
0b:dc:2a:21:a6:dc:e4:cd:93:d9:41:2c:e2:30:33:
0b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EF:C0:EB:31:60:42:7D:48:30:78:86:05:F2:21:59:07:74:A9:0A
X509v3 Authority Key Identifier:
keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/jO_A6zFgQn1IMHiGBfIhWQd0qQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.248.0/24
193.106.250.0/24
Signature Algorithm: sha256WithRSAEncryption
61:63:29:1b:e1:04:81:16:86:98:d3:66:cc:87:5d:46:6c:ae:
75:e8:1c:35:ba:0d:83:ee:ca:9f:92:24:fb:11:59:69:40:90:
1f:2e:89:0c:11:96:41:42:aa:e1:c6:32:39:ba:7d:89:ea:72:
51:ba:a2:a0:fd:de:e9:0e:0c:52:22:4e:64:1e:13:ee:7d:82:
de:5e:20:eb:12:d4:f2:9e:21:d6:80:45:cd:0c:e9:9c:34:08:
16:d2:14:49:ef:d2:bc:4d:ad:fe:b7:09:ef:c9:0f:e4:a5:eb:
c2:d8:2c:66:6d:61:06:c7:5b:83:6f:68:8c:1f:c2:2b:41:61:
c4:d9:64:c0:4b:60:d0:08:be:49:c2:d5:9b:51:f9:af:61:a3:
cd:1d:f8:88:10:4c:33:df:2d:14:a7:c4:c0:1f:94:58:c4:bf:
b8:71:f6:65:2d:ff:66:76:54:2e:ca:a1:f9:14:18:1e:83:b1:
70:b5:cb:90:ef:cf:e4:0a:d8:dc:7f:94:29:01:22:dc:ff:52:
13:64:80:9c:ac:ce:04:7a:d0:ee:5b:d4:22:c3:04:00:18:15:
71:4a:0a:b7:2e:02:79:d1:8e:cf:2b:b2:95:71:05:37:57:68:
f0:06:e4:a7:ec:a5:a5:67:a6:0d:b9:e1:23:27:0c:ec:e4:b0:
c0:e2:84:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:59 2024 by rpki-client on console-ams.rpki-client.org