Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/ur1V09ljgHmqsdRVQPeIV4H98qY.roa
File: ur1V09ljgHmqsdRVQPeIV4H98qY.roa (raw, json)
Hash identifier: U8ExWPB8qLcKFkdjCBpBVBYCx1qAb0HvdJ/IOVGzO0A=
Subject key identifier: BA:BD:55:D3:D9:63:80:79:AA:B1:D4:55:40:F7:88:57:81:FD:F2:A6
Certificate issuer: /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Certificate serial: 018755EA2B152BBC5B7277E8922504FDC1D3
Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/ur1V09ljgHmqsdRVQPeIV4H98qY.roa
Signing time: Thu 06 Apr 2023 09:33:42 +0000
ROA not before: Thu 06 Apr 2023 09:33:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 193.106.251.0/24 maxlen: 24
193.106.250.0/24 maxlen: 24
193.106.249.0/24 maxlen: 24
193.106.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:55:ea:2b:15:2b:bc:5b:72:77:e8:92:25:04:fd:c1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Validity
Not Before: Apr 6 09:33:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=babd55d3d9638079aab1d45540f7885781fdf2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:88:e5:f1:2f:56:57:82:92:8d:a9:df:94:
3d:5a:af:e1:c4:dd:50:f5:29:93:82:5b:fa:2b:0a:
16:2e:32:36:e1:b4:ca:35:2f:05:74:94:dc:ca:e5:
9b:24:9f:64:1a:5f:eb:12:b4:91:cc:0c:f4:d8:b0:
ff:ab:2f:59:33:9e:b2:7c:89:89:9f:26:ce:7f:86:
26:21:ba:60:5f:e1:5a:9d:40:ab:71:3c:4e:3d:6a:
4a:af:25:b0:58:e7:df:79:70:ea:5d:25:c1:3b:15:
d7:48:49:99:47:1d:a5:e5:de:d7:1e:fd:2a:7b:1a:
78:9a:33:13:42:e9:b3:fb:2b:03:c1:e5:92:31:bc:
2d:db:9d:91:fb:85:47:69:eb:8b:5d:c7:da:14:18:
fd:ce:86:4b:bf:08:bb:b7:5e:8e:c0:2a:ba:69:ac:
37:3b:b1:91:f6:22:1d:0b:cc:bd:24:27:61:f3:d9:
d0:a4:95:66:fa:1a:09:9c:73:45:cc:61:ac:39:7f:
78:ef:35:46:f9:00:7f:ab:94:43:e9:37:79:25:ff:
ab:0d:42:cc:e7:87:b0:11:8d:84:36:44:94:02:6a:
ac:07:eb:00:55:00:70:a5:af:11:f5:be:d5:ab:94:
c6:ba:ed:c9:ae:8b:fd:39:07:5b:be:bb:b3:1d:e5:
08:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BD:55:D3:D9:63:80:79:AA:B1:D4:55:40:F7:88:57:81:FD:F2:A6
X509v3 Authority Key Identifier:
keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/ur1V09ljgHmqsdRVQPeIV4H98qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.248.0/22
Signature Algorithm: sha256WithRSAEncryption
53:f9:dd:1b:03:7d:9a:af:8e:7e:b9:ba:e7:e2:f9:72:a1:62:
e0:a1:2c:1d:6b:49:4a:c8:60:ea:57:12:25:fa:8d:e4:b7:7d:
3d:05:af:5c:c8:4a:62:3c:44:6d:ce:3b:5a:a1:15:3b:65:6e:
62:5d:ae:6c:0d:ae:db:ed:1c:4d:ca:37:ff:b8:af:41:9b:ee:
47:18:f8:b6:c8:39:02:4b:fd:f1:99:cf:8c:83:f7:2b:a8:d5:
49:d7:b0:66:43:df:6a:cd:cb:fc:cb:b1:63:14:4a:2d:25:22:
f6:f5:8b:62:0a:cf:55:3c:79:7a:9f:b0:d4:13:c6:62:75:68:
77:81:cf:e8:ec:f3:f2:bb:4e:c3:7e:bd:79:14:15:54:81:e6:
46:32:b2:39:03:d3:85:45:13:41:1a:62:c1:61:38:30:8b:35:
de:21:dd:b8:b5:b9:7d:f4:c5:0c:39:e2:9f:b4:99:d1:d7:f5:
14:50:be:4d:41:6c:0e:aa:69:9e:e4:63:1e:49:01:75:7f:3a:
76:06:0d:ea:2e:a8:28:3a:8f:fa:8d:e2:38:ee:76:e1:f6:48:
13:2b:a9:6d:95:bf:32:76:ab:b9:0c:c5:6b:57:a5:a0:41:88:
6b:ea:89:cb:55:7a:0b:02:8f:01:c8:04:28:b4:0e:85:f2:f4:
46:c4:7d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:59 2024 by rpki-client on console-ams.rpki-client.org