Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/vYBv245IuNypMBxN7_NZP1-mj9U.roa
File: vYBv245IuNypMBxN7_NZP1-mj9U.roa (raw, json)
Hash identifier: 2/cUBport0dTdZJ/hXlYiOT82t6jZq41/iqIQaN/BMw=
Subject key identifier: BD:80:6F:DB:8E:48:B8:DC:A9:30:1C:4D:EF:F3:59:3F:5F:A6:8F:D5
Certificate issuer: /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Certificate serial: 0185724C81D533169806037301CC34BE5EFD
Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/vYBv245IuNypMBxN7_NZP1-mj9U.roa
Signing time: Mon 02 Jan 2023 11:44:54 +0000
ROA not before: Mon 02 Jan 2023 11:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61003
IP address blocks: 193.106.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Feb 2023 13:13:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:81:d5:33:16:98:06:03:73:01:cc:34:be:5e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Validity
Not Before: Jan 2 11:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd806fdb8e48b8dca9301c4deff3593f5fa68fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1e:40:ee:6b:20:87:48:65:63:c6:f7:53:5a:
41:55:c4:b8:38:30:cb:da:86:42:74:fc:5d:22:86:
42:0a:0d:02:6e:f7:42:9a:77:1f:d1:31:1d:af:41:
73:c6:15:4d:e1:71:8c:76:0a:87:b1:e6:58:3f:df:
d8:c8:9f:cb:bb:1f:f5:c8:c1:33:85:09:48:ba:d0:
a7:53:36:63:07:dd:de:24:38:42:a2:23:4e:a8:d7:
bc:57:28:61:05:45:8a:40:a4:d7:b6:01:57:3e:b2:
7c:43:ff:6f:9e:9f:5a:e7:77:d9:0f:3e:b5:61:62:
2e:cb:d7:1b:9d:32:b1:44:66:00:65:3d:98:78:02:
5b:fa:9a:29:c5:6a:bd:b5:c1:77:a8:3f:ee:05:d9:
dc:3d:05:0f:df:3c:31:71:2d:64:0e:1d:e4:b5:6a:
aa:10:ba:2d:98:b2:2b:73:d1:70:3c:21:e3:43:17:
7f:30:df:81:07:91:74:f7:3e:68:7f:86:5f:47:52:
50:40:e2:5c:c4:7d:e5:54:d0:97:59:00:be:02:0b:
24:2f:9a:8d:aa:c7:b6:8c:5b:5c:04:88:e9:d2:75:
7b:35:71:07:6a:0b:cf:80:b8:68:c3:90:e3:be:60:
78:82:98:50:04:ce:5f:a0:db:96:ab:4c:3c:e0:55:
08:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:80:6F:DB:8E:48:B8:DC:A9:30:1C:4D:EF:F3:59:3F:5F:A6:8F:D5
X509v3 Authority Key Identifier:
keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/vYBv245IuNypMBxN7_NZP1-mj9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.249.0/24
Signature Algorithm: sha256WithRSAEncryption
95:31:7d:0b:53:8e:86:5b:f8:8e:ff:29:9e:76:d3:7c:3d:cb:
a4:eb:51:78:fa:ee:7a:07:83:12:4b:c1:a3:48:01:5a:52:a0:
7f:78:8b:86:a7:86:8c:8a:3d:61:c1:52:76:c8:78:c8:34:7b:
38:b2:ac:dc:cd:f9:61:27:ca:c7:af:f9:cb:d7:d7:9b:7b:a4:
15:0a:96:c9:c3:cf:bf:d2:d9:ed:6d:30:ad:92:3d:60:b4:b0:
ae:c3:19:d3:71:b5:1c:e4:9c:8e:aa:03:c1:4b:09:0c:23:1c:
8a:c7:1e:79:9a:a3:dd:12:6b:78:02:7d:98:fe:f2:c8:31:d4:
54:fa:ef:50:01:1f:2c:ec:00:6a:c8:d6:18:78:ba:52:c8:21:
8f:16:10:11:b6:7b:94:d9:d4:8e:f2:c6:8f:c2:42:55:63:d2:
bd:28:3e:7e:c6:0e:f3:a9:05:36:23:fc:b3:60:fb:2e:69:d8:
a0:5f:62:80:0d:a9:46:28:f3:3d:87:8e:29:85:5b:a7:75:6e:
d0:42:29:ee:47:3d:7f:f2:13:33:41:b8:80:ac:1f:38:02:7f:
ec:35:c3:09:08:b5:bd:67:77:ba:2e:05:84:74:53:d7:c3:c6:
c1:c7:c8:14:07:b7:19:2c:9e:30:b3:5c:ad:e0:a4:1d:3c:5b:
65:0c:c9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:20 2024 by rpki-client on console-fra.rpki-client.org