Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/23w6SYj358gokw1YSstIalciQsg.roa
File: 23w6SYj358gokw1YSstIalciQsg.roa (raw, json)
Hash identifier: Z3X7+GY9p3KRdOF2ocVSC0jOXX/RaqOH2ook2sbScmA=
Subject key identifier: DB:7C:3A:49:88:F7:E7:C8:28:93:0D:58:4A:CB:48:6A:57:22:42:C8
Certificate issuer: /CN=3f56231e7ef53181b630260f5739a939980bce0f
Certificate serial: 01904962DDB94BE0B2726BC5D601AD160ACE
Authority key identifier: 3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/23w6SYj358gokw1YSstIalciQsg.roa
Signing time: Mon 24 Jun 2024 08:35:34 +0000
ROA not before: Mon 24 Jun 2024 08:35:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198154
IP address blocks: 193.106.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jun 2024 07:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:62:dd:b9:4b:e0:b2:72:6b:c5:d6:01:ad:16:0a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f56231e7ef53181b630260f5739a939980bce0f
Validity
Not Before: Jun 24 08:35:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db7c3a4988f7e7c828930d584acb486a572242c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:f2:e2:d3:c6:c3:3b:0a:6b:7b:81:70:87:
61:77:3c:46:24:c2:9a:03:56:01:1c:1a:fe:87:7c:
00:42:4d:bc:fe:88:9b:97:7d:de:c6:1e:ec:5d:f2:
61:d3:9d:32:c5:24:35:07:9e:4c:52:48:f4:e1:ef:
5e:8b:13:13:1d:e5:42:bf:46:6c:3e:8b:9b:bf:24:
8a:85:75:b3:f3:ab:e6:f7:82:3c:c8:e0:cf:81:f1:
41:65:6a:90:7b:d4:b3:fd:3e:48:f2:ad:17:d8:ca:
1b:30:27:f9:3a:b9:23:ce:c9:7d:6f:40:80:75:02:
c0:ef:1e:cf:ce:4e:3c:69:bb:5a:f9:4d:b5:22:fd:
0f:f6:d4:dc:55:f9:29:f3:e7:af:da:b8:f8:c5:7f:
13:63:7e:a2:30:49:91:b7:f0:b3:e4:64:d3:99:3f:
73:d1:bb:78:69:49:7f:48:45:02:96:24:5f:3b:45:
4a:9e:1f:17:e8:98:2b:ba:4e:d4:fc:12:4b:eb:27:
ef:bc:8a:ae:1d:b9:18:fa:41:53:33:8c:15:e2:86:
7e:d2:e0:e1:ce:ce:fa:b3:02:76:8c:cf:9d:6e:25:
08:bc:76:c1:be:88:b1:95:c9:c8:27:cf:5c:ce:04:
9f:e0:85:b4:db:d9:e5:d5:57:04:56:a5:f5:0f:4f:
13:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7C:3A:49:88:F7:E7:C8:28:93:0D:58:4A:CB:48:6A:57:22:42:C8
X509v3 Authority Key Identifier:
keyid:3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/23w6SYj358gokw1YSstIalciQsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.191.0/24
Signature Algorithm: sha256WithRSAEncryption
80:a0:7f:a2:c4:44:48:d1:44:f8:44:b7:40:0f:70:21:1c:77:
84:ce:86:07:aa:dc:f8:65:d2:3a:fc:96:a2:7a:87:44:13:9c:
3f:53:9a:70:94:6a:fb:34:7a:16:8e:f2:6e:ac:e3:7a:cd:90:
3a:8f:e5:43:c6:42:fe:1d:03:5c:66:f6:01:31:ae:bf:09:54:
5d:93:56:37:77:8a:da:0c:3f:3b:f9:26:3d:b9:6d:72:ed:33:
db:51:82:dc:6b:b1:1c:6f:d4:20:70:65:ea:3c:27:76:21:bd:
f1:20:78:88:97:a0:a3:e4:18:76:f7:d9:39:fc:e6:68:3e:68:
ba:40:d1:06:b2:1c:22:13:04:b6:da:86:98:ce:55:68:a9:68:
84:94:84:1b:85:2c:1c:ce:15:35:9d:07:d5:cf:98:c0:bd:91:
a9:06:d4:c3:3c:9a:f1:6e:c6:86:21:dc:c4:af:fb:a1:92:c2:
c8:cf:ec:f1:7c:cd:07:c6:52:20:59:6b:c1:24:b4:6f:ed:c0:
76:c3:34:da:13:b5:f6:41:a3:2f:0d:c2:e2:eb:27:9d:f0:b9:
1b:20:8e:37:d8:88:4c:50:e5:b1:fb:74:51:d9:e0:fc:82:36:
77:03:33:19:fd:b9:6e:33:5a:2a:04:2f:7f:88:3b:34:44:f7:
28:b0:e0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 11:54:50 2024 by rpki-client on console-fra.rpki-client.org