Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/BWr7mD7qmKPh8QIfPk4bh72Tqos.roa
File: BWr7mD7qmKPh8QIfPk4bh72Tqos.roa (raw, json)
Hash identifier: OYUDN6SsnnVsZ7/Jv9dtTxONXbxEVd3+hXBfVSE5OKA=
Subject key identifier: 05:6A:FB:98:3E:EA:98:A3:E1:F1:02:1F:3E:4E:1B:87:BD:93:AA:8B
Certificate issuer: /CN=cecc9f2b825fd967e978c4209279595fcf332c5a
Certificate serial: 01857169D65FA466A5DFD2B316B2D99FE7A7
Authority key identifier: CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/BWr7mD7qmKPh8QIfPk4bh72Tqos.roa
Signing time: Mon 02 Jan 2023 07:37:19 +0000
ROA not before: Mon 02 Jan 2023 07:37:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12762
IP address blocks: 193.186.88.0/21 maxlen: 21
193.186.96.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:d6:5f:a4:66:a5:df:d2:b3:16:b2:d9:9f:e7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecc9f2b825fd967e978c4209279595fcf332c5a
Validity
Not Before: Jan 2 07:37:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=056afb983eea98a3e1f1021f3e4e1b87bd93aa8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:71:ea:7e:77:16:ae:f4:1b:6a:58:75:ee:21:
dd:5e:c4:86:53:eb:49:ce:ce:ea:08:2c:15:54:d9:
93:2c:8c:4d:b8:15:8d:d7:16:a9:e9:20:4e:88:b1:
6d:a4:23:88:e3:33:80:08:5f:02:2d:72:80:08:7e:
27:58:3a:b4:74:87:8d:09:2a:ab:05:a5:26:f7:2d:
8a:8d:c0:50:70:49:6a:3a:75:7c:87:cc:5f:c9:8e:
51:a3:ca:42:98:85:86:38:38:6f:d2:6c:63:23:11:
3f:4c:28:fe:a3:e3:1c:0c:1f:f6:bd:8f:a3:50:20:
b5:ea:ed:e7:c0:f9:c7:3a:ba:86:a1:aa:b7:ba:e1:
d8:5f:0d:cb:d9:16:eb:3e:fa:1c:af:a7:8b:c4:49:
09:eb:d7:89:a7:a7:6f:2a:fb:1d:e9:fc:1e:4e:45:
ea:db:9c:f6:0e:94:f4:71:d1:61:1b:6c:e1:eb:cf:
be:a2:99:48:6c:09:c3:15:35:6c:e9:0e:e5:2a:ec:
9b:af:8c:4f:59:f3:10:b7:31:dc:8e:81:56:d0:48:
39:2c:60:1e:ec:84:b1:83:c7:32:36:86:22:52:0d:
e1:9d:aa:d0:c1:47:a1:c7:b5:a8:01:c0:49:a6:f7:
af:42:15:31:ee:14:db:8e:d7:21:0c:f5:5f:28:90:
17:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6A:FB:98:3E:EA:98:A3:E1:F1:02:1F:3E:4E:1B:87:BD:93:AA:8B
X509v3 Authority Key Identifier:
keyid:CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/BWr7mD7qmKPh8QIfPk4bh72Tqos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.88.0-193.186.103.255
Signature Algorithm: sha256WithRSAEncryption
1d:f7:db:c3:43:a7:35:e6:5f:69:45:86:a5:36:d8:c1:33:11:
f8:63:0f:12:0f:ae:6b:f5:f4:d7:30:60:64:79:3f:60:17:b9:
19:51:4a:9a:8c:f0:99:9f:a3:c0:67:33:e0:99:37:7b:80:48:
de:8a:65:11:17:bd:9a:6e:93:91:2c:4c:7a:73:7c:5e:01:69:
c1:aa:9a:ec:71:ea:07:7e:f4:d6:c3:45:b1:1f:fe:94:66:11:
11:5e:d5:f7:6b:3c:f5:d7:0f:66:ee:2c:16:e6:f9:31:72:61:
b6:64:13:c2:bb:11:b1:50:36:b5:ef:fa:15:83:27:ea:35:91:
5c:2d:ba:56:40:b3:01:6e:8c:b3:01:3d:71:ef:71:b7:52:f1:
22:c2:19:ea:22:4c:4f:fe:33:89:0c:69:b9:3f:1d:54:c5:01:
cb:1a:32:23:45:db:68:99:06:26:ed:e4:0c:cd:17:a2:2b:be:
ad:d4:2f:91:f1:aa:98:4e:7e:cd:42:79:ce:81:32:68:fa:6f:
81:d1:c1:e2:4d:29:68:64:7c:d4:01:8a:a0:2a:70:b6:de:62:
12:11:6a:ba:88:38:13:60:59:24:ca:d0:96:04:4e:18:b1:9d:
67:0c:8a:ec:54:0c:b5:75:a2:8a:18:c9:d2:a2:ad:da:33:c9:
f1:f5:6b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:01 2024 by rpki-client on console-ams.rpki-client.org