Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/fQrSq25hUK3RxdagXRMjT7aRCIk.roa
File: fQrSq25hUK3RxdagXRMjT7aRCIk.roa (raw, json)
Hash identifier: 5d5pAMoQBmy0hV3HBeisJTVfgS9DdKWoLVlsu29xOIM=
Subject key identifier: 7D:0A:D2:AB:6E:61:50:AD:D1:C5:D6:A0:5D:13:23:4F:B6:91:08:89
Certificate issuer: /CN=0e282a15c1a5d154bbda872b357607a91f950aa5
Certificate serial: 0189A0DB348719D1DEC6FCB2467CD4174CF1
Authority key identifier: 0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/fQrSq25hUK3RxdagXRMjT7aRCIk.roa
Signing time: Sat 29 Jul 2023 08:54:27 +0000
ROA not before: Sat 29 Jul 2023 08:54:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60860
IP address blocks: 193.107.82.0/24 maxlen: 24
193.107.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a0:db:34:87:19:d1:de:c6:fc:b2:46:7c:d4:17:4c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e282a15c1a5d154bbda872b357607a91f950aa5
Validity
Not Before: Jul 29 08:54:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d0ad2ab6e6150add1c5d6a05d13234fb6910889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3c:1f:20:03:28:4d:ac:39:50:ca:51:ac:26:
1d:5e:de:08:28:2b:5f:0b:37:84:26:79:50:44:0a:
d7:56:9c:7e:64:07:ef:8f:85:f8:f5:b6:e6:f5:00:
fa:c5:f1:0e:43:1b:34:eb:2f:cc:ad:f3:5b:25:e6:
68:b1:50:bc:8f:10:19:cd:e0:1c:cd:d6:5c:87:4c:
39:d6:71:b6:81:79:aa:11:92:c5:46:78:09:fb:3a:
64:96:4d:5d:91:5f:c3:cd:d7:8f:13:c9:23:4b:60:
06:46:cb:00:07:01:29:12:1b:62:f8:a6:34:7b:62:
03:8f:d2:0d:50:6e:66:69:7f:9c:d6:cd:9e:8e:31:
74:a1:c6:a5:2d:0a:93:2d:c7:60:8d:3b:f0:fc:cd:
54:e2:97:ff:04:98:20:07:c2:2a:40:04:e1:16:4c:
f3:3a:df:f0:74:c4:a1:1d:ab:97:d8:fb:f0:76:d2:
cc:6c:c9:a4:fd:75:97:9e:00:c1:29:47:a5:f0:91:
19:fe:ad:50:b4:26:7c:b9:b6:a4:9f:11:1b:2e:d3:
ec:5f:66:7f:e2:09:e6:25:e6:f9:19:ad:83:c2:bb:
fb:0d:0b:6d:9b:e3:7a:4c:83:21:26:1d:0d:48:6f:
e3:e8:f5:32:3a:02:b0:96:1b:98:dd:9a:c6:af:46:
e9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0A:D2:AB:6E:61:50:AD:D1:C5:D6:A0:5D:13:23:4F:B6:91:08:89
X509v3 Authority Key Identifier:
keyid:0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/fQrSq25hUK3RxdagXRMjT7aRCIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.82.0/23
Signature Algorithm: sha256WithRSAEncryption
07:63:d3:38:9c:4d:04:ef:4a:2e:03:0b:dc:2f:c4:e4:f6:77:
6d:99:2c:09:c4:14:49:14:78:4e:ba:65:3a:eb:68:1c:79:b6:
0d:87:3b:99:0f:93:83:58:df:83:15:56:d3:4b:3c:53:4c:81:
84:5e:64:9e:b6:ce:82:da:19:fa:38:c2:32:fb:99:01:29:fb:
27:df:fe:4d:38:e3:c3:39:2f:5c:02:46:e3:9a:ad:16:fb:9e:
9e:2c:38:1a:83:08:ce:e1:38:f2:0e:2d:f9:55:8f:ec:4b:d8:
af:41:d8:e5:02:82:45:0e:0f:61:ca:c6:e8:4c:18:8b:7d:b2:
31:90:e9:fc:e8:36:22:4d:a4:f8:4d:e6:e0:b7:bd:de:c6:ee:
7e:05:07:77:6e:76:e2:81:92:67:fa:81:98:9f:94:b5:d4:eb:
8a:8e:88:85:5f:80:a6:77:aa:aa:17:d3:a2:f7:ec:3a:72:24:
45:5a:c4:3a:30:24:01:f7:4d:28:56:69:37:f9:8f:2a:07:9b:
39:b2:8b:55:7a:58:06:45:54:12:51:8b:a2:f6:f4:98:be:6e:
6f:2e:02:2f:6a:64:65:0c:1e:c1:5b:6b:0f:e6:36:a9:3e:c3:
6d:bd:a6:c5:a2:6e:87:e6:ad:93:a6:8f:fd:5e:ba:20:8f:51:
7d:ca:6b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:40 2024 by rpki-client on console-fra.rpki-client.org