Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/1-M09ByYrwJXMLryj4BFe3s-S2CM.roa
File: 1-M09ByYrwJXMLryj4BFe3s-S2CM.roa (raw, json)
Hash identifier: o5ENsQ6PgYuC9GZYgK8IIMwxi7etRGvWN+4zyxLKLsM=
Subject key identifier: F8:CD:3D:07:26:2B:C0:95:CC:2E:BC:A3:E0:11:5E:DE:CF:92:D8:23
Certificate issuer: /CN=6552d2cb5a9e8d5689fad67a9605149c6d5ef7ba
Certificate serial: 01856CCAFE8A82530CC04698213D96B5015F
Authority key identifier: 65:52:D2:CB:5A:9E:8D:56:89:FA:D6:7A:96:05:14:9C:6D:5E:F7:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/1-M09ByYrwJXMLryj4BFe3s-S2CM.roa
Signing time: Sun 01 Jan 2023 10:05:20 +0000
ROA not before: Sun 01 Jan 2023 10:05:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201291
IP address blocks: 194.93.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:fe:8a:82:53:0c:c0:46:98:21:3d:96:b5:01:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6552d2cb5a9e8d5689fad67a9605149c6d5ef7ba
Validity
Not Before: Jan 1 10:05:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8cd3d07262bc095cc2ebca3e0115edecf92d823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f6:03:67:3d:d1:83:b0:20:0e:74:f0:f6:e8:
80:ff:c6:f7:3d:f2:b8:4d:4c:21:a7:f8:8a:21:70:
a8:d1:fd:f2:e2:f8:9f:a1:94:21:16:bd:97:65:f4:
36:f5:da:af:5e:81:fc:dd:05:f0:94:11:d1:de:f2:
73:a5:18:d1:ae:6d:e3:76:b5:b3:b3:8c:88:4d:fa:
1e:5d:bc:c8:a4:e6:e5:2c:a1:6e:00:bc:d6:c4:01:
ba:87:c9:10:5c:09:04:22:7b:17:8c:b4:c0:42:4a:
93:58:db:8c:ce:72:8c:d3:6f:c8:e7:76:42:ee:59:
15:24:41:f8:6b:1e:6f:31:fa:ae:e0:d6:d7:93:bc:
17:4d:5c:47:e0:22:2b:ec:dd:a9:aa:28:86:2d:3a:
09:77:91:a6:0b:3e:df:ad:44:75:99:02:77:14:5b:
09:9f:d4:9f:5d:81:fd:e4:fb:ed:24:79:90:29:db:
47:d0:34:9c:f5:0b:cf:98:ef:a0:d6:ee:b6:66:60:
2b:76:08:21:ee:6c:1f:9a:b9:29:b8:54:23:4d:2b:
55:02:14:35:31:06:15:52:30:4b:ba:43:46:73:f7:
40:a5:4c:be:8b:17:f2:f3:b4:12:aa:5c:10:24:35:
51:e5:83:69:b8:06:60:7e:c1:87:04:b8:ce:47:e4:
9a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CD:3D:07:26:2B:C0:95:CC:2E:BC:A3:E0:11:5E:DE:CF:92:D8:23
X509v3 Authority Key Identifier:
keyid:65:52:D2:CB:5A:9E:8D:56:89:FA:D6:7A:96:05:14:9C:6D:5E:F7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/1-M09ByYrwJXMLryj4BFe3s-S2CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.97.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:65:be:b5:37:fb:21:bd:0f:62:86:9f:f4:7d:dd:c7:ad:2d:
34:07:64:cf:d7:29:d7:61:6d:bb:54:a7:37:4a:2b:de:75:01:
ff:b9:3c:78:83:94:d1:ff:ae:cc:aa:8c:2a:07:66:f3:d9:da:
a3:82:76:d4:07:27:f1:60:23:b7:03:67:7f:10:c1:5d:ba:87:
42:f0:03:08:8a:4f:90:dc:0d:73:3a:72:db:03:a1:61:ce:02:
22:2f:9c:57:96:ee:88:c7:4a:8b:0f:4a:20:2b:a1:c8:b5:ba:
cd:fe:97:5c:05:3e:ab:47:93:bd:c8:40:b4:36:9d:20:d3:f2:
f8:9b:84:87:14:00:5c:c3:68:66:17:f2:b8:2c:db:9d:12:38:
5d:e2:0b:04:45:3d:2b:3e:a2:ed:44:f1:f5:b0:fb:61:f3:ec:
07:50:8c:ea:c5:19:be:0f:2f:47:62:36:63:9e:02:c2:70:94:
a2:e7:f3:cc:40:94:3a:4a:23:e7:0c:e9:f6:bf:e2:da:ee:bc:
5a:1a:51:96:c9:bf:e2:99:b8:25:fb:57:7d:3f:a4:fe:00:12:
7b:c4:88:4d:e3:42:a5:08:70:47:9e:29:31:27:76:24:e0:ba:
a4:78:bb:cf:40:2a:a0:dd:e7:48:a2:48:9c:b6:cb:46:94:40:
76:0b:c0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:41 2024 by rpki-client on console-fra.rpki-client.org