Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/1-ELiC789umBN0PIahZK4RnCNVcs.roa
File: 1-ELiC789umBN0PIahZK4RnCNVcs.roa (raw, json)
Hash identifier: fw+cRdyagQWACHFv6rwYVeWbeEg6DxwiWv9WOWALfH4=
Subject key identifier: F8:42:E2:0B:BF:3D:BA:60:4D:D0:F2:1A:85:92:B8:46:70:8D:55:CB
Certificate issuer: /CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Certificate serial: 01856E4B015191EF04EE421EDC9F4A02496B
Authority key identifier: 5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/1-ELiC789umBN0PIahZK4RnCNVcs.roa
Signing time: Sun 01 Jan 2023 17:04:47 +0000
ROA not before: Sun 01 Jan 2023 17:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397651
IP address blocks: 193.46.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:4b:01:51:91:ef:04:ee:42:1e:dc:9f:4a:02:49:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Validity
Not Before: Jan 1 17:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f842e20bbf3dba604dd0f21a8592b846708d55cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1d:3a:95:a6:a1:d6:97:c1:90:7b:03:74:d3:
e7:39:13:b2:2e:d6:d5:f0:72:59:b4:57:f7:85:ca:
5a:8c:ac:c5:42:4f:89:96:e2:6d:8a:6a:a3:8c:9e:
67:bd:dc:57:c9:66:f8:a3:d0:ce:28:8a:33:b7:af:
00:b5:de:ed:8f:a9:4f:5a:37:2e:34:ff:7b:2f:c1:
ce:14:44:b8:20:c4:fb:49:60:5b:13:fd:f5:2c:db:
13:77:5c:d6:95:f5:de:4b:06:2a:fa:1d:3c:fb:49:
79:30:f9:98:ff:e9:4b:2a:42:60:d8:b5:e0:c5:6b:
0a:4a:f4:c7:9b:ee:9e:12:9a:c5:4c:e3:d0:e8:88:
d9:9d:6d:42:b7:ec:dd:dd:ab:3f:1d:5d:e2:2f:1d:
b3:85:1d:28:72:9c:a8:a6:c0:40:9c:95:f8:2a:52:
cc:3a:72:9e:47:0e:97:18:d1:b8:f2:d0:85:df:5f:
e6:02:d6:9a:75:8c:2b:20:53:fe:f6:0c:58:27:6e:
1e:78:92:e5:27:c6:a3:46:06:4c:1e:2a:26:2a:b7:
4f:ae:25:16:01:25:32:29:d9:b2:09:aa:d3:aa:28:
57:37:a0:cd:bd:00:cf:0a:57:e5:37:ff:9b:49:b7:
54:6c:8f:e8:50:cc:f8:f6:fc:af:28:36:a8:d9:ee:
8c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:42:E2:0B:BF:3D:BA:60:4D:D0:F2:1A:85:92:B8:46:70:8D:55:CB
X509v3 Authority Key Identifier:
keyid:5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/1-ELiC789umBN0PIahZK4RnCNVcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.67.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:40:f5:f9:e5:4e:e8:f9:ea:c5:3b:c0:5e:46:0e:47:8f:57:
ba:5c:73:66:13:74:21:61:ef:85:2b:b7:eb:97:cc:04:4a:57:
6d:c0:ea:7b:38:ea:d0:b4:4a:c1:17:6e:6a:a5:72:5b:c3:ef:
f1:44:16:32:ec:30:39:2a:8e:60:53:e8:c4:84:8c:dc:29:21:
54:ef:bc:2d:44:44:24:fb:c1:cd:d4:85:d5:f8:89:74:f2:fd:
ff:ed:1f:84:59:83:b4:20:d6:41:b7:1c:bd:5f:f3:13:7b:8b:
f4:64:23:fb:fb:ca:77:27:d0:8d:95:0b:7a:c2:3c:e7:d1:34:
f7:9b:83:30:21:2b:5c:f7:f8:ad:17:0c:7b:d6:c8:d8:50:bd:
87:08:71:e5:c6:5f:2b:57:38:6b:7f:d9:7f:b3:ed:21:a4:38:
a3:86:0f:a4:af:cb:36:c8:80:cc:c3:94:60:b8:e6:0b:ef:e2:
d2:e7:e4:77:b2:b4:b9:e8:84:91:99:2f:89:ff:7d:24:c5:40:
bf:08:20:ce:aa:e5:9b:29:26:ee:c5:bf:c3:c5:c8:14:fa:20:
a7:46:ff:aa:a0:04:e7:9b:6e:41:f6:d2:bb:6b:4a:20:d2:5b:
65:25:f8:69:76:53:28:b2:19:62:02:65:81:2e:05:29:1d:1d:
d0:af:08:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:00 2024 by rpki-client on console-fra.rpki-client.org