Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/B_nPm_e3oXXGYdiVjkPWZvWA8cY.roa
File: B_nPm_e3oXXGYdiVjkPWZvWA8cY.roa (raw, json)
Hash identifier: bZywZPxNQUBI8f9yku6zlh0o9aZwGy7d3ytLwLUjQvg=
Subject key identifier: 07:F9:CF:9B:F7:B7:A1:75:C6:61:D8:95:8E:43:D6:66:F5:80:F1:C6
Certificate issuer: /CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
Certificate serial: 01856ED50398750F00CA1FA989DC3BC6B796
Authority key identifier: 36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/B_nPm_e3oXXGYdiVjkPWZvWA8cY.roa
Signing time: Sun 01 Jan 2023 19:35:31 +0000
ROA not before: Sun 01 Jan 2023 19:35:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 193.103.129.0/24 maxlen: 24
193.102.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d5:03:98:75:0f:00:ca:1f:a9:89:dc:3b:c6:b7:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
Validity
Not Before: Jan 1 19:35:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07f9cf9bf7b7a175c661d8958e43d666f580f1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:0e:7e:06:aa:47:35:ce:57:f3:56:fb:53:
bd:15:6d:dd:8d:22:cd:ce:02:00:7a:60:22:46:3c:
4a:1c:91:50:df:83:c7:5d:45:d9:38:20:de:c0:cd:
30:e9:1b:c2:44:6c:46:06:b8:fc:45:48:7b:a6:86:
4e:df:bd:83:ab:1c:d8:94:9c:7b:1c:5a:6d:e2:02:
de:8a:1e:50:3a:ed:94:bc:de:6c:af:17:43:99:a4:
34:a4:80:4a:c0:94:4b:29:ba:4e:71:a0:79:84:c5:
c2:2c:3b:21:be:09:31:70:0f:7c:d3:a6:07:34:60:
ab:f7:61:2f:75:2f:cf:f4:c3:33:02:50:51:4f:1e:
f1:7f:88:a9:29:2c:39:80:5b:c8:86:fe:21:73:3a:
12:89:1c:08:4c:ed:36:90:79:ae:fe:19:87:5f:7e:
a1:d3:39:fc:30:1d:e4:96:6f:43:ac:c4:6e:88:d4:
b5:c2:83:f2:eb:2d:5b:63:1b:af:8a:5e:73:9a:a2:
b9:85:52:42:8f:79:73:ff:58:f6:3d:d1:e7:2a:2d:
99:b9:4c:33:b5:41:fd:31:bb:b4:cc:30:89:a2:73:
91:33:96:3f:93:6c:ef:49:20:7b:e1:07:95:64:b0:
d7:a3:34:9b:53:5b:a3:8b:f6:5a:f8:b8:83:ec:9d:
a5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F9:CF:9B:F7:B7:A1:75:C6:61:D8:95:8E:43:D6:66:F5:80:F1:C6
X509v3 Authority Key Identifier:
keyid:36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/B_nPm_e3oXXGYdiVjkPWZvWA8cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.102.174.0/24
193.103.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c9:c9:76:a3:5e:67:dc:7e:58:51:cc:e1:91:63:91:a9:96:
3d:b1:14:b4:29:99:7c:bd:50:02:ab:cc:5a:52:cb:85:db:9c:
dd:aa:39:36:0d:46:a6:8d:e3:19:1b:88:f4:33:f9:1e:b7:2f:
ff:f5:72:aa:32:16:ef:36:9f:af:ac:55:bc:78:72:a4:87:26:
22:50:f1:5b:60:ba:22:bd:1f:10:42:aa:6d:8a:f0:f1:01:77:
0d:20:d5:ae:3f:6a:f2:98:20:6f:60:b6:97:26:49:15:74:46:
6f:d3:c3:68:6e:b3:30:ed:2a:ac:35:04:1a:bd:9f:46:32:2e:
b8:bd:f9:aa:da:60:15:0b:88:b6:2b:f6:81:4b:60:c6:5b:b2:
0f:4c:a5:a9:fe:d0:ff:74:9e:a3:30:ee:1d:41:11:c4:53:d5:
09:fb:3a:2f:6a:03:73:58:54:1b:28:a8:12:64:47:60:2d:8f:
af:f9:ef:9e:b0:7f:5a:e1:25:ff:db:34:56:c0:43:a7:c8:9c:
03:9f:08:d7:38:f1:af:b0:a6:9f:38:25:e0:a5:80:5f:e0:da:
db:d4:55:3b:a6:1b:b2:21:5b:47:43:f0:76:b9:5a:41:37:86:
6d:2f:a9:09:83:0d:eb:9d:31:0c:78:75:d3:de:71:e9:bb:28:
69:d5:e2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:32 2024 by rpki-client on console-ams.rpki-client.org