Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/_g4Au9U2WSKb1vtLpEG4eRTx2k4.roa
File: _g4Au9U2WSKb1vtLpEG4eRTx2k4.roa (raw, json)
Hash identifier: AOpGcmJgTXr6jtrKnPi7J2Z8iuMg0Xbu2atMrGYcwyg=
Subject key identifier: FE:0E:00:BB:D5:36:59:22:9B:D6:FB:4B:A4:41:B8:79:14:F1:DA:4E
Certificate issuer: /CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Certificate serial: 01857203131CE7CF90472559DF331CE4A7EC
Authority key identifier: 02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/_g4Au9U2WSKb1vtLpEG4eRTx2k4.roa
Signing time: Mon 02 Jan 2023 10:24:42 +0000
ROA not before: Mon 02 Jan 2023 10:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197889
IP address blocks: 193.110.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:13:1c:e7:cf:90:47:25:59:df:33:1c:e4:a7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Validity
Not Before: Jan 2 10:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe0e00bbd53659229bd6fb4ba441b87914f1da4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:02:82:17:72:87:38:e7:04:f7:67:52:d8:
71:86:68:40:7e:e1:77:27:5e:a9:d7:4d:bd:f2:8d:
b6:a6:86:6f:51:da:dc:13:f5:1f:aa:55:a5:28:54:
c9:72:7d:06:4a:ee:8b:8d:ba:1d:d2:89:93:fd:9f:
83:25:9b:a5:75:a6:c8:26:4a:30:04:bc:c9:cc:ef:
0b:18:7b:27:88:56:f6:d8:5d:29:ca:40:a9:8a:44:
a9:01:64:96:5e:78:6e:69:7d:48:0d:37:c6:c6:cb:
42:81:b5:ca:94:2d:e5:83:46:61:33:e5:d1:58:87:
be:52:02:2f:47:83:e6:e4:8e:f9:5f:d8:37:70:68:
15:7a:ba:4f:66:63:ff:c2:bb:03:09:20:8d:3c:d9:
84:fb:ae:3a:03:c6:33:8c:30:cd:21:c6:72:b9:29:
45:7e:72:1b:91:ed:92:81:dd:f5:90:70:cd:af:c9:
60:02:44:1e:7e:74:0b:6e:1a:6f:d9:5b:03:af:2d:
43:41:c5:72:98:2d:d2:be:09:16:fa:63:08:26:49:
e7:25:04:af:09:4d:d9:f5:fe:b4:51:c9:3e:ca:16:
7d:cf:89:c3:38:fa:65:9f:ba:48:09:17:d4:0b:e6:
f4:09:d5:43:6f:2b:13:02:43:b6:9f:b1:55:34:76:
e3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0E:00:BB:D5:36:59:22:9B:D6:FB:4B:A4:41:B8:79:14:F1:DA:4E
X509v3 Authority Key Identifier:
keyid:02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/_g4Au9U2WSKb1vtLpEG4eRTx2k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.83.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:9e:df:1f:71:ab:23:a7:69:81:0f:3e:57:9b:00:3e:22:72:
31:db:a3:3c:d5:ea:ef:6c:52:fc:2a:f6:42:5c:1c:1e:e1:99:
a3:21:71:c6:ce:91:a3:6c:db:60:4a:95:ad:f2:e1:a1:3c:e1:
90:c2:d9:18:7b:59:c5:df:74:68:62:ed:f9:0b:a3:c2:15:ee:
82:40:88:f2:c5:9a:c1:26:38:ee:71:32:67:5e:36:5a:bf:82:
92:3a:d7:44:9c:36:ef:ea:26:ff:0d:69:ef:93:ad:50:75:d0:
a9:1d:71:43:1c:d1:44:79:79:54:37:f8:9b:d8:1c:bc:cb:a9:
e0:66:47:cb:26:48:7f:7c:81:86:a0:43:90:b6:a4:6e:db:81:
40:37:59:18:9f:b1:5f:24:8b:c8:24:14:4b:58:1b:30:d4:32:
32:12:67:24:3c:9a:7f:8d:78:73:3a:9f:3d:6a:0b:24:27:42:
19:df:81:97:97:22:1f:ff:b7:44:e5:a3:d8:20:ba:28:99:76:
11:1f:dc:4b:0b:68:59:09:35:f0:80:ab:01:d6:d6:88:5e:06:
fa:ce:ca:06:a4:0a:39:b3:43:c2:e0:ed:dd:bd:ba:eb:8c:d2:
69:f6:15:c3:0f:2f:be:12:00:3a:19:f1:84:21:d2:ff:fb:20:
1d:1d:0f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:12 2024 by rpki-client on console-fra.rpki-client.org