Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/FqBF244F68Jm0abYNmaVnwOG-G0.roa
File: FqBF244F68Jm0abYNmaVnwOG-G0.roa (raw, json)
Hash identifier: Gk4DwKO3WyxtASNe42N1m7DxjTHlxAYyPk05dHi50uw=
Subject key identifier: 16:A0:45:DB:8E:05:EB:C2:66:D1:A6:D8:36:66:95:9F:03:86:F8:6D
Certificate issuer: /CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705
Certificate serial: 0186A69D93ADEC944FFF593952FAC87E4745
Authority key identifier: 7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/FqBF244F68Jm0abYNmaVnwOG-G0.roa
Signing time: Fri 03 Mar 2023 08:36:30 +0000
ROA not before: Fri 03 Mar 2023 08:36:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31627
IP address blocks: 193.16.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a6:9d:93:ad:ec:94:4f:ff:59:39:52:fa:c8:7e:47:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705
Validity
Not Before: Mar 3 08:36:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16a045db8e05ebc266d1a6d83666959f0386f86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:93:a3:51:a8:d0:74:bf:df:6c:f4:e1:79:41:
1a:c2:65:5d:2e:fb:41:05:09:d3:02:ff:38:eb:b6:
e8:54:b6:50:c9:c6:61:42:04:73:c9:7c:a9:1c:9d:
d7:72:0e:ea:3f:33:7b:1c:09:cf:ee:37:2b:1e:65:
c3:de:8a:49:8a:5e:96:e2:7e:43:ea:3c:00:8a:a9:
2c:1a:a9:73:04:85:4f:2c:1d:d9:6a:e5:d6:62:f2:
24:0c:ea:29:a1:13:1d:0c:ef:97:6e:35:23:2b:f4:
f9:cb:15:88:b9:ed:98:b7:94:55:85:62:98:cb:6b:
1a:a1:7c:a8:05:46:be:5a:25:45:29:54:b3:91:61:
ec:97:33:24:06:9c:1f:b4:b2:5b:01:bd:5a:82:d7:
f5:3b:a0:07:6f:f2:ce:be:5b:4a:ea:86:89:3c:84:
aa:5a:5a:a4:d8:54:1b:78:0f:a6:02:32:b6:05:3a:
f0:15:c2:7d:3b:a3:56:5d:aa:78:c7:8c:b1:c6:66:
f2:0e:12:4d:03:08:12:97:5a:e8:ab:75:9d:af:5e:
66:3e:a0:1c:f7:7e:a0:62:39:f5:d0:20:44:bf:f9:
95:8f:dd:68:83:97:08:da:b2:be:d7:d4:d2:26:cf:
be:c9:c9:4d:5f:30:ef:b8:d3:fe:b8:35:6b:b7:3b:
ad:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A0:45:DB:8E:05:EB:C2:66:D1:A6:D8:36:66:95:9F:03:86:F8:6D
X509v3 Authority Key Identifier:
keyid:7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/FqBF244F68Jm0abYNmaVnwOG-G0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.243.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:10:9e:5b:e4:ac:51:05:40:7c:6f:73:78:80:66:aa:3e:95:
e9:fc:38:1c:95:b6:a4:3b:c7:80:cc:41:54:d5:82:f4:95:4b:
8f:60:20:bc:6b:a7:ae:da:bf:f0:2d:8a:9e:6d:5f:c6:01:71:
62:13:c4:f8:8c:67:fd:e6:d6:22:cb:54:29:80:d2:cf:bb:61:
4d:1e:cb:81:84:38:d3:77:b8:9a:09:9e:82:d2:02:52:05:58:
ae:35:47:dc:1a:96:1f:1a:31:8a:a5:cc:2a:96:bc:db:c8:29:
69:80:ae:ad:0b:85:0e:d6:a3:18:91:5c:a0:c3:f9:c0:b5:7b:
12:7c:1b:44:ac:47:76:c5:92:59:56:cc:9c:54:16:7f:79:dd:
4b:1c:87:6c:4b:e6:dc:af:e9:00:12:c1:97:ef:65:92:d5:92:
a6:a5:0c:ef:60:83:88:18:63:fc:33:99:57:10:cf:5a:51:6f:
ea:31:86:15:ea:2d:bf:55:c9:08:c8:8e:b1:26:05:0f:85:42:
e3:3f:c5:b1:93:a1:38:1f:a3:c7:17:2b:d8:61:82:09:e2:48:
65:26:aa:e6:1d:fe:f1:22:bc:d3:4f:a0:df:90:f2:b5:57:6c:
c8:83:3e:71:82:97:53:2b:7f:45:34:da:10:e9:83:7a:05:03:
31:50:57:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org