Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/ovwymXKnRv2YJXDq27h4gtRm1HQ.roa
File: ovwymXKnRv2YJXDq27h4gtRm1HQ.roa (raw, json)
Hash identifier: ZZVjPqdS8obpB887Kuym8CWWFtBEw4XDsynAskyf2Ls=
Subject key identifier: A2:FC:32:99:72:A7:46:FD:98:25:70:EA:DB:B8:78:82:D4:66:D4:74
Certificate issuer: /CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705
Certificate serial: 018CC72756149C0C74FB4C2A1EEAC473EB51
Authority key identifier: 7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/ovwymXKnRv2YJXDq27h4gtRm1HQ.roa
Signing time: Mon 01 Jan 2024 22:31:33 +0000
ROA not before: Mon 01 Jan 2024 22:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31627
IP address blocks: 193.16.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jun 2024 14:47:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:56:14:9c:0c:74:fb:4c:2a:1e:ea:c4:73:eb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705
Validity
Not Before: Jan 1 22:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2fc329972a746fd982570eadbb87882d466d474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:59:66:a8:2f:fc:52:d9:f1:ab:8e:91:dd:74:
78:94:dd:db:8e:f5:81:b9:f3:fc:07:35:76:4c:ef:
ea:9b:3e:a6:4c:78:59:04:a1:64:5a:d9:25:0f:45:
57:6a:82:51:6f:f7:36:5a:82:3f:42:db:dd:11:b7:
5f:cf:15:f1:32:7d:77:cb:b5:2c:93:dd:51:4f:67:
9e:6f:c8:dc:43:6e:d5:7e:d7:fa:40:1b:ed:9d:66:
21:ab:b5:85:10:d2:e3:21:01:97:25:7f:93:1d:72:
e0:48:65:9f:82:89:bb:a1:a6:28:ec:08:c8:8a:d6:
17:f7:e8:5c:5e:4d:ed:25:10:ef:61:ee:c5:2b:e0:
1a:49:79:6b:fb:4a:b1:eb:18:b2:12:55:9d:c5:06:
62:56:3f:12:d1:39:96:0a:ba:a7:b0:b2:26:91:51:
04:8a:f4:9b:96:0d:56:dc:a9:95:82:8d:b9:ae:7f:
14:d0:1e:69:4b:0f:25:5f:ac:f7:d8:86:c1:df:fa:
26:2f:ca:f6:35:ca:cd:48:28:97:1e:86:47:02:0e:
eb:8c:6d:3b:eb:7f:55:0c:d0:51:d5:9e:f2:68:f2:
46:5d:72:ea:e3:67:09:df:eb:c9:8d:d1:f9:9f:9e:
d4:3b:8a:f4:31:36:b5:b2:fb:77:6f:a1:ec:45:4b:
41:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FC:32:99:72:A7:46:FD:98:25:70:EA:DB:B8:78:82:D4:66:D4:74
X509v3 Authority Key Identifier:
keyid:7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/ovwymXKnRv2YJXDq27h4gtRm1HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.243.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:5f:97:ad:78:30:78:f9:e5:19:e7:a2:de:df:25:4b:ff:46:
fd:40:13:78:34:4e:9f:14:d7:df:12:0b:d9:7b:cb:de:5b:3c:
9d:24:f8:4f:99:23:a3:63:fd:ab:e6:bd:9b:b6:d1:c2:4e:69:
36:01:43:91:e0:31:86:22:ec:f6:5a:bd:c1:89:1f:85:e3:2f:
44:10:b4:0e:3a:30:30:e6:ef:24:f8:1c:14:51:13:2b:00:d9:
51:79:a1:17:0b:fc:bd:79:7e:17:62:8f:13:9f:4c:df:7e:7d:
89:c6:ec:28:c4:e9:c1:96:ab:06:3b:3d:62:94:33:89:08:61:
c1:00:6a:ca:a1:b0:f6:97:d4:02:35:c6:af:2c:db:dd:ac:cf:
0e:81:71:25:ba:32:b7:1c:7d:00:d8:ca:12:64:16:2c:56:fb:
c6:79:9b:f4:c6:23:8b:12:14:5e:53:55:c3:17:dd:16:38:10:
55:64:06:b9:8f:78:d3:04:02:fe:52:e6:37:58:6f:b7:55:57:
0d:ff:09:d7:10:f5:63:5a:b3:1c:69:41:88:10:f1:b8:f8:cd:
42:23:0d:bf:83:5a:bf:ef:79:8a:ff:c2:0d:73:92:3d:bb:11:
9a:63:1e:8f:91:9b:d1:e4:ec:49:04:58:17:5f:eb:d4:39:fb:
79:6e:f1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 17:40:40 2024 by rpki-client on console-fra.rpki-client.org