Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/J_uTBCSHMw1ggFpIgwXGiiAFjy4.roa
File: J_uTBCSHMw1ggFpIgwXGiiAFjy4.roa (raw, json)
Hash identifier: o0L5SAxgwUB22azGkOV7T2C/7abJLpmcyVkYEPr5ufs=
Subject key identifier: 27:FB:93:04:24:87:33:0D:60:80:5A:48:83:05:C6:8A:20:05:8F:2E
Certificate issuer: /CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Certificate serial: 018796DFCAAE2F5417985E8CAE82FF5FAF45
Authority key identifier: C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/J_uTBCSHMw1ggFpIgwXGiiAFjy4.roa
Signing time: Wed 19 Apr 2023 00:17:41 +0000
ROA not before: Wed 19 Apr 2023 00:17:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59545
IP address blocks: 93.157.0.0/21 maxlen: 32
195.5.163.0/24 maxlen: 32
2001:67c:54::/48 maxlen: 64
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:96:df:ca:ae:2f:54:17:98:5e:8c:ae:82:ff:5f:af:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Validity
Not Before: Apr 19 00:17:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27fb93042487330d60805a488305c68a20058f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:f6:16:9d:59:d3:58:8c:5a:68:d0:9a:f6:
e3:62:90:f1:b3:23:9f:54:87:ae:11:ab:bc:c6:6b:
4c:d2:0f:e7:03:da:59:28:6b:e8:8d:ca:3b:7e:93:
a7:a8:51:b7:32:8b:9b:5a:c0:13:80:50:4a:8e:6a:
75:5b:27:8a:15:6a:8f:ab:07:ef:87:e5:8b:c2:f8:
ad:be:b2:ab:c5:5c:28:33:b4:e0:e9:6b:f4:d4:7f:
ee:9a:54:51:02:9f:de:12:2b:ca:f2:3d:6b:3f:5f:
cb:91:e6:50:b4:92:81:a6:d8:e9:5f:72:f5:f0:9b:
92:9c:bc:34:b4:4c:85:7a:b2:5b:08:26:ac:ff:22:
dc:54:19:42:4a:94:a3:2b:b4:49:38:05:75:03:2d:
6d:27:e5:0c:32:87:b9:06:7d:de:04:ef:cb:c4:c3:
50:6b:f6:27:66:da:a0:6f:85:97:16:34:0f:43:8e:
aa:99:a3:2b:a8:68:42:72:91:a1:f0:9e:22:0c:62:
46:f7:d1:e3:a1:c9:6f:f4:cc:55:b5:f8:fa:d4:0d:
67:6e:da:77:d0:87:07:84:5a:2f:5f:43:4d:27:3b:
19:43:57:94:fd:df:a8:fc:95:f3:6b:8b:ac:0f:50:
56:58:70:ef:cc:b9:6e:31:ff:1d:e3:bb:85:e3:99:
b2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FB:93:04:24:87:33:0D:60:80:5A:48:83:05:C6:8A:20:05:8F:2E
X509v3 Authority Key Identifier:
keyid:C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/J_uTBCSHMw1ggFpIgwXGiiAFjy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.0.0/21
195.5.163.0/24
IPv6:
2001:67c:54::/48
Signature Algorithm: sha256WithRSAEncryption
8d:03:b2:fc:82:c6:2b:df:d3:10:21:2d:2d:59:05:f2:44:9b:
50:72:bd:86:20:8f:8d:3f:91:4b:74:cd:c1:6a:ce:2a:dd:60:
a6:be:fc:6f:dc:6f:4e:dd:5d:5c:7e:08:4c:ef:30:04:d3:41:
a3:98:cc:50:eb:aa:c4:3b:18:fb:da:d3:ca:d0:5d:59:7c:7d:
24:42:4c:32:9c:43:9a:4a:b2:05:ef:55:44:57:41:79:53:5c:
c9:1b:70:b0:04:7c:4a:5d:1f:a6:5f:21:b2:01:35:99:06:bd:
6b:5e:8a:75:8a:b5:52:a7:0c:15:c3:e6:85:67:f7:88:0c:d5:
23:49:13:09:f4:ca:c5:47:8e:55:e8:55:32:d2:96:2e:5b:56:
15:4f:24:97:96:83:aa:61:06:46:63:61:87:ee:a1:9f:16:f4:
ba:06:53:10:70:5e:22:7d:56:b5:74:5e:63:1b:1d:a7:d5:9d:
ca:25:b0:f7:04:2c:3d:b9:0b:6b:76:34:12:49:1a:70:4f:8e:
e5:98:b6:f9:ba:98:f5:dd:84:b8:74:65:19:fa:56:56:bb:52:
0f:ae:a4:a4:0d:e3:09:88:23:fb:29:a7:08:7e:47:e7:fe:68:
96:d6:aa:97:e3:6e:69:b6:50:7f:38:45:ba:fe:5f:7d:b5:3a:
13:f4:50:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:38 2024 by rpki-client on console-fra.rpki-client.org