Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/B8UBRZOSRLjW7h6MS9o7tDS4-xo.roa
File: B8UBRZOSRLjW7h6MS9o7tDS4-xo.roa (raw, json)
Hash identifier: e1cEu/zbGRPLps9+RkcA46uczceDJrLuUsH2V0fsT4c=
Subject key identifier: 07:C5:01:45:93:92:44:B8:D6:EE:1E:8C:4B:DA:3B:B4:34:B8:FB:1A
Certificate issuer: /CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Certificate serial: 018C36003F8C7D8CFD968ECAF5ECA5EC0B55
Authority key identifier: D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/B8UBRZOSRLjW7h6MS9o7tDS4-xo.roa
Signing time: Mon 04 Dec 2023 18:03:55 +0000
ROA not before: Mon 04 Dec 2023 18:03:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43189
IP address blocks: 193.134.240.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 05 Dec 2023 08:10:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:36:00:3f:8c:7d:8c:fd:96:8e:ca:f5:ec:a5:ec:0b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Validity
Not Before: Dec 4 18:03:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07c50145939244b8d6ee1e8c4bda3bb434b8fb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:57:9b:6d:30:f6:48:63:b7:2d:54:9a:72:b6:
3d:8f:be:41:86:f1:88:65:c1:76:1c:9d:5a:e3:32:
1a:f4:bf:c6:47:33:7f:19:10:b4:2a:7d:f6:ea:70:
d3:8c:a6:01:8f:ea:f4:23:45:68:1d:ce:3e:59:35:
45:ef:c6:4b:02:24:d5:8c:32:f8:bd:0f:cc:b7:9e:
d2:86:95:97:d7:68:e3:43:08:04:3e:ec:f2:d8:54:
b8:53:ef:f6:8f:2b:60:3b:d1:1a:ca:0f:48:39:27:
0c:d0:ff:bf:5c:8f:aa:76:78:20:10:87:e5:a6:2d:
52:34:c3:95:e9:df:22:b9:56:f9:71:0c:b2:d0:67:
59:47:72:ea:6a:36:a6:98:10:4d:7f:8b:c8:9b:8c:
9e:51:4d:d1:31:a1:1b:8c:3e:e4:12:9b:ea:34:87:
60:23:54:2c:9c:3c:1d:85:5b:34:3d:c3:92:91:62:
f7:7d:70:03:ee:1c:34:14:b9:47:6e:76:a7:f9:76:
7a:51:5d:0a:34:91:cc:57:07:14:29:51:89:c1:18:
32:8d:31:dc:96:75:b2:d0:30:cd:c8:2b:53:9f:54:
35:ac:b7:a9:22:34:25:7a:86:4c:5d:16:92:29:50:
07:b9:4b:39:4b:d4:e7:be:0e:f7:10:0c:59:64:5d:
b4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C5:01:45:93:92:44:B8:D6:EE:1E:8C:4B:DA:3B:B4:34:B8:FB:1A
X509v3 Authority Key Identifier:
keyid:D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/B8UBRZOSRLjW7h6MS9o7tDS4-xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.240.0/21
Signature Algorithm: sha256WithRSAEncryption
b4:13:63:8a:7a:10:76:18:1b:7f:9d:7e:2f:60:5c:04:7f:60:
82:f7:fa:fa:d5:ed:b0:85:0a:65:f4:30:61:98:0e:90:89:12:
64:6d:49:75:85:4e:ad:53:8b:57:29:a8:7e:01:9c:f0:9d:fe:
91:d4:cc:e5:a5:92:5d:2b:b2:b2:6a:ba:55:88:35:22:84:5c:
3d:61:6f:1e:fe:a8:56:0b:4c:22:a0:32:d5:e4:60:61:5a:08:
df:c9:94:fa:a5:17:76:35:59:53:fa:65:41:15:76:70:42:77:
13:7f:c7:00:1a:66:d1:bf:d0:2a:c4:72:4c:37:1c:cf:c1:44:
62:e8:de:b9:8e:14:bb:af:4e:4b:33:e6:ac:d9:65:61:fa:60:
fe:62:f6:5d:17:0f:d7:e3:17:0d:c9:5b:45:35:c6:97:70:e1:
c0:a1:3d:d2:6f:bb:88:30:ff:1a:05:1f:36:23:a0:66:b6:c2:
d7:d2:c7:cf:31:7a:34:79:05:93:3a:b7:bb:4d:a0:18:72:b6:
f9:5e:8c:8e:e6:93:90:d0:e0:d9:e8:44:e0:e6:37:cd:b1:31:
53:bb:4f:55:92:bb:78:a2:55:9d:88:4a:62:cb:55:32:3a:07:
16:83:12:32:21:8f:da:31:0a:03:38:a0:8f:06:0a:d8:15:07:
fb:88:df:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org