Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/030074-ac39-4491-9db9-803db6d2ad70/1/S1Nx2stMyT06e8siQwCN61e9s9Q.roa
File: S1Nx2stMyT06e8siQwCN61e9s9Q.roa (raw, json)
Hash identifier: 7/AOYIR/jF1zxPqlYdbnUg+2mWw9aYUirVxJjhPLIpk=
Subject key identifier: 4B:53:71:DA:CB:4C:C9:3D:3A:7B:CB:22:43:00:8D:EB:57:BD:B3:D4
Certificate issuer: /CN=0bac8a3206e367b80b8ca689220f098d188491ba
Certificate serial: 01856DD4052B29C2560C7F79A18A3D2B9D3B
Authority key identifier: 0B:AC:8A:32:06:E3:67:B8:0B:8C:A6:89:22:0F:09:8D:18:84:91:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yKMgbjZ7gLjKaJIg8JjRiEkbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/030074-ac39-4491-9db9-803db6d2ad70/1/S1Nx2stMyT06e8siQwCN61e9s9Q.roa
Signing time: Sun 01 Jan 2023 14:54:49 +0000
ROA not before: Sun 01 Jan 2023 14:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1136
IP address blocks: 193.177.242.0/24 maxlen: 24
193.177.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:05:2b:29:c2:56:0c:7f:79:a1:8a:3d:2b:9d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bac8a3206e367b80b8ca689220f098d188491ba
Validity
Not Before: Jan 1 14:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b5371dacb4cc93d3a7bcb2243008deb57bdb3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:05:ca:e2:37:0a:fa:7c:64:be:4f:04:4e:
d5:7f:c6:70:c7:0e:bd:29:de:e7:c9:f0:6c:1a:bf:
41:d5:dd:cf:7f:31:c5:ad:38:15:6d:42:72:93:b0:
78:e7:af:34:a2:c7:43:6f:74:42:f0:41:1d:99:50:
44:b6:96:1c:df:01:a9:5b:68:86:b9:0e:9b:bd:28:
95:16:b2:c5:c1:a9:c8:c9:88:98:e3:d7:c8:6b:0d:
b9:8f:64:be:07:b9:53:9d:4f:ea:f7:3f:20:b2:ef:
c7:5b:66:a0:86:60:c2:15:5c:a1:fe:8a:c6:f1:cd:
f7:bf:22:b7:d8:08:bf:50:a5:59:21:ae:cb:0b:4b:
d8:60:38:47:f9:0c:11:cf:f1:46:12:a5:ac:66:3d:
ec:ca:73:4a:dd:b3:01:2f:d2:e5:1d:c7:b5:57:6e:
ad:f6:d4:06:67:82:de:b9:7b:68:08:1b:61:25:f2:
01:0f:7d:df:d2:5a:96:45:2e:da:ec:c1:68:f9:17:
be:f5:f8:e2:1c:01:54:75:bf:48:51:12:45:21:4d:
aa:08:0c:07:b3:19:4a:7e:03:f2:c0:1b:48:39:0d:
b1:62:4c:57:c0:5b:55:8d:13:11:6d:66:c6:e7:84:
2b:8e:bb:62:28:8d:da:5e:80:1f:28:c1:dc:38:51:
d6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:53:71:DA:CB:4C:C9:3D:3A:7B:CB:22:43:00:8D:EB:57:BD:B3:D4
X509v3 Authority Key Identifier:
keyid:0B:AC:8A:32:06:E3:67:B8:0B:8C:A6:89:22:0F:09:8D:18:84:91:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yKMgbjZ7gLjKaJIg8JjRiEkbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/030074-ac39-4491-9db9-803db6d2ad70/1/S1Nx2stMyT06e8siQwCN61e9s9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/030074-ac39-4491-9db9-803db6d2ad70/1/C6yKMgbjZ7gLjKaJIg8JjRiEkbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.177.241.0-193.177.242.255
Signature Algorithm: sha256WithRSAEncryption
50:60:7a:eb:dc:b1:ad:ca:2e:e3:c0:1a:55:6c:9d:08:a2:b9:
a2:a1:d8:5a:1d:65:e3:97:c1:87:74:60:92:27:e0:70:37:dc:
cd:6b:93:84:77:c3:ab:0f:2a:0b:84:73:41:ce:c6:96:71:04:
55:d9:6c:b1:ae:36:76:fb:6e:b8:70:13:33:61:a3:1c:a6:08:
8e:1f:29:de:ba:ac:01:75:55:2a:a1:3e:04:a7:13:66:79:eb:
b7:c9:23:1d:1d:cc:66:34:b2:df:3a:ea:93:4f:48:76:61:41:
21:8b:28:6c:66:40:b5:74:13:93:a2:4e:ee:69:79:c1:71:0b:
73:f4:a4:ac:ad:a6:97:e1:d1:73:7f:b0:f4:9e:37:59:e0:b4:
dc:7f:77:03:45:88:f3:39:e2:c8:57:0f:60:38:91:df:09:eb:
51:fc:a1:40:84:7c:c1:b7:a4:4a:f9:bc:eb:ac:72:7e:e6:09:
59:f3:c3:54:05:8f:de:3d:aa:46:39:bb:ba:6d:ea:c7:21:b6:
1a:8e:ea:8a:e4:69:46:35:da:65:90:58:46:6d:bc:1e:d7:42:
88:92:55:9b:06:68:26:a8:77:66:07:09:46:14:cf:b7:bf:95:
f4:b0:17:69:0f:10:ae:ff:46:29:d4:4b:d3:52:dd:c0:b1:fb:
9e:72:b3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:58 2024 by rpki-client on console-fra.rpki-client.org