Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/9D15lkhVZc9Nyhn_E8l1RcFNaCs.roa
File: 9D15lkhVZc9Nyhn_E8l1RcFNaCs.roa (raw, json)
Hash identifier: wcevRJ05xlC69dm3KsZhmCHmCeiES87wBd5xkhrNiNI=
Subject key identifier: F4:3D:79:96:48:55:65:CF:4D:CA:19:FF:13:C9:75:45:C1:4D:68:2B
Certificate issuer: /CN=fec63c524e55df34bf7582827753e77a7699c7a2
Certificate serial: 01856F2FEE7F761F9F3835A515A9BE5D5D35
Authority key identifier: FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/9D15lkhVZc9Nyhn_E8l1RcFNaCs.roa
Signing time: Sun 01 Jan 2023 21:14:50 +0000
ROA not before: Sun 01 Jan 2023 21:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31396
IP address blocks: 193.30.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:ee:7f:76:1f:9f:38:35:a5:15:a9:be:5d:5d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec63c524e55df34bf7582827753e77a7699c7a2
Validity
Not Before: Jan 1 21:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f43d7996485565cf4dca19ff13c97545c14d682b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6f:09:9e:07:66:f1:b1:3e:7d:bd:94:a8:e7:
0f:2b:67:26:7b:43:8e:10:e0:dd:ca:df:fc:f8:b5:
f3:e9:83:a4:89:af:d3:d7:34:69:95:6e:06:8f:a7:
e0:b1:e5:a2:83:82:4f:dc:71:56:83:b0:14:78:b5:
1c:1c:ae:5a:f9:d9:99:f9:74:a3:20:7c:37:f6:87:
74:8d:1d:40:b2:33:13:db:11:2b:eb:da:50:f1:a0:
9c:f7:ec:e0:96:a9:db:82:99:d2:d8:fc:2e:d9:06:
e8:17:e2:9b:07:58:92:15:cd:f3:c0:3f:ac:a4:8f:
dc:4c:2b:4a:08:aa:22:e8:07:58:cc:1f:c0:a8:ad:
01:3c:71:e2:74:32:21:4c:86:56:dc:17:2d:85:47:
fb:6e:29:15:71:45:3b:a0:2e:74:34:7a:7f:f7:f1:
f0:44:9f:a1:88:8e:9b:b5:a0:70:ce:ce:ed:34:be:
a1:5b:bb:de:64:45:3e:b9:81:0f:52:97:ea:38:de:
1e:58:37:20:6c:d0:6a:35:20:42:55:85:a9:24:0e:
6e:cb:a3:67:04:e2:e3:27:5a:0c:4d:8f:7d:0f:2a:
32:e2:ae:59:fd:2e:6d:15:a1:e0:60:1d:76:8e:89:
22:ca:3b:d1:58:61:37:49:e7:bc:eb:2a:01:63:0f:
07:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3D:79:96:48:55:65:CF:4D:CA:19:FF:13:C9:75:45:C1:4D:68:2B
X509v3 Authority Key Identifier:
keyid:FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/9D15lkhVZc9Nyhn_E8l1RcFNaCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.42.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:00:e7:33:2a:18:de:49:2b:0c:a2:6a:f7:fd:bb:2a:d8:30:
b7:86:cb:f2:8c:81:70:5b:bb:b9:12:c9:21:94:83:2c:45:ee:
cf:87:25:99:44:35:da:81:a1:14:dd:aa:aa:c0:29:65:b8:3e:
3e:14:c7:3f:9b:10:6f:fc:d2:47:f7:e4:12:33:6b:e6:1a:44:
04:b7:5b:63:07:08:de:d4:57:0a:02:dd:3a:63:e6:97:bf:2e:
24:a1:a1:30:47:35:96:61:44:00:06:95:c0:3e:19:24:fe:67:
d9:92:bf:9f:36:2a:f2:29:49:dc:73:8e:21:18:0c:72:46:ba:
fc:85:77:15:37:c0:4b:82:bd:44:2c:42:96:4e:4b:b9:c6:89:
96:bc:bc:62:37:69:f3:df:d2:d2:7d:1c:7f:c2:24:ce:d1:5f:
51:83:59:77:b7:a9:12:ee:fa:61:8b:b2:50:2d:a3:04:28:81:
5c:16:c7:63:2b:6d:fc:07:82:4e:70:ae:0e:13:b0:06:1e:f4:
09:c6:d9:af:f6:6c:54:52:f4:8e:42:89:73:cc:60:99:06:e7:
75:d7:d4:e5:c8:fb:4e:73:d8:51:a4:9c:db:13:78:ac:3a:7d:
b7:93:63:00:4e:26:57:6b:33:88:df:a8:a5:ee:ff:c3:e5:72:
c7:a6:d1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:27 2024 by rpki-client on console-fra.rpki-client.org