Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/_hnxJgilH18cmjF_KpOxxeTku-s.roa
File: _hnxJgilH18cmjF_KpOxxeTku-s.roa (raw, json)
Hash identifier: f+R5nhP0Djz6uEP3UO4vcW9OTrTzQ5OvJfpNVf4DnaA=
Subject key identifier: FE:19:F1:26:08:A5:1F:5F:1C:9A:31:7F:2A:93:B1:C5:E4:E4:BB:EB
Certificate issuer: /CN=479828bdc6d059e7551592de3ee29eb41bf7bda5
Certificate serial: 0185727126899F5BF592EAA01C8144040CD3
Authority key identifier: 47:98:28:BD:C6:D0:59:E7:55:15:92:DE:3E:E2:9E:B4:1B:F7:BD:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/_hnxJgilH18cmjF_KpOxxeTku-s.roa
Signing time: Mon 02 Jan 2023 12:24:56 +0000
ROA not before: Mon 02 Jan 2023 12:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196877
IP address blocks: 193.104.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:26:89:9f:5b:f5:92:ea:a0:1c:81:44:04:0c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=479828bdc6d059e7551592de3ee29eb41bf7bda5
Validity
Not Before: Jan 2 12:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe19f12608a51f5f1c9a317f2a93b1c5e4e4bbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7b:4a:52:d1:d9:bb:46:a5:87:75:80:56:ee:
85:26:8f:c1:0b:17:97:e5:1d:f7:e9:2e:78:ba:ea:
5e:de:a9:c8:a4:28:84:67:df:8c:5d:26:7f:89:68:
31:6d:41:6c:75:e3:9b:19:f9:1d:27:e6:5e:e1:52:
f9:4b:2e:25:86:4a:5a:6c:cf:3b:fe:99:c9:5d:01:
68:16:9a:90:6b:75:97:ed:b2:59:78:7e:ed:5e:d0:
1b:5e:7f:84:02:2b:5d:90:79:9c:6c:ce:c8:cb:94:
55:09:67:90:19:8b:4d:27:02:05:f7:5d:27:ec:7f:
90:e4:4c:b9:2c:72:6b:ea:6a:59:eb:84:45:b2:cc:
be:1d:e3:3b:b8:d7:47:76:18:df:60:be:51:e3:b9:
1a:17:f2:ad:9d:0d:9b:14:31:9d:21:73:1e:b0:a0:
c9:b9:0b:2e:8a:f8:a8:ab:90:8a:e4:a2:66:b8:4b:
fe:11:48:bb:9c:61:95:56:01:9a:95:70:13:19:71:
cc:56:20:b1:59:63:f2:ce:19:84:5c:cd:4b:09:26:
da:d7:24:70:76:44:ae:8f:a5:96:12:57:15:9c:56:
cb:7f:74:93:bf:b5:ca:35:5a:ee:78:32:39:88:3a:
f5:f4:f6:49:b2:43:5d:0f:a4:90:0b:e1:b5:df:37:
e4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:19:F1:26:08:A5:1F:5F:1C:9A:31:7F:2A:93:B1:C5:E4:E4:BB:EB
X509v3 Authority Key Identifier:
keyid:47:98:28:BD:C6:D0:59:E7:55:15:92:DE:3E:E2:9E:B4:1B:F7:BD:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/_hnxJgilH18cmjF_KpOxxeTku-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.210.0/24
Signature Algorithm: sha256WithRSAEncryption
41:95:05:f4:18:ca:46:69:ed:c5:e6:bc:ee:da:7a:ba:3d:90:
5b:ce:2c:b9:31:a7:5e:22:79:41:e3:2b:1d:d9:39:c9:5c:69:
b6:70:1a:2b:3d:4d:95:82:de:bd:0b:6a:90:b2:18:a9:8a:0f:
18:58:19:94:3a:56:e2:da:0d:f2:a5:cd:bf:2b:4f:b7:e0:c2:
8f:d4:55:7f:35:28:61:07:4a:11:fd:d9:42:ea:e8:5d:7d:a0:
34:05:12:3d:9f:e8:29:3b:47:0e:21:af:ee:62:57:23:64:30:
20:33:f3:de:87:63:84:c9:73:2a:17:3f:fe:7a:bd:46:5a:f6:
ac:d6:99:e7:c7:8d:71:02:69:82:8c:f9:9c:13:39:64:89:b7:
5e:14:18:58:c3:f3:b5:9d:3d:c9:09:ef:fa:bb:d5:f3:14:11:
08:02:1f:da:8e:8b:fb:e8:a0:70:d7:07:b6:d1:8a:9d:62:df:
a7:b0:f8:8f:52:15:a6:9f:4e:77:c2:9e:3a:c5:00:94:03:15:
ce:3f:25:4d:27:e6:a5:b6:77:06:2f:da:49:e2:6f:e1:7e:cf:
df:ed:b6:de:0e:d2:01:73:75:48:41:49:8f:53:08:38:fe:76:
60:ca:cc:2d:d5:a9:32:3d:20:e2:7f:d8:d7:f5:3c:0b:85:85:
4b:31:fd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:37 2024 by rpki-client on console-fra.rpki-client.org