Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/FN8O5At29xbA7EsYjkxFRqnli6E.roa
File: FN8O5At29xbA7EsYjkxFRqnli6E.roa (raw, json)
Hash identifier: 1UrqTQj/QvqSE3VSN1YZdJZDHEujePIHX+h0ct+nvNA=
Subject key identifier: 14:DF:0E:E4:0B:76:F7:16:C0:EC:4B:18:8E:4C:45:46:A9:E5:8B:A1
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019077831937BFAEC9735A33D6DADCE89A8F
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/FN8O5At29xbA7EsYjkxFRqnli6E.roa
Signing time: Wed 03 Jul 2024 07:33:18 +0000
ROA not before: Wed 03 Jul 2024 07:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215817
IP address blocks: 193.17.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 02:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:77:83:19:37:bf:ae:c9:73:5a:33:d6:da:dc:e8:9a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jul 3 07:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14df0ee40b76f716c0ec4b188e4c4546a9e58ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3a:ae:9a:e5:c7:b3:2b:02:f4:80:25:1d:c2:
6c:65:58:2b:6e:3d:62:b8:69:71:5c:8b:c7:b2:e1:
35:d8:7f:4a:8d:19:c6:23:1b:d2:a7:59:a8:34:6c:
03:33:2a:0a:2a:49:f4:b5:08:3d:66:e5:f5:4d:fb:
1d:81:1f:20:05:86:28:57:64:c7:db:ac:bd:12:bd:
35:6a:44:e9:3d:19:19:6e:8c:19:51:3f:57:e6:07:
ff:4d:c7:9f:08:cf:07:a3:48:d7:f8:1c:b5:af:76:
b3:d2:8e:8d:79:a4:b7:e5:95:63:d1:dc:4e:54:5e:
07:25:9e:b9:82:ef:72:85:f6:4b:fe:8c:6c:49:7c:
a8:5d:c6:dd:80:d8:66:3e:9b:bf:ed:9a:f1:54:fc:
fd:09:64:67:58:32:fb:1f:6f:5b:84:ac:7c:8a:46:
c5:18:5b:f9:7f:72:e0:e4:d1:a1:b4:f7:9f:89:d2:
f8:4d:a6:08:44:f5:2f:f2:2b:b2:d4:26:ff:c3:b3:
95:bb:1e:9c:60:35:33:71:ea:39:d8:38:60:91:ce:
20:c8:75:14:a7:ee:8d:a5:53:d2:54:2c:b1:18:7b:
06:dc:4e:b5:a6:d7:7d:ea:eb:a0:b3:b5:b4:9f:5f:
1c:01:12:62:6d:c6:30:06:72:bb:1a:82:8f:e0:b4:
4a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DF:0E:E4:0B:76:F7:16:C0:EC:4B:18:8E:4C:45:46:A9:E5:8B:A1
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/FN8O5At29xbA7EsYjkxFRqnli6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.91.0/24
Signature Algorithm: sha256WithRSAEncryption
14:5e:cf:d9:95:39:e6:8a:26:32:eb:d9:c3:31:ea:c4:43:63:
e9:7b:0b:6d:64:fb:af:9c:de:c6:25:75:09:97:d6:84:05:82:
35:18:4a:c0:29:b7:f8:82:c8:b5:69:a2:d3:e5:7a:d0:58:7b:
e2:a6:53:b2:28:ad:df:c7:eb:6b:fa:5b:98:4a:11:06:5b:cd:
be:c9:91:74:9a:f5:fc:7d:9c:47:5d:60:65:0c:be:66:ef:31:
e7:a8:3f:00:37:0d:54:df:a8:9e:c5:a0:a0:f3:49:e9:2d:49:
35:56:5b:27:cc:2d:29:bf:9f:dd:fd:21:99:2a:a8:86:63:80:
81:46:bb:62:e1:ce:9b:ca:ef:3c:75:8f:49:ec:e5:e4:34:b5:
6c:de:12:25:19:7c:d6:f5:d7:0d:53:5c:8d:25:45:f4:be:44:
ee:7a:45:f2:7d:07:e4:32:5a:ef:11:1f:7b:99:1c:69:5f:50:
05:d8:8d:a2:dc:0f:73:db:53:f7:44:3b:09:fa:a0:48:d2:90:
4b:0c:b8:83:53:4f:ea:74:e2:5b:c9:76:7e:0f:8b:15:fb:c5:
d7:4f:1b:64:ed:4b:4a:7a:8a:24:0e:15:7b:3c:6a:79:ed:e1:
69:72:82:8d:de:93:a4:a4:ea:24:8c:2c:ba:6f:9e:5b:c2:e7:
a3:a9:da:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 04:53:39 2024 by rpki-client on console-fra.rpki-client.org