Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/5FaVs6X_G-z-THDUXs2_lXi2HUU.roa
File: 5FaVs6X_G-z-THDUXs2_lXi2HUU.roa (raw, json)
Hash identifier: ID4f4qD1dSQ0+SbE19r2onBufYtO9uAhuNj7PlkVeJk=
Subject key identifier: E4:56:95:B3:A5:FF:1B:EC:FE:4C:70:D4:5E:CD:BF:95:78:B6:1D:45
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 0188BEA6D1D7C4DC1EEBF6539F641E2698C9
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/5FaVs6X_G-z-THDUXs2_lXi2HUU.roa
Signing time: Thu 15 Jun 2023 10:43:03 +0000
ROA not before: Thu 15 Jun 2023 10:43:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8985
IP address blocks: 193.232.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Jun 2023 12:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:a6:d1:d7:c4:dc:1e:eb:f6:53:9f:64:1e:26:98:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jun 15 10:43:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e45695b3a5ff1becfe4c70d45ecdbf9578b61d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:2c:4f:c0:95:eb:d4:53:8a:ba:05:63:e6:
40:a5:b6:f6:b9:36:2a:cc:de:a1:e9:d6:07:3f:8a:
ff:ee:93:b6:9d:7d:f2:08:c3:08:52:1f:b6:8f:7b:
d0:be:8b:cd:e9:25:ca:96:f2:07:52:80:47:84:bc:
62:4b:9c:46:e8:49:3a:5f:e7:12:06:23:96:76:2b:
4d:63:19:62:e6:72:28:5c:a7:93:79:20:89:8e:28:
8a:1c:60:f8:64:ab:12:22:5b:52:6f:4b:fb:c5:1e:
a0:fa:5c:c2:49:80:62:dd:64:05:e2:28:ae:2f:09:
d4:28:e6:05:47:fb:e9:84:bc:43:9e:49:e6:93:5b:
4f:06:4d:f0:f0:98:43:24:60:e0:fc:26:7a:78:2e:
5a:3c:c3:05:e3:02:81:a6:4b:00:f1:fb:74:a1:1b:
ac:4a:47:ce:c0:d2:f2:39:f5:c2:d3:17:fd:6f:3b:
3e:59:8a:2e:2b:29:78:26:af:79:70:27:34:8c:d9:
ea:14:08:c9:29:8b:05:47:85:6f:16:98:87:9d:22:
36:76:68:65:5c:41:b3:ab:86:40:36:09:f1:e6:59:
bd:a9:e5:8f:c1:ad:2a:2a:42:be:cd:c2:ad:0b:80:
41:2f:71:dc:2b:94:05:c4:7d:6c:d3:48:a7:a0:7b:
d1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:56:95:B3:A5:FF:1B:EC:FE:4C:70:D4:5E:CD:BF:95:78:B6:1D:45
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/5FaVs6X_G-z-THDUXs2_lXi2HUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.64.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:c6:83:5a:33:c3:20:fc:5c:29:56:d0:b7:68:13:b7:e5:eb:
67:32:22:34:a5:2c:05:27:6e:0d:0c:c3:55:60:5e:58:2c:26:
ba:ba:ce:33:f0:30:81:30:e4:16:b7:98:9f:79:90:cc:8c:93:
03:e1:2f:c6:d4:84:a2:5b:45:50:03:be:0f:f9:22:59:ca:60:
4e:e6:41:28:04:a7:d1:9c:dc:23:d2:40:99:31:6e:2b:02:32:
99:b8:a9:c9:2d:0a:d3:7f:a4:26:53:7f:eb:60:4b:89:ea:ac:
6e:f1:cc:db:fd:5b:33:99:3d:ff:fb:bd:14:2d:90:e0:eb:32:
c8:8b:23:b7:16:fb:83:1a:cc:5d:2d:b5:91:3f:1b:ae:bf:c6:
93:d2:cf:4e:de:80:1a:50:d1:a4:45:0b:5a:dd:31:f2:bb:9e:
b9:02:a8:69:e2:5d:cd:f5:26:a8:c9:b8:21:d0:6a:49:54:15:
04:78:d6:d7:84:e2:f9:12:c1:a5:91:e0:3c:05:24:22:19:f6:
f3:1e:39:9d:dd:04:c6:5f:6e:33:27:2e:17:8f:77:60:8e:20:
7d:d0:03:d9:42:1b:2f:b8:19:74:49:05:05:ce:18:37:80:80:
6c:19:a6:a9:5d:cf:12:ec:49:31:0b:86:8d:20:9b:4a:fd:5b:
7e:fb:2f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:51 2024 by rpki-client on console-fra.rpki-client.org