Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/12QFFrwFVIYUu1SwQeLpkVU3_es.roa
File: 12QFFrwFVIYUu1SwQeLpkVU3_es.roa (raw, json)
Hash identifier: O7AGB7EKbLVBUqHgIZNLpVj5y70UM3om6eESv3//F10=
Subject key identifier: D7:64:05:16:BC:05:54:86:14:BB:54:B0:41:E2:E9:91:55:37:FD:EB
Certificate issuer: /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Certificate serial: 018ECC77CC034A8F57410C5347D054D65794
Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/12QFFrwFVIYUu1SwQeLpkVU3_es.roa
Signing time: Thu 11 Apr 2024 09:23:06 +0000
ROA not before: Thu 11 Apr 2024 09:23:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33958
IP address blocks: 193.93.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 22 May 2024 08:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cc:77:cc:03:4a:8f:57:41:0c:53:47:d0:54:d6:57:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Validity
Not Before: Apr 11 09:23:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7640516bc05548614bb54b041e2e9915537fdeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:57:08:2f:d1:9f:91:64:f7:0e:7d:34:cf:34:
50:4e:af:50:2f:f5:a8:d8:81:1b:3f:1d:40:64:3b:
dc:23:47:5e:f6:39:fc:99:64:fd:1a:ea:e7:d4:a7:
b7:fa:81:75:93:77:25:75:f7:19:42:17:a8:36:c0:
08:ca:79:2d:f6:dd:56:f3:2f:4d:b3:47:b5:d3:9b:
7e:f5:96:1e:0d:92:86:1e:9f:6e:ef:5c:74:19:f5:
27:b4:76:30:0d:d3:91:12:59:80:53:99:f0:2f:c3:
9f:c9:1b:0f:38:ed:dd:db:b9:a9:1f:e0:45:fb:f5:
7a:5b:8b:75:44:12:a8:53:32:2c:49:78:35:1a:a7:
9a:1c:35:f1:29:88:5f:94:1a:a3:b4:fa:c9:ef:ba:
6b:26:a9:ee:e7:cb:60:f3:52:cb:89:6a:a5:0f:9c:
44:14:3e:d9:d3:d1:5f:04:a0:0c:17:82:62:b5:e0:
1f:63:be:82:17:e8:1c:84:2c:2d:d1:43:12:5c:a5:
cd:e7:aa:81:1d:1a:19:b8:5f:8d:49:d2:6d:77:58:
5b:83:31:40:27:32:f1:e6:11:39:63:96:25:13:bd:
69:02:9a:0c:47:89:28:a7:d5:cf:0d:ef:bd:32:65:
8b:4c:2e:7b:dc:0b:44:3e:0a:19:8c:4c:03:10:9b:
85:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:64:05:16:BC:05:54:86:14:BB:54:B0:41:E2:E9:91:55:37:FD:EB
X509v3 Authority Key Identifier:
keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/12QFFrwFVIYUu1SwQeLpkVU3_es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.64.0/22
Signature Algorithm: sha256WithRSAEncryption
77:d6:2b:a4:5c:f1:b0:2b:ff:c6:7d:84:05:75:4f:d8:f3:e0:
f1:b2:58:67:65:97:68:a3:77:a4:e4:85:6d:a2:0f:65:a2:17:
91:ea:1b:f5:e9:79:04:a4:62:3a:a1:d8:49:9b:91:7d:bb:27:
16:49:c6:45:6f:25:e2:08:42:1d:c6:37:5b:2b:b2:c1:b5:3f:
63:eb:ca:d8:ee:7a:69:6c:61:76:3e:6b:d3:4b:a4:c3:f7:0d:
4f:3f:ee:bb:32:76:42:69:4b:1b:1c:a5:d0:51:0b:8a:5d:d5:
4e:69:fb:a5:50:7b:46:3b:d7:43:26:9c:d5:33:8b:ac:63:e3:
76:0d:ba:87:dc:7c:8a:ac:56:94:59:e5:f2:b9:46:24:01:0c:
3c:5a:16:0f:0b:60:1c:9d:5a:35:ff:30:c3:aa:42:6d:6d:d9:
28:9e:60:69:2d:39:74:e2:45:8b:56:da:87:39:57:c7:54:b2:
4e:35:54:2b:1a:19:a4:83:b5:55:09:3c:47:8a:2a:3e:ee:a9:
5b:53:15:90:77:1f:67:3f:d9:c4:cf:d4:ed:57:79:c5:95:75:
f1:5f:97:a1:2e:9c:b1:42:a3:ad:f1:bd:f6:91:3d:c2:22:1d:
5c:ef:a5:d2:18:19:71:b4:fc:17:fa:cd:32:15:6e:84:b0:f1:
03:8a:0c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:00 2024 by rpki-client on console-fra.rpki-client.org