Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/IsWbe_hU8xaP3pqCJj9MwHYGX0k.roa
File: IsWbe_hU8xaP3pqCJj9MwHYGX0k.roa (raw, json)
Hash identifier: UpOFoACFKxgU/ELuRJ7pSROA4GmhTSzdWFCP6K5Cf3E=
Subject key identifier: 22:C5:9B:7B:F8:54:F3:16:8F:DE:9A:82:26:3F:4C:C0:76:06:5F:49
Certificate issuer: /CN=5ad630b61d2e7292f9cef893bb6d71242a5f4bed
Certificate serial: 018CC348C00F519D62D8E0D01DC0DB0D0475
Authority key identifier: 5A:D6:30:B6:1D:2E:72:92:F9:CE:F8:93:BB:6D:71:24:2A:5F:4B:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/IsWbe_hU8xaP3pqCJj9MwHYGX0k.roa
Signing time: Mon 01 Jan 2024 04:29:33 +0000
ROA not before: Mon 01 Jan 2024 04:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50813
IP address blocks: 193.105.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 11:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c0:0f:51:9d:62:d8:e0:d0:1d:c0:db:0d:04:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad630b61d2e7292f9cef893bb6d71242a5f4bed
Validity
Not Before: Jan 1 04:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22c59b7bf854f3168fde9a82263f4cc076065f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cc:cc:11:5f:bc:cb:d3:16:be:78:41:57:96:
e6:ce:ed:cf:ec:e0:0f:50:fa:35:5d:da:46:aa:1c:
66:46:28:a0:b0:eb:0e:00:87:e0:ef:24:83:50:ab:
e5:bd:85:44:ba:0f:f3:39:6b:09:9a:e4:f6:18:0e:
54:67:8b:65:1a:cf:24:f8:e0:35:cf:6b:63:19:9b:
d6:9f:99:e6:02:62:11:1f:a3:95:1d:2b:72:79:01:
89:eb:20:29:75:e9:e1:24:a4:cb:66:37:c5:ad:5e:
c0:69:05:78:6b:03:71:cc:81:c7:28:4a:ff:de:8c:
8c:0a:bf:91:36:92:a1:24:88:17:85:59:88:1f:f7:
28:6c:6c:e7:c4:0d:ce:5a:b6:21:9d:0b:51:03:49:
fc:53:a9:02:5f:41:e3:81:e2:9b:df:da:7d:8f:4f:
a3:f6:ca:2e:0b:c4:31:75:c8:f7:44:66:8c:c1:b1:
6c:ca:35:0f:1a:06:f3:e7:da:4b:da:be:c7:3c:06:
a8:f3:17:ae:fe:2a:94:8b:67:64:b0:0b:c2:88:e5:
19:d4:d6:69:76:1d:f7:ee:ca:9d:dc:df:76:5e:e8:
3b:a6:33:5d:24:ac:9b:b1:4a:b9:48:9b:ed:c3:82:
9f:3f:ae:48:f6:ef:46:9c:41:08:81:c4:a3:87:1b:
30:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C5:9B:7B:F8:54:F3:16:8F:DE:9A:82:26:3F:4C:C0:76:06:5F:49
X509v3 Authority Key Identifier:
keyid:5A:D6:30:B6:1D:2E:72:92:F9:CE:F8:93:BB:6D:71:24:2A:5F:4B:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/IsWbe_hU8xaP3pqCJj9MwHYGX0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.253.0/24
Signature Algorithm: sha256WithRSAEncryption
51:69:35:13:05:6c:1c:90:77:3c:ee:9a:ce:d8:a5:e7:9a:08:
9f:b8:c5:e9:6f:d4:03:68:9f:9b:bf:a6:11:d2:15:c1:13:aa:
a5:ac:d7:c1:2b:9c:98:27:59:2e:02:e6:b7:92:43:60:43:c2:
a8:77:80:20:83:1e:77:27:6a:dc:fe:9c:ca:2b:be:35:03:7d:
e6:db:ab:20:f8:54:5f:79:f6:f1:d3:53:60:79:e7:cd:e4:25:
99:cd:9d:92:fb:c1:60:4d:69:b9:9a:da:36:89:2b:3a:16:dd:
a4:0b:3f:f9:de:41:5c:23:e5:b5:73:d8:ee:7e:6e:58:5f:a0:
cd:ca:38:b1:c0:45:01:f9:3a:f4:51:eb:97:ae:89:8c:c6:77:
51:f2:bd:44:ca:61:c9:83:0b:fe:97:ef:12:0e:92:fc:7e:f7:
27:fa:77:61:24:df:db:3f:6f:fd:ad:3c:21:e3:1c:7b:a7:d7:
d4:12:fb:5b:8c:f0:3c:ca:68:b6:b7:ac:17:a6:68:88:22:15:
c5:eb:9a:47:89:d2:44:a8:56:1f:86:2e:63:a2:1c:24:7e:b1:
1d:92:26:1f:c8:a4:b6:53:60:de:07:8a:03:b5:e2:ad:d5:c0:
50:84:7e:89:1f:36:2c:6a:10:88:c1:35:bc:cd:d7:ff:f8:a1:
17:af:f5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-fra.rpki-client.org