Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/v2Nk0QGOIBcUhysFcLMtFzKMpNk.roa
File: v2Nk0QGOIBcUhysFcLMtFzKMpNk.roa (raw, json)
Hash identifier: 8Gy4sShF9tSx1+xlgkAA+6x2lkKizKZ6mX8JK8AqpNI=
Subject key identifier: BF:63:64:D1:01:8E:20:17:14:87:2B:05:70:B3:2D:17:32:8C:A4:D9
Certificate issuer: /CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Certificate serial: 018B7A0A47A8850451BBDD21EAE6166F05BE
Authority key identifier: 25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/v2Nk0QGOIBcUhysFcLMtFzKMpNk.roa
Signing time: Sun 29 Oct 2023 06:06:15 +0000
ROA not before: Sun 29 Oct 2023 06:06:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41480
IP address blocks: 193.25.97.0/24 maxlen: 24
193.25.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7a:0a:47:a8:85:04:51:bb:dd:21:ea:e6:16:6f:05:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Validity
Not Before: Oct 29 06:06:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf6364d1018e201714872b0570b32d17328ca4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3d:ef:bb:02:b6:6d:6a:00:71:78:02:e5:f5:
b9:c5:c4:48:03:69:41:3e:a5:15:b6:82:45:2c:09:
f0:38:dd:65:29:ae:b5:81:fa:7e:cf:4e:2c:1a:14:
cb:6a:39:bd:47:e3:52:53:c3:7a:88:3f:be:fa:8d:
9b:30:1e:bd:cb:b2:99:89:54:dc:03:cb:cf:d7:8c:
09:f5:3c:5a:25:3d:5a:0c:39:6f:95:e8:03:14:86:
53:f8:eb:07:73:75:3b:64:33:a9:cb:8b:94:34:15:
88:ef:13:60:8a:3a:a8:8c:21:11:14:eb:25:53:44:
4a:33:93:cd:03:d9:25:54:ee:38:cd:f8:61:63:57:
fc:45:32:e4:5b:90:90:bc:fa:57:cc:68:ad:7f:b0:
97:62:6e:59:ce:0f:6f:b3:58:eb:7e:3c:b6:6b:80:
d4:dd:ae:28:4f:90:c2:00:f6:31:a8:a1:c7:01:cb:
c5:d3:2a:27:01:da:e2:45:13:3d:16:82:04:02:80:
45:a7:5e:31:99:f2:e4:1e:c8:87:8b:b4:8f:0e:ab:
44:a2:47:f2:bd:56:e7:37:a7:be:c2:92:ee:4f:f2:
f5:b3:6e:5d:75:3d:35:4a:a6:29:d2:31:1a:73:b7:
c6:2f:3b:5b:76:c1:e4:4c:a5:c8:63:98:0d:e4:33:
e5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:63:64:D1:01:8E:20:17:14:87:2B:05:70:B3:2D:17:32:8C:A4:D9
X509v3 Authority Key Identifier:
keyid:25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/v2Nk0QGOIBcUhysFcLMtFzKMpNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.96.0/23
Signature Algorithm: sha256WithRSAEncryption
81:2e:89:d3:91:b2:e6:3e:70:ba:96:d6:f4:62:7e:6f:5a:2e:
c8:e2:3e:c4:19:86:02:56:8f:05:80:25:fe:b2:76:10:32:a0:
17:d1:e8:09:d0:8c:c7:fa:dd:2b:e3:26:1f:f0:7c:2f:a2:7e:
e2:1f:d5:a1:4d:e2:84:d1:73:34:55:3e:cb:f3:d5:8e:70:02:
c3:34:b0:0a:29:f2:a1:a6:2b:d5:1a:68:08:0b:cc:6e:2a:24:
f4:3b:74:ef:07:33:90:81:7d:43:f1:24:8c:f9:70:91:d8:5a:
39:28:15:48:97:04:52:f0:18:25:fb:75:09:2d:c6:f7:7a:51:
25:f6:8d:ba:cf:4d:00:f8:ca:f9:13:de:42:16:1a:45:e0:dd:
fe:c1:99:be:d2:5d:c3:8c:d1:50:56:e9:ea:19:4b:08:7c:92:
ed:7d:4f:cd:88:c3:f1:3f:7e:16:a5:33:49:28:6f:8f:9d:2a:
4b:27:d0:80:bb:a7:b1:a8:53:ea:26:f7:c5:6d:3b:14:b2:09:
93:1a:bd:58:74:d5:e4:85:fa:51:16:4e:6c:64:97:d4:58:f0:
04:5a:d0:5f:aa:94:8e:58:9f:f2:1d:07:22:d2:ff:76:6f:d7:
f4:64:d6:6f:1d:9a:f9:44:d0:52:dc:a9:85:95:98:79:9b:df:
42:f9:50:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:32 2024 by rpki-client on console-ams.rpki-client.org