Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/IjRxbxSTvbQ1mMXYxaUNCxAbeQ4.roa
File: IjRxbxSTvbQ1mMXYxaUNCxAbeQ4.roa (raw, json)
Hash identifier: Ga6Ony+q6GBTtlLuOdSfkTmZ4Z83oD20zFAkMU5/N9E=
Subject key identifier: 22:34:71:6F:14:93:BD:B4:35:98:C5:D8:C5:A5:0D:0B:10:1B:79:0E
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 0189D07D95A1939338CC13A75E250496945F
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/IjRxbxSTvbQ1mMXYxaUNCxAbeQ4.roa
Signing time: Mon 07 Aug 2023 14:53:58 +0000
ROA not before: Mon 07 Aug 2023 14:53:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201364
IP address blocks: 193.164.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Sep 2023 17:39:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:7d:95:a1:93:93:38:cc:13:a7:5e:25:04:96:94:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Aug 7 14:53:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2234716f1493bdb43598c5d8c5a50d0b101b790e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0a:f2:2a:9a:19:63:4e:0a:fd:55:3e:26:1f:
3a:27:8b:18:fd:45:14:55:66:a9:75:c3:39:a4:2b:
af:67:2a:7a:97:9f:f4:01:98:ca:55:c1:13:43:3e:
9e:2b:2f:00:8e:5e:9b:fb:79:f8:13:90:9b:37:4d:
c7:a7:16:2d:61:79:b0:db:1c:e2:22:eb:2b:90:07:
96:a0:88:3b:79:61:94:30:34:cf:41:c4:c6:48:39:
d7:a5:2f:f7:7b:00:01:d4:f1:bb:77:40:ca:42:49:
db:7c:33:35:b3:75:47:0f:f3:0b:99:9d:db:b6:92:
ef:83:33:26:c3:7c:e6:c2:1b:20:a9:69:0b:31:01:
aa:62:8a:f8:26:b0:36:a8:dc:b2:d2:71:81:45:70:
2c:16:9f:a2:ff:3b:4f:59:bd:bf:5b:69:27:62:37:
8e:b0:86:99:c8:47:82:26:72:fd:3e:44:ee:b8:fc:
50:01:bb:cf:14:84:85:a7:57:53:2f:83:94:3d:24:
7a:57:21:32:d2:d0:a2:ab:11:d2:15:e9:c6:c6:98:
fe:55:86:ac:35:c3:5c:19:c9:bd:52:fc:57:19:ef:
43:c4:0b:28:1a:ad:c5:b9:03:f2:e2:dc:4d:61:41:
41:6d:9f:74:49:ce:c8:b6:9e:49:ef:18:05:7a:06:
1e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:34:71:6F:14:93:BD:B4:35:98:C5:D8:C5:A5:0D:0B:10:1B:79:0E
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/IjRxbxSTvbQ1mMXYxaUNCxAbeQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.5.0/24
Signature Algorithm: sha256WithRSAEncryption
95:84:c5:3c:6f:8e:38:21:53:7f:89:86:e1:0d:b4:c3:22:14:
e6:30:8d:52:53:94:d1:83:33:81:c3:d2:9e:77:3d:9d:ca:6a:
cc:23:45:9a:40:3e:5c:4b:55:13:b2:49:38:54:e6:d4:fc:d3:
1a:b9:1b:c0:7c:16:f3:e6:cb:26:94:e5:68:52:4e:b5:bb:e5:
d9:48:50:4e:02:c4:06:c5:82:c7:90:fe:eb:fd:4e:7c:7c:05:
eb:bd:26:d4:70:bf:52:97:f0:dc:e1:a5:41:4e:2c:3b:2b:aa:
84:46:2c:27:be:e2:14:7a:9f:79:50:78:73:db:eb:b6:5f:d4:
10:1a:16:30:9f:ac:ca:c4:58:ae:65:a2:82:bc:d2:cf:ab:41:
1e:8a:57:a2:2b:ab:3d:2e:d8:5b:47:3a:99:06:79:3a:93:4e:
a0:80:63:84:fc:d1:63:a9:94:eb:d1:02:38:41:17:a4:cc:05:
4e:21:45:fc:e9:b6:3f:58:b3:7f:a4:24:32:91:93:e7:b2:ef:
04:37:f8:1b:e7:07:03:a2:43:22:3c:bc:d0:18:99:b3:ec:b8:
fe:9d:ac:60:6b:d1:4e:84:33:7d:2a:3c:3e:ce:be:79:27:cf:
10:e5:e6:24:c3:b2:38:44:06:f5:e8:02:55:0e:37:4e:5f:54:
62:c4:e5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:12 2024 by rpki-client on console-ams.rpki-client.org