Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/b0KUDRFiSn8U07HKZz0TsMOcYFc.roa
File: b0KUDRFiSn8U07HKZz0TsMOcYFc.roa (raw, json)
Hash identifier: WHNQIdMma1NGmMRz2vVtsrFtYG/PyBB9OMe4Nmmehgk=
Subject key identifier: 6F:42:94:0D:11:62:4A:7F:14:D3:B1:CA:67:3D:13:B0:C3:9C:60:57
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 0189D05CA1717698ABF547428556E21B0648
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/b0KUDRFiSn8U07HKZz0TsMOcYFc.roa
Signing time: Mon 07 Aug 2023 14:17:58 +0000
ROA not before: Mon 07 Aug 2023 14:17:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210538
IP address blocks: 193.164.4.0/24 maxlen: 24
193.164.7.0/24 maxlen: 24
193.164.5.0/24 maxlen: 24
193.164.6.0/24 maxlen: 24
93.177.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 14:53:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:5c:a1:71:76:98:ab:f5:47:42:85:56:e2:1b:06:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Aug 7 14:17:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f42940d11624a7f14d3b1ca673d13b0c39c6057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2d:1b:67:50:51:93:f1:e6:a7:a0:31:9f:4f:
d0:49:93:24:25:44:c3:1f:68:22:d8:e5:01:a1:32:
43:6b:2b:94:26:e2:1b:e2:61:2c:9b:0a:7d:11:44:
f7:7f:09:3b:56:33:c3:98:7e:bf:5e:ea:b0:33:e2:
43:8a:b6:9b:1c:d5:80:36:d7:26:1c:50:c0:53:7d:
02:cb:0d:14:34:9f:d6:5b:bb:7d:f8:db:7d:2e:a1:
9c:c4:75:b9:d5:c4:37:08:42:b7:6c:71:80:5e:a2:
e0:fe:bd:df:be:75:99:87:c6:19:6d:a8:31:ce:22:
60:71:f3:8a:c2:0d:ee:a8:cd:63:07:32:ab:8a:27:
3a:58:5f:be:57:2b:8c:2b:51:b6:0c:71:b6:01:bd:
97:03:b3:e6:61:19:a3:8e:41:1d:61:c0:35:22:30:
65:5a:d2:7c:a8:8c:cc:72:f4:ae:25:be:ab:66:e4:
d1:95:1f:cd:10:b2:d0:e5:a5:46:8d:b8:24:b8:7d:
07:99:92:34:4a:bd:42:dc:45:b8:f5:f5:dd:dd:86:
10:2e:83:09:af:c5:94:2d:e3:32:ba:1c:d8:fe:ef:
e3:58:9f:22:07:10:2e:06:a2:ea:60:f0:1a:de:b7:
ca:76:82:b4:ad:58:61:d5:89:84:8d:5a:a0:fc:c5:
5e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:42:94:0D:11:62:4A:7F:14:D3:B1:CA:67:3D:13:B0:C3:9C:60:57
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/b0KUDRFiSn8U07HKZz0TsMOcYFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.102.0/24
193.164.4.0/22
Signature Algorithm: sha256WithRSAEncryption
83:ca:dd:fb:e1:ce:4c:20:0b:d3:6d:28:a0:d3:f9:23:07:b7:
44:4e:a8:4b:92:14:89:5d:4c:71:c7:af:10:0c:cd:a9:de:f4:
04:f0:ee:89:27:ce:25:23:66:80:6e:6a:ad:94:e7:79:88:76:
2f:b2:08:08:03:df:7c:6e:d9:47:21:90:9e:20:3f:30:82:8f:
0a:18:5c:b8:e0:e3:b9:38:8d:9f:23:59:93:d1:d6:a0:0e:15:
6b:0e:37:8d:0f:12:df:8f:e5:5a:90:9a:b7:42:d3:8c:8a:36:
63:7f:bf:d3:02:a1:30:f7:fb:68:c1:ba:b3:8a:ef:9d:79:dc:
f9:16:50:5b:ae:5f:ce:64:70:ef:f4:82:3d:40:08:5c:ae:9c:
79:d7:62:ad:19:6a:06:cc:c8:e7:27:30:82:8c:f1:b5:4f:f9:
2c:16:4a:a0:b2:0f:bb:99:20:da:b8:24:3e:d6:ff:64:3a:9c:
1a:3a:0c:7e:2c:d8:26:7b:1e:9d:62:1a:45:1a:ab:4b:c6:71:
ef:67:3a:e4:81:67:45:5a:55:0b:fd:e6:19:4a:5a:96:bc:ef:
eb:2a:29:65:fc:c4:d6:5b:0a:26:df:7a:90:59:65:c2:cc:40:
95:c3:c6:e5:3b:80:47:7b:d5:42:3b:6c:8d:96:66:08:1b:a1:
78:05:50:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:12 2024 by rpki-client on console-ams.rpki-client.org