Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/_-AgCveWZgx3BhlCPNy7Fo_yvPo.roa
File: _-AgCveWZgx3BhlCPNy7Fo_yvPo.roa (raw, json)
Hash identifier: WbR6Hgy5U5Mlii1NycXJJoGPN+tp0mxuTaUZR1TbLQk=
Subject key identifier: FF:E0:20:0A:F7:96:66:0C:77:06:19:42:3C:DC:BB:16:8F:F2:BC:FA
Certificate issuer: /CN=7e5555f1a2cee89b7134656086f054d796353c1e
Certificate serial: 01866F066E1FC09B7E1D105EE727DF6C2B5C
Authority key identifier: 7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/_-AgCveWZgx3BhlCPNy7Fo_yvPo.roa
Signing time: Mon 20 Feb 2023 13:32:17 +0000
ROA not before: Mon 20 Feb 2023 13:32:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12213
IP address blocks: 193.93.84.0/22 maxlen: 22
83.142.64.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6f:06:6e:1f:c0:9b:7e:1d:10:5e:e7:27:df:6c:2b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5555f1a2cee89b7134656086f054d796353c1e
Validity
Not Before: Feb 20 13:32:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffe0200af796660c770619423cdcbb168ff2bcfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fb:23:15:89:6e:56:bc:17:83:aa:cb:4e:95:
97:1e:e8:5c:cc:2c:b8:6d:cb:e0:52:a9:dc:08:60:
3d:09:58:06:45:09:e0:a6:7c:cf:c6:fa:2f:24:1a:
d9:75:64:74:eb:a2:30:41:37:ab:48:b1:0e:fb:5a:
53:87:29:41:b3:36:45:d2:0d:2b:22:73:6f:e4:cc:
82:1e:66:b5:37:0f:58:aa:d6:56:4e:b9:15:d1:7b:
db:18:d5:b2:d5:93:96:d4:d7:d7:d3:8c:5c:17:da:
be:2e:04:a2:33:33:0f:f1:1e:48:1f:d8:07:51:52:
5a:8d:48:b8:05:8d:54:3e:5a:a3:58:17:ca:c0:08:
4f:00:1a:ee:b3:cd:ec:a7:7b:37:22:f6:89:95:0c:
a1:fa:49:75:f1:7a:4b:6f:4f:6b:c4:3d:6e:fd:97:
70:24:31:1a:e3:82:ff:34:a6:42:5a:9e:ba:2c:ac:
2f:23:3d:4c:d9:b3:de:50:26:2d:14:7c:6c:42:4d:
2b:25:02:93:5f:0e:28:14:f3:16:40:78:a0:07:b3:
56:26:51:e7:5d:44:4f:3f:39:8c:28:50:8d:3f:88:
fb:50:e0:f7:3d:02:d6:d6:40:dc:8a:b6:94:9a:05:
fa:4f:64:a5:64:dd:1d:0a:f0:dc:a3:48:8d:67:b5:
1f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E0:20:0A:F7:96:66:0C:77:06:19:42:3C:DC:BB:16:8F:F2:BC:FA
X509v3 Authority Key Identifier:
keyid:7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/_-AgCveWZgx3BhlCPNy7Fo_yvPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.64.0/21
193.93.84.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:53:10:4d:e5:c3:aa:37:0f:53:d2:fe:d8:82:a7:9c:20:54:
5a:2d:c5:20:9c:b5:71:93:91:21:91:80:f9:fe:1a:02:8f:64:
d4:94:b7:ee:4d:e1:8e:5b:ed:e3:c8:cd:ea:34:c1:62:e5:31:
7e:92:ed:a8:1d:74:69:ca:14:2d:a4:fd:d9:44:c8:01:36:bb:
ec:96:da:c5:d9:53:e5:91:e9:e9:e7:83:bd:83:e3:4b:75:a2:
1e:94:10:c1:81:f1:83:ef:15:bd:b5:d9:98:65:4b:b4:ef:d9:
fc:12:d6:d8:56:35:0c:a0:50:0b:66:57:8e:07:10:0f:cc:ee:
93:72:23:f7:3d:67:be:2e:e5:54:00:e6:f5:53:42:3f:45:83:
6d:89:8f:a0:26:9b:2b:ef:08:12:18:10:47:f6:57:72:b1:f2:
0a:d9:52:bf:17:b4:77:92:0b:cd:84:1c:cd:64:e0:61:bc:6b:
14:fd:bf:d3:65:26:f3:82:76:59:b4:eb:f3:86:3f:2c:a6:dd:
85:c4:9a:7d:d5:f8:97:90:8d:eb:b6:59:2d:77:6c:13:a6:ea:
d2:54:48:3e:b6:f6:56:3f:37:c2:90:00:ba:37:8a:e6:5b:79:
6e:fb:db:c0:cb:2a:3e:ae:6e:a4:e5:3c:d3:c1:4a:96:35:0d:
c4:7d:7c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:57 2024 by rpki-client on console-fra.rpki-client.org