Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/B-i6ejJBBdpC1GxjsKQIyruv1Ro.roa
File: B-i6ejJBBdpC1GxjsKQIyruv1Ro.roa (raw, json)
Hash identifier: ne2dznvNkQDWWlRf/JpM0J25z5EVi/f287/p7lRy1GU=
Subject key identifier: 07:E8:BA:7A:32:41:05:DA:42:D4:6C:63:B0:A4:08:CA:BB:AF:D5:1A
Certificate issuer: /CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Certificate serial: 01856C4A4ADBC52ABB3D951FEF2A0AC9E3CB
Authority key identifier: C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/B-i6ejJBBdpC1GxjsKQIyruv1Ro.roa
Signing time: Sun 01 Jan 2023 07:44:46 +0000
ROA not before: Sun 01 Jan 2023 07:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15576
IP address blocks: 193.138.212.0/22 maxlen: 22
2001:67c:18c4::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:4a:db:c5:2a:bb:3d:95:1f:ef:2a:0a:c9:e3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Validity
Not Before: Jan 1 07:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07e8ba7a324105da42d46c63b0a408cabbafd51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:38:eb:c1:ec:76:a8:c3:b3:56:c8:e5:24:ff:
41:3c:be:4e:3e:14:03:1d:ec:4a:25:1c:f5:d8:60:
25:a5:65:0b:61:2e:39:ba:2d:b9:c0:3d:d3:69:b7:
00:cc:5a:ae:f9:c6:0f:3a:68:67:d1:e6:fa:7d:b2:
91:27:c6:16:8a:51:66:00:a4:ba:99:5d:cc:9a:f5:
88:9c:28:d6:9f:5d:5d:f3:49:2b:eb:18:ed:33:ff:
f0:8c:ee:10:52:80:e5:08:bd:dd:76:9a:26:98:37:
32:f2:34:22:e5:45:46:a3:74:e2:eb:db:e2:c3:82:
24:4f:21:94:97:7c:93:43:03:1b:2a:37:7d:b8:75:
49:5d:4c:01:cd:dd:cb:f2:c2:2d:50:b7:d8:35:f7:
84:f9:75:0c:e4:51:a5:bd:83:ac:c7:6e:19:ea:42:
3d:04:74:b2:62:1a:13:5e:53:12:2a:98:82:8d:71:
7f:f4:2d:49:7b:1e:3f:1d:8c:a3:42:b3:00:64:66:
25:d8:49:57:59:52:62:15:08:1a:2c:82:3f:84:61:
df:87:c1:d7:8c:5e:bc:3f:45:dd:4b:d3:eb:74:35:
cc:96:3f:d5:ea:63:e6:13:60:ab:82:d3:07:78:94:
c2:9d:c5:b4:84:fe:5a:de:0b:3c:f1:89:ba:73:8e:
8b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E8:BA:7A:32:41:05:DA:42:D4:6C:63:B0:A4:08:CA:BB:AF:D5:1A
X509v3 Authority Key Identifier:
keyid:C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/B-i6ejJBBdpC1GxjsKQIyruv1Ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.212.0/22
IPv6:
2001:67c:18c4::/48
Signature Algorithm: sha256WithRSAEncryption
61:5c:1c:a6:cd:42:41:31:bc:fb:88:ac:de:21:d5:aa:cf:41:
b1:17:30:8c:a4:1c:cf:41:0a:18:ca:08:66:7f:bf:f7:e8:45:
2c:96:57:1a:c6:a2:79:4b:18:0b:c3:99:49:5a:d9:56:13:a1:
f2:07:cc:88:fe:21:3e:80:af:14:74:66:bc:4a:67:f3:67:5b:
3b:b9:59:b5:18:33:00:77:3e:ca:84:58:ce:c7:b4:41:ae:7f:
19:34:27:d9:ee:6a:9a:8f:0d:86:35:d8:c9:33:a2:a0:15:3d:
db:be:4c:f8:9c:82:13:9f:3f:b4:55:80:23:61:45:e1:ee:b8:
01:a0:b4:69:1d:57:9a:60:9d:c0:9b:ea:9e:1b:65:9b:95:81:
57:c3:a4:6d:8b:fb:a9:5c:95:21:18:9a:4a:5a:0f:8e:32:59:
09:74:85:5f:56:6f:b7:f7:bc:7b:d0:8d:09:a9:84:7a:a9:0e:
56:c0:8b:e7:1c:d7:a4:62:b0:de:0b:67:f1:10:50:c4:a7:95:
4f:be:79:1f:fd:18:f2:3b:4a:78:b3:7a:8a:ff:36:66:16:fc:
6a:74:69:8a:fc:d2:ef:f7:28:42:b7:65:2e:df:cf:2d:b3:11:
36:6f:70:5d:7d:a7:3c:17:13:91:c1:37:be:2f:12:e9:9d:cb:
86:de:cb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-fra.rpki-client.org