Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/vKa54mpmjmTb9v35WXMnbO_Gt9U.roa
File: vKa54mpmjmTb9v35WXMnbO_Gt9U.roa (raw, json)
Hash identifier: X1FNDqU4QOz9zIXmgtVgJHOEzEYo1r3i8X12RUkmaLU=
Subject key identifier: BC:A6:B9:E2:6A:66:8E:64:DB:F6:FD:F9:59:73:27:6C:EF:C6:B7:D5
Certificate issuer: /CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Certificate serial: 01856C782FCE421FE1896F3C8D21133A594A
Authority key identifier: 0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/vKa54mpmjmTb9v35WXMnbO_Gt9U.roa
Signing time: Sun 01 Jan 2023 08:34:53 +0000
ROA not before: Sun 01 Jan 2023 08:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21441
IP address blocks: 193.109.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:2f:ce:42:1f:e1:89:6f:3c:8d:21:13:3a:59:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Validity
Not Before: Jan 1 08:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bca6b9e26a668e64dbf6fdf95973276cefc6b7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fc:cf:ab:e2:9b:ff:b8:f2:a0:0b:3e:10:31:
98:21:f6:f0:ba:de:eb:6e:49:cf:a6:2c:6a:0c:f7:
b9:08:c3:f0:bd:91:e8:2d:06:4a:e7:b4:c6:d5:a2:
dd:e6:7d:6f:41:f6:7b:94:bf:c2:de:c6:9c:53:c5:
fa:ff:b0:24:1b:10:56:15:b0:0b:f4:65:b7:27:31:
3a:49:a5:a2:37:00:5f:cb:46:81:2f:39:0d:6c:ab:
be:54:58:d1:01:5a:74:69:84:e8:dc:5a:95:c4:27:
ec:99:9d:3e:15:87:ec:96:6c:ad:bf:e5:5e:78:71:
fb:99:8c:05:a7:7c:8f:25:bf:9e:3d:26:9a:c4:d7:
99:c6:24:c0:6e:12:85:e3:0d:af:65:a8:77:11:a3:
c4:27:3a:4d:d4:45:52:17:11:aa:e4:9b:67:4a:72:
56:f2:ef:f1:35:2e:11:ee:3a:5e:08:77:28:15:de:
5b:6a:07:31:30:56:03:83:1b:4e:af:ba:4a:05:c0:
74:64:4d:3b:1a:c4:32:6b:4c:4c:45:0c:12:d9:9a:
04:8e:48:ae:4d:f0:39:e1:ea:52:74:f7:0b:69:9c:
ea:93:71:48:c6:f8:54:17:dd:cd:8c:24:78:b3:2c:
17:f5:41:38:33:8b:a5:bb:c7:86:73:2b:bd:d3:7c:
43:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A6:B9:E2:6A:66:8E:64:DB:F6:FD:F9:59:73:27:6C:EF:C6:B7:D5
X509v3 Authority Key Identifier:
keyid:0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/vKa54mpmjmTb9v35WXMnbO_Gt9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.227.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:10:94:56:a6:4a:db:f3:31:59:27:3d:3f:f7:4c:10:8f:9b:
b0:29:e2:2e:56:8c:62:b6:d0:34:11:12:a3:21:71:3b:9e:06:
f3:b8:f3:7d:7e:74:38:d8:c4:5a:d3:f1:5a:82:11:91:7c:4d:
f4:56:0b:7a:e6:c5:d2:07:e0:bc:4d:31:d6:83:f4:34:6c:c1:
a0:db:03:cf:59:67:64:6e:b6:2a:e6:e0:bd:dc:d6:4f:4d:6d:
eb:58:5d:4f:2a:61:07:cf:d6:1e:66:ef:05:12:7f:71:c8:9b:
f6:a8:5d:1c:2a:f7:a8:a4:24:60:a2:d0:1f:e7:40:ff:bb:69:
50:d4:d4:d8:b2:47:37:77:74:d9:2c:7d:26:41:04:0c:a8:93:
c6:b2:57:cc:5b:25:5f:f4:23:f8:19:9e:ed:06:8c:22:f0:20:
00:af:6c:47:b1:10:c0:e6:62:98:8e:7a:1d:d2:df:92:d7:0c:
cb:5b:2e:64:c7:7f:5c:e1:29:55:93:a0:a3:1b:b6:24:b8:39:
99:fe:a4:02:9a:a6:ae:16:76:95:c9:7b:56:41:f3:71:dc:04:
ac:fe:24:82:06:de:c4:28:b8:6e:93:ee:e0:2b:52:60:d4:6a:
f2:fe:1d:70:f9:e2:e3:bc:54:84:81:3b:85:63:11:31:8a:19:
f8:74:cf:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:47 2024 by rpki-client on console-ams.rpki-client.org