Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/uT7FgIJlgVKkG-SSBsDnRR_WSa0.roa
File: uT7FgIJlgVKkG-SSBsDnRR_WSa0.roa (raw, json)
Hash identifier: O1oLzFlG71ji3p8dgBNmnPV3NAa4bxsV3wogn3kJZAg=
Subject key identifier: B9:3E:C5:80:82:65:81:52:A4:1B:E4:92:06:C0:E7:45:1F:D6:49:AD
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0185719E7EFAF16BA030213AAC09AFF3658F
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/uT7FgIJlgVKkG-SSBsDnRR_WSa0.roa
Signing time: Mon 02 Jan 2023 08:34:50 +0000
ROA not before: Mon 02 Jan 2023 08:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44704
IP address blocks: 193.232.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:7e:fa:f1:6b:a0:30:21:3a:ac:09:af:f3:65:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 08:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b93ec58082658152a41be49206c0e7451fd649ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2e:12:bf:3d:47:42:84:7d:48:69:bd:75:6e:
2a:46:20:e6:18:3d:e4:ac:dd:ea:48:12:d8:b8:fd:
8c:d7:b8:50:52:5c:dc:0b:50:85:82:21:ad:e5:00:
bf:ff:af:66:39:dc:d2:a3:16:90:e4:db:10:c4:88:
e3:42:7a:a2:7e:d6:0c:e5:fc:ea:48:c7:1f:93:43:
79:30:01:cd:9a:22:d0:dd:4e:df:3b:1c:69:f3:ab:
8d:74:a3:a8:b5:72:83:18:06:17:cc:6e:01:e1:3b:
c6:a7:18:78:94:c8:e4:bc:38:51:57:2a:91:8d:68:
db:3a:ca:d7:42:bf:e9:b0:fc:03:8f:13:1a:8d:12:
9b:64:df:75:d0:bd:fe:84:2e:87:78:a9:a6:b4:18:
e5:82:21:fc:e0:65:98:7a:16:18:8d:b8:e6:51:a4:
1c:82:23:15:73:f6:52:9d:32:30:91:76:29:05:43:
5c:af:03:b6:20:51:4a:f5:76:5e:7b:bd:ba:1a:2e:
25:3c:98:4c:2d:00:5c:ab:42:bb:f9:33:44:54:20:
06:d5:80:02:f0:b3:38:e0:47:cf:e7:e3:50:35:b4:
fc:80:86:bc:62:6e:18:a2:0c:a0:4c:2e:a8:da:e9:
75:af:f7:24:84:a6:51:30:76:89:64:3e:3a:2a:ad:
84:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3E:C5:80:82:65:81:52:A4:1B:E4:92:06:C0:E7:45:1F:D6:49:AD
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/uT7FgIJlgVKkG-SSBsDnRR_WSa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.108.0/24
Signature Algorithm: sha256WithRSAEncryption
40:a6:e7:c7:35:44:1a:c5:7e:4b:f5:ec:22:9a:f0:c6:f9:d0:
03:dc:97:6a:af:ef:3e:f8:98:a9:83:b7:c7:5b:34:0a:9b:55:
6e:b9:9b:eb:b5:fe:95:6a:f9:3c:08:07:fd:21:5d:f9:5b:48:
45:df:08:77:04:1f:26:dc:3c:85:fd:21:e4:38:61:f5:80:a7:
95:d4:40:84:6c:e3:35:12:e6:f9:b1:c3:88:26:d1:96:8c:a4:
22:f5:11:c7:5b:c6:bc:40:21:fe:17:e1:09:6e:4e:3c:c9:ec:
9b:5e:9a:d0:08:20:c4:0c:4f:fb:2e:6f:c7:ec:ba:21:82:8e:
9c:91:18:63:14:13:30:b0:e6:6e:ac:83:4a:eb:3d:88:15:a5:
e0:77:fc:80:75:24:a9:d2:97:e2:9b:78:53:36:67:7f:62:67:
53:52:43:16:28:fd:91:32:e5:16:d4:0b:9e:1f:5d:8f:8c:d2:
c4:37:ae:20:55:71:cc:c8:37:24:de:12:6a:74:ee:eb:e0:01:
70:8e:cb:36:0b:c5:00:58:f0:4b:ba:24:de:7a:2f:1a:4f:6e:
b4:7b:90:98:ca:a3:a5:a2:38:85:36:08:4e:9b:9b:9c:25:9f:
d0:dd:08:a8:e7:8e:9b:42:b1:33:24:54:9f:75:8e:47:71:9f:
e5:b0:87:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org