Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/IuPfcwE2v1nVOJ876BDevMx9rB0.roa
File: IuPfcwE2v1nVOJ876BDevMx9rB0.roa (raw, json)
Hash identifier: pFJmLQd2t2HIWnJz0FFyh56KYknT5HxUkgP4zEzPG+M=
Subject key identifier: 22:E3:DF:73:01:36:BF:59:D5:38:9F:3B:E8:10:DE:BC:CC:7D:AC:1D
Certificate issuer: /CN=f89e229f860b058d23fd28a2926161b8786330c6
Certificate serial: 018F6245B293E46DCE775C58B5DFEB601F7A
Authority key identifier: F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/IuPfcwE2v1nVOJ876BDevMx9rB0.roa
Signing time: Fri 10 May 2024 11:31:25 +0000
ROA not before: Fri 10 May 2024 11:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58092
IP address blocks: 193.102.78.0/24 maxlen: 24
193.102.79.0/24 maxlen: 24
194.62.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Sep 2024 14:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:62:45:b2:93:e4:6d:ce:77:5c:58:b5:df:eb:60:1f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89e229f860b058d23fd28a2926161b8786330c6
Validity
Not Before: May 10 11:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22e3df730136bf59d5389f3be810debccc7dac1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8b:85:e0:1a:dc:56:37:d5:40:04:d7:48:da:
3a:a5:bf:2f:d3:73:01:c1:c0:ce:dc:d3:1d:0d:85:
f9:8e:41:cc:eb:f6:2f:52:9a:44:87:79:46:15:16:
e3:6e:a7:c0:18:fc:e0:b6:22:a2:de:20:e9:99:47:
42:0a:19:10:22:ee:e3:64:1a:5e:a3:72:af:a7:3c:
58:49:94:7a:31:67:51:cd:43:b0:46:12:33:c0:d3:
e6:43:88:ff:54:a1:7b:2f:f0:33:72:ea:48:44:db:
57:16:12:05:01:b3:be:26:61:7b:67:5e:c7:60:ab:
ec:fa:ff:19:4f:84:22:14:b3:ec:b3:64:28:19:e5:
9b:ce:dc:ac:3f:b9:00:0e:ba:95:e1:15:10:53:25:
c5:25:a1:56:c9:54:c7:aa:28:ce:c9:f7:50:ec:64:
12:04:4e:ac:66:6c:b8:0a:48:74:7c:e0:0e:05:5e:
22:85:b6:62:9d:6f:78:ce:13:53:2b:48:9e:df:0e:
0b:2f:55:78:e7:68:71:de:13:b7:f8:97:fd:18:b5:
ff:0e:47:b8:85:2c:10:90:ba:ab:ae:f7:a4:a2:91:
4d:49:5d:7a:91:ec:22:e4:60:0e:ee:1e:0c:06:cf:
2a:df:e6:1a:b4:09:88:ea:b0:15:85:64:af:73:32:
43:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E3:DF:73:01:36:BF:59:D5:38:9F:3B:E8:10:DE:BC:CC:7D:AC:1D
X509v3 Authority Key Identifier:
keyid:F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/IuPfcwE2v1nVOJ876BDevMx9rB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.102.78.0/23
194.62.20.0/24
Signature Algorithm: sha256WithRSAEncryption
06:83:51:f2:dd:0c:62:0c:5e:0f:4d:cc:52:e4:59:bf:4d:94:
75:b8:2f:e9:e7:a8:b6:d9:6e:f7:c2:e9:1d:37:7f:ba:f1:c0:
26:cf:d3:52:d8:34:9a:15:15:e7:db:4a:39:c4:15:ba:2d:5b:
91:1a:cb:6c:c9:f2:fb:ff:99:58:79:7e:f5:fe:84:12:bf:36:
55:c7:2d:e4:4d:92:1a:b2:57:46:c0:58:06:f1:20:94:0f:c3:
7b:ea:d3:a3:8d:7b:dd:7e:07:ae:0d:7f:d0:94:a6:20:db:8d:
8e:13:ae:cd:4e:f7:ab:57:b3:49:ab:22:ee:7b:c4:58:af:61:
65:f2:ac:c0:c9:88:af:71:c3:56:fa:78:e7:0c:85:cd:76:7a:
bf:21:09:17:d1:21:97:69:85:91:67:49:08:1e:83:3e:00:22:
bd:85:40:a1:5f:99:34:6c:79:42:fa:46:ee:f8:3a:7b:66:de:
43:e3:3c:f3:f5:1d:b3:2f:4c:c5:0a:db:99:83:d5:e9:f5:6e:
38:d4:56:5d:3b:35:d7:3f:fe:bd:b5:43:54:01:91:64:86:9c:
d1:f7:ff:9d:f5:e1:cd:43:13:fe:bd:f4:8e:b2:b3:92:7e:72:
36:7e:67:8b:61:ba:20:96:d3:02:89:5d:ab:27:7b:af:70:d6:
70:70:4a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 20:31:48 2024 by rpki-client on console-ams.rpki-client.org