Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/czRx9TfYI3b-nBZSau_O_lUSOvM.roa
File: czRx9TfYI3b-nBZSau_O_lUSOvM.roa (raw, json)
Hash identifier: rhZiWFX1tKr5F3YzEyiKkQi2AoO8rDWl1OiSYTNSwkI=
Subject key identifier: 73:34:71:F5:37:D8:23:76:FE:9C:16:52:6A:EF:CE:FE:55:12:3A:F3
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 01904F07917921D49C8FAC68B918B89A00CA
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/czRx9TfYI3b-nBZSau_O_lUSOvM.roa
Signing time: Tue 25 Jun 2024 10:53:34 +0000
ROA not before: Tue 25 Jun 2024 10:53:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 193.178.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Aug 2024 10:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:07:91:79:21:d4:9c:8f:ac:68:b9:18:b8:9a:00:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Jun 25 10:53:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=733471f537d82376fe9c16526aefcefe55123af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:46:49:0b:4f:87:5a:1a:e3:d5:54:78:7a:65:
63:32:c7:d3:5d:7d:23:62:0d:91:ab:ef:8c:ca:a4:
89:48:41:72:19:d6:d0:3b:86:df:fd:ed:c8:e3:75:
c3:f3:22:56:02:27:67:8a:68:d1:d9:49:f7:d0:81:
9d:ab:bd:74:cd:95:5a:06:93:2f:12:b2:b9:4b:43:
79:e1:98:7a:86:21:b9:71:86:91:9e:57:19:af:77:
bc:1d:cf:be:a4:97:b6:3f:22:80:fb:27:56:99:ab:
2d:b5:94:32:f0:0a:65:d4:00:10:db:04:c6:fc:2f:
ae:ea:62:eb:68:ce:ce:bc:15:7d:57:b2:7d:6b:17:
6a:84:e3:c0:a2:fd:0a:26:3a:09:a4:c2:bb:74:0c:
96:3c:0d:38:d4:0d:40:6b:af:dc:de:31:19:7f:37:
cd:65:14:f4:7a:e7:44:c2:e7:4f:9e:49:79:49:3c:
c2:c8:fe:23:1a:0d:f2:f6:62:98:1d:f2:37:d4:de:
ae:61:b2:13:51:e1:f7:d5:58:58:08:44:25:6c:a7:
d0:62:ce:33:1d:1b:2e:a3:33:a7:8d:e1:77:8a:2e:
b5:59:e8:73:b9:94:0f:9d:fe:a2:f5:66:07:93:9c:
f9:08:b9:ad:26:10:54:d4:2f:11:c7:6d:0e:85:4a:
fd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:34:71:F5:37:D8:23:76:FE:9C:16:52:6A:EF:CE:FE:55:12:3A:F3
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/czRx9TfYI3b-nBZSau_O_lUSOvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.115.0/24
Signature Algorithm: sha256WithRSAEncryption
30:55:7b:a8:05:2f:d7:5c:f4:25:46:8e:e0:27:70:8b:30:a2:
6f:6a:9a:dd:21:e5:ce:68:be:1e:cb:e3:95:31:95:cc:ac:ce:
47:51:01:47:00:ce:75:c4:e9:49:41:f3:54:db:b9:ad:43:af:
24:ac:4b:72:15:a6:53:14:45:42:53:ae:c7:dd:df:a4:a7:1b:
6d:34:4c:50:a5:94:4c:98:09:2d:41:66:f9:7c:95:4d:c3:e5:
36:a4:c0:44:45:3e:4d:41:fd:df:3e:86:ae:25:74:9b:14:5c:
d0:35:22:40:b6:37:ad:b1:9d:cd:c9:6c:df:e1:ee:c6:d3:cd:
f3:ca:75:51:84:82:0f:7c:85:68:83:f6:ed:ff:fe:0a:de:09:
83:68:2c:42:58:75:5c:e4:fa:9c:1b:f7:d5:2c:15:4d:79:a4:
cf:2f:b7:1a:9a:9d:53:70:5e:9c:b2:6f:a3:35:f0:95:81:96:
3e:80:37:f4:16:c8:0d:60:44:1b:f1:51:7a:c2:03:19:e9:cd:
22:a0:9c:08:b9:01:90:e5:ea:fc:fc:d9:8c:de:d2:b2:f2:ab:
da:f9:0c:2d:1c:d6:a0:df:fb:9a:de:6f:f2:1c:83:f6:8d:57:
ba:df:ed:ee:5f:54:9c:3f:27:d7:e6:2d:7b:27:91:04:7e:1e:
a3:57:b2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 12:49:06 2024 by rpki-client on console-fra.rpki-client.org