Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xAGhbJjMx96Ds1wvqhlVH5H7R_4.roa
File: xAGhbJjMx96Ds1wvqhlVH5H7R_4.roa (raw, json)
Hash identifier: FukylxBQywYKG5UHXDdvbFmCTk/cv3L+xmk6huzLJF8=
Subject key identifier: C4:01:A1:6C:98:CC:C7:DE:83:B3:5C:2F:AA:19:55:1F:91:FB:47:FE
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0185720C5A53A7170456211CE36FE7BFADCC
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xAGhbJjMx96Ds1wvqhlVH5H7R_4.roa
Signing time: Mon 02 Jan 2023 10:34:50 +0000
ROA not before: Mon 02 Jan 2023 10:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212946
IP address blocks: 193.41.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:5a:53:a7:17:04:56:21:1c:e3:6f:e7:bf:ad:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 2 10:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c401a16c98ccc7de83b35c2faa19551f91fb47fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:0b:51:96:4e:38:1f:5f:be:e5:ee:26:ca:
8c:3b:f8:7d:a0:e4:1a:31:80:1c:1a:91:03:54:4c:
8d:fa:68:64:a7:f9:61:99:46:fa:d1:40:bf:ec:3d:
69:1e:a2:2e:c4:2a:bd:0a:d8:94:76:49:66:7f:81:
32:7e:c2:ea:66:f4:ca:3b:7d:80:fb:20:20:51:db:
bf:ae:72:2e:cd:10:68:d1:62:5c:89:10:06:d1:0c:
36:6b:f8:1f:9d:29:9d:c9:11:67:98:a2:af:59:d6:
0c:3a:30:b1:37:52:04:42:f7:a0:86:76:e1:89:a0:
f5:dc:3d:03:ea:64:b5:62:2e:c9:b3:18:17:3a:22:
06:b7:ae:2c:6a:e8:4d:23:3d:8c:e0:54:18:87:db:
ab:4d:c2:76:56:fc:0a:00:89:35:49:71:d6:8a:52:
2a:44:ee:00:50:3e:7c:a5:99:3b:8c:1b:be:67:c2:
ee:40:d0:da:6d:f8:04:86:12:20:b2:ef:35:0c:e2:
57:dc:fc:ea:d4:4a:7a:60:9e:58:99:b4:7a:3b:3d:
32:12:f1:33:6d:c2:30:1e:da:6c:4d:8f:31:dd:f4:
33:af:f7:aa:2f:a2:1e:ec:32:d7:14:25:35:2f:3e:
2c:06:c0:7e:85:45:4e:ee:b6:a0:49:96:41:73:d9:
d0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:01:A1:6C:98:CC:C7:DE:83:B3:5C:2F:AA:19:55:1F:91:FB:47:FE
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xAGhbJjMx96Ds1wvqhlVH5H7R_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.217.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:e7:4d:10:60:66:24:e6:ed:6a:11:f1:99:f0:78:3a:ff:27:
02:8c:5f:ab:30:bc:b7:59:72:c2:24:1a:8e:2f:b7:6a:cb:14:
f3:3e:ad:2f:c4:df:d2:bb:aa:8f:9a:99:ca:b1:c4:66:c5:a4:
b5:83:be:f3:73:9e:d9:74:8a:a8:22:df:6c:10:96:28:26:55:
7b:d5:b9:ca:32:15:b9:ff:99:cf:98:88:4a:17:02:14:f9:f3:
1e:d3:8e:22:6c:ed:ea:58:7a:bc:c6:bc:42:36:fe:16:88:4d:
2f:ab:23:1e:cf:91:75:e1:ae:be:8d:43:00:7c:aa:38:fa:97:
a2:ff:6e:f5:97:76:9c:df:b0:d0:77:22:cf:13:89:82:c5:7f:
04:3a:72:33:ec:7f:99:5f:cb:1d:f9:f6:70:71:2e:a2:fc:8d:
e2:12:dc:cf:40:67:f7:af:5f:89:db:2e:02:85:9f:eb:e9:36:
56:30:19:f1:5a:3f:62:cb:8d:76:c6:ea:8e:e7:68:66:8d:cb:
df:78:e9:26:6c:ae:a5:6b:ec:22:aa:63:92:71:fb:39:8d:7e:
6d:38:e3:82:99:e9:23:49:88:e0:c2:69:a2:c7:49:1f:a9:74:
44:12:f3:7d:ef:84:75:79:62:8b:a4:0b:32:3f:52:a7:60:06:
51:73:f0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:25 2024 by rpki-client on console-fra.rpki-client.org