Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/G8kfZ9ewaY09EiYBpFv_EnTr25o.roa
File: G8kfZ9ewaY09EiYBpFv_EnTr25o.roa (raw, json)
Hash identifier: ojA9TakYHsiUFXyNUavvCFHbrUx2p/Q4qw75R+dEFTU=
Subject key identifier: 1B:C9:1F:67:D7:B0:69:8D:3D:12:26:01:A4:5B:FF:12:74:EB:DB:9A
Certificate issuer: /CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Certificate serial: 01856EAFD85AA34F3B7A3174636E55F36D34
Authority key identifier: 6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/G8kfZ9ewaY09EiYBpFv_EnTr25o.roa
Signing time: Sun 01 Jan 2023 18:54:56 +0000
ROA not before: Sun 01 Jan 2023 18:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12353
IP address blocks: 193.109.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:d8:5a:a3:4f:3b:7a:31:74:63:6e:55:f3:6d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Validity
Not Before: Jan 1 18:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bc91f67d7b0698d3d122601a45bff1274ebdb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:88:55:a1:e0:e7:29:81:d7:f4:f0:1a:43:d3:
d6:47:ca:03:f3:8d:f1:bd:95:f5:2a:67:85:87:ef:
f6:34:71:d0:8b:cb:67:05:fa:10:77:c9:6f:d2:75:
91:5f:79:59:e9:43:c6:3d:ac:9a:65:7e:c6:ad:c9:
c1:ad:ef:7d:21:90:a8:f7:1b:cc:64:51:04:16:e8:
a4:24:d9:d3:94:d8:64:3c:bc:0d:2e:d1:d4:98:18:
7a:7f:b1:2b:e1:e2:ac:6d:3d:7b:7e:45:2d:e4:a5:
df:7c:87:31:ee:ca:36:04:0c:e1:aa:c8:c3:95:e7:
f6:30:ad:34:46:d9:76:36:a6:7d:3b:42:3a:e7:f2:
d9:25:3c:b5:06:ba:6e:c1:06:e4:24:3c:1b:05:02:
a3:75:57:e1:46:db:70:b2:0b:f6:4d:57:e6:54:05:
53:57:bc:64:8e:c3:3c:01:84:6e:c0:73:7a:fe:3c:
f6:c5:ab:40:68:a9:f6:e8:18:4b:82:d7:e3:00:cd:
de:0c:d0:07:7d:8d:d3:4f:47:d8:59:43:36:9b:5e:
44:ca:eb:e5:c1:39:40:bb:b2:89:76:46:56:71:9f:
2b:cf:34:92:47:0b:67:c4:0b:3d:04:e5:96:78:1f:
e3:e0:08:55:ea:aa:43:84:5d:80:83:3c:a8:d0:2c:
22:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C9:1F:67:D7:B0:69:8D:3D:12:26:01:A4:5B:FF:12:74:EB:DB:9A
X509v3 Authority Key Identifier:
keyid:6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/G8kfZ9ewaY09EiYBpFv_EnTr25o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.93.0/24
Signature Algorithm: sha256WithRSAEncryption
18:a5:74:23:f1:36:ec:72:8c:61:13:dd:3c:8a:db:af:f7:a8:
5f:d7:8c:92:f5:bf:5f:ca:e9:17:0f:8e:0a:56:24:b4:b3:bf:
6f:b1:d9:a9:e9:b0:98:46:0e:47:c9:98:01:aa:73:c1:13:55:
54:70:a6:d1:fb:ba:0f:05:51:cc:e0:d4:1c:2d:37:b1:c2:54:
c8:e7:06:d1:ad:b4:e9:85:96:f4:0e:ab:31:44:47:c2:a8:9a:
89:5f:1b:08:3d:2e:b5:db:7d:cb:8a:d4:82:9a:30:56:b3:2c:
be:6e:90:9f:13:c9:e5:11:42:11:d5:42:83:15:a4:fd:33:19:
db:9c:8c:52:67:af:65:ca:a3:92:0c:76:89:c1:ed:3d:d8:9e:
a2:64:78:34:04:0f:ac:df:85:ed:2f:40:fc:1f:12:69:b5:71:
47:2d:47:3d:57:09:9c:99:97:f7:08:5c:00:70:b8:42:ea:69:
fd:89:d1:20:1d:2a:87:bd:a7:5b:3c:ed:ac:ec:d2:fd:9e:19:
85:13:da:0b:25:23:e9:a8:bf:2d:91:b6:1c:6a:68:76:2f:fe:
5c:02:03:74:b0:ad:d0:29:08:8b:a7:57:00:55:4b:dd:97:90:
d2:76:92:fb:4d:07:d1:79:b9:93:de:54:84:e8:13:d8:ae:d9:
15:d6:cd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:32 2024 by rpki-client on console-fra.rpki-client.org