Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/75e22e-2772-4616-a989-e2344270d202/1/Ox2wEQEjsT7LydqZpk2QRHSjWu8.roa
File: Ox2wEQEjsT7LydqZpk2QRHSjWu8.roa (raw, json)
Hash identifier: vXxE0FCsONq3v09tbvZfv5Vmi1MDfmfJuifiejPI/PU=
Subject key identifier: 3B:1D:B0:11:01:23:B1:3E:CB:C9:DA:99:A6:4D:90:44:74:A3:5A:EF
Certificate issuer: /CN=2d10bd9443404ce9b34c9e2ead0f857f7c5f77bc
Certificate serial: 018964C05998518FCA276494E1A7466A6D35
Authority key identifier: 2D:10:BD:94:43:40:4C:E9:B3:4C:9E:2E:AD:0F:85:7F:7C:5F:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRC9lENATOmzTJ4urQ-Ff3xfd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/75e22e-2772-4616-a989-e2344270d202/1/Ox2wEQEjsT7LydqZpk2QRHSjWu8.roa
Signing time: Mon 17 Jul 2023 16:47:54 +0000
ROA not before: Mon 17 Jul 2023 16:47:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 193.104.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:59:98:51:8f:ca:27:64:94:e1:a7:46:6a:6d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d10bd9443404ce9b34c9e2ead0f857f7c5f77bc
Validity
Not Before: Jul 17 16:47:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b1db0110123b13ecbc9da99a64d904474a35aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:74:a5:ad:b8:25:13:e9:f7:7c:32:73:36:6c:
fb:b6:65:26:52:8f:e7:ff:b3:2a:bc:27:b1:62:0c:
0e:07:fc:d8:d8:1e:e2:e8:9d:32:95:8d:ed:dd:15:
1a:e8:b8:88:c8:62:25:14:45:af:ae:e5:a6:08:eb:
ae:25:72:3d:db:c6:ca:06:81:92:c4:f3:62:50:cd:
55:c2:6d:6f:e4:4e:33:f3:f9:4e:2f:a5:3f:e9:90:
15:16:e7:a1:b8:a0:50:e4:2d:4c:d9:7b:72:a2:af:
fe:64:b8:e9:fa:63:38:74:a8:e9:4d:13:63:2a:c2:
66:88:e0:0f:6f:a4:b7:cc:cf:9d:79:4f:f9:b8:94:
c4:26:29:2d:d1:2d:c2:38:c4:bb:8d:ff:de:b9:ab:
d7:a3:2b:d0:c4:2d:16:a2:89:0f:8b:fb:98:ec:79:
9b:7b:01:cf:32:9d:fd:a5:98:81:48:70:2b:39:f5:
e8:ac:35:be:d7:39:66:5a:9e:af:eb:70:da:bc:e3:
89:c8:d1:4a:d6:5e:81:17:cf:82:89:c8:4c:9b:3b:
43:0a:dc:aa:ae:6d:7f:a1:1d:b7:aa:21:87:d9:15:
13:7d:a7:ff:82:0f:69:10:42:a9:1c:3a:28:87:2a:
35:67:fb:35:b8:c6:78:db:3c:5d:08:55:dd:f1:4b:
20:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1D:B0:11:01:23:B1:3E:CB:C9:DA:99:A6:4D:90:44:74:A3:5A:EF
X509v3 Authority Key Identifier:
keyid:2D:10:BD:94:43:40:4C:E9:B3:4C:9E:2E:AD:0F:85:7F:7C:5F:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRC9lENATOmzTJ4urQ-Ff3xfd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/75e22e-2772-4616-a989-e2344270d202/1/Ox2wEQEjsT7LydqZpk2QRHSjWu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/75e22e-2772-4616-a989-e2344270d202/1/LRC9lENATOmzTJ4urQ-Ff3xfd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.177.0/24
Signature Algorithm: sha256WithRSAEncryption
76:8f:de:e3:6d:57:21:14:53:15:3b:b0:4f:45:79:f3:6f:2c:
cb:d2:eb:b0:f7:43:d4:c1:af:2f:92:48:6c:85:41:9d:bd:66:
e9:85:f5:19:24:4e:dd:ce:0e:5e:69:9b:85:50:78:92:87:b9:
69:b7:47:2b:a0:c8:eb:13:ea:7b:42:ae:b0:0b:91:20:39:dd:
c4:88:bb:a1:bd:89:08:f3:b0:3d:f1:86:ed:b6:5a:f5:fd:59:
0c:a8:5d:82:a0:e7:47:1f:59:c3:f6:41:e0:4c:6c:2b:d0:7e:
6d:de:0d:69:5b:d2:0d:bb:c2:4d:e1:8b:ef:2f:c0:4e:1c:ef:
c2:2a:e3:7f:95:1c:79:d4:17:22:fa:6e:27:93:80:c2:9e:7f:
d4:d5:b9:c3:20:fc:a6:64:c6:53:b3:c3:31:3c:62:2b:40:10:
f4:2b:f7:63:63:cd:c5:6b:be:77:6d:c7:9e:06:53:30:cb:11:
1a:0d:8f:d4:f5:67:b7:fb:34:ba:18:81:d7:a8:9e:1e:3b:5c:
37:be:1c:d4:f3:af:3e:12:bc:a3:89:53:e1:5f:d4:ac:d4:5f:
a9:ca:71:9c:c5:59:3f:73:fa:ac:f6:09:cc:99:d3:5d:fe:d1:
ac:7d:5a:84:8b:9f:33:64:0e:ab:aa:74:2d:35:df:4d:70:93:
3f:5f:ac:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:00 2024 by rpki-client on console-fra.rpki-client.org