Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/df81FhWNfX-510JxENINWKuFtes.roa
File: df81FhWNfX-510JxENINWKuFtes.roa (raw, json)
Hash identifier: p2GhNJqKTMKKKdYRvMHPC6WdyXG9mIKxkCmU8cyWy4I=
Subject key identifier: 75:FF:35:16:15:8D:7D:7F:B9:D7:42:71:10:D2:0D:58:AB:85:B5:EB
Certificate issuer: /CN=32e658515b1e6a72b99f332669e069e6154f70dd
Certificate serial: 01856C00FC6C300EF04CDCD8FD43670BB633
Authority key identifier: 32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/df81FhWNfX-510JxENINWKuFtes.roa
Signing time: Sun 01 Jan 2023 06:24:41 +0000
ROA not before: Sun 01 Jan 2023 06:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9211
IP address blocks: 193.102.240.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:00:fc:6c:30:0e:f0:4c:dc:d8:fd:43:67:0b:b6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e658515b1e6a72b99f332669e069e6154f70dd
Validity
Not Before: Jan 1 06:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75ff3516158d7d7fb9d7427110d20d58ab85b5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:66:41:ae:39:bd:df:5e:76:be:92:19:ba:67:
7b:0b:2d:16:b5:9b:21:96:d5:6c:4c:31:61:4e:05:
23:1b:df:62:42:1c:1e:9c:3d:d5:9d:5e:d2:c1:9a:
16:40:cf:06:be:4b:58:e0:19:17:e7:45:c6:6a:99:
2c:a7:d3:99:51:e9:15:d2:66:27:f3:92:c9:c5:44:
88:4a:11:17:08:9c:8c:ce:f7:d8:6f:41:83:3e:02:
30:92:65:10:8c:84:32:3c:7b:fc:88:6a:d4:7d:cf:
af:6d:b2:f3:82:66:55:3f:1f:4a:41:2a:ba:a2:90:
79:86:28:7a:66:aa:74:10:e8:26:a7:89:79:1a:92:
3e:3f:43:7a:9d:92:7a:7b:cf:89:b6:f2:90:81:cb:
2e:9e:3f:3a:7e:09:c3:3d:82:37:6b:21:66:05:8d:
1e:29:80:f7:ba:ae:4e:e1:e8:04:6c:65:3c:26:60:
3c:d5:85:19:1a:a9:5d:be:00:dc:0a:2a:88:44:f9:
69:a2:e5:a6:11:19:77:7c:dc:98:93:8a:14:ae:f5:
19:43:cf:de:d0:4f:72:4a:4b:af:c6:4a:56:d9:b3:
35:2c:a1:ac:24:5f:62:ed:33:02:07:89:8e:6e:1f:
cd:45:d5:cf:5f:a4:b4:8d:56:21:51:20:e9:15:6f:
49:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FF:35:16:15:8D:7D:7F:B9:D7:42:71:10:D2:0D:58:AB:85:B5:EB
X509v3 Authority Key Identifier:
keyid:32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/df81FhWNfX-510JxENINWKuFtes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.102.240.0/22
Signature Algorithm: sha256WithRSAEncryption
38:38:b7:43:e9:75:be:fe:f3:86:b1:b9:e6:38:b7:19:a3:e2:
1c:63:c8:c3:2c:a9:3c:59:28:8c:b0:8f:ca:e7:a1:99:dd:d7:
a7:d1:8d:83:5a:e8:84:16:9f:cd:50:ec:48:5b:31:c0:49:3c:
19:6b:14:06:db:ae:1f:37:1c:72:6e:aa:e0:91:26:be:ad:70:
86:f0:fa:b8:fe:df:59:45:67:e8:79:9b:8e:2d:86:0d:c5:92:
f6:64:76:2d:65:83:82:6b:81:a6:1a:b5:b0:c6:d8:59:a0:3a:
5a:82:d7:9d:b2:51:6f:90:82:88:b0:86:6c:f7:88:24:fd:4b:
07:ac:05:dc:04:ef:48:af:54:e9:0e:9f:06:ca:3b:7d:54:f1:
04:22:99:75:8d:67:be:8e:3e:82:92:d1:a0:28:f2:5e:ab:ef:
24:17:e7:ff:ed:0a:77:1b:e1:31:17:5d:ca:5e:a6:7d:f4:ad:
8f:9c:44:61:fb:4a:2e:d8:34:67:e8:a1:ea:e9:f9:a3:a6:94:
9b:50:c5:f5:7b:51:f0:c5:e6:3f:15:a4:db:eb:de:0e:d4:e4:
9a:8a:aa:9f:81:53:55:23:2d:9e:51:ee:c9:fb:28:31:2d:8c:
3c:ca:0e:6a:b2:87:00:d7:29:ef:56:c4:e4:18:0c:0f:4d:c5:
8d:d4:ef:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:03 2024 by rpki-client on console-fra.rpki-client.org