Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/FmFm6YDn1P30-Qz4lZevERsWwRk.roa
File: FmFm6YDn1P30-Qz4lZevERsWwRk.roa (raw, json)
Hash identifier: ZNeiCwKZ+GFDklMKLC6Igmbdlc/VVyD9Iu72FGLH9k8=
Subject key identifier: 16:61:66:E9:80:E7:D4:FD:F4:F9:0C:F8:95:97:AF:11:1B:16:C1:19
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 018A407ABA685B27EFC936C4F8A8E02A68AF
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/FmFm6YDn1P30-Qz4lZevERsWwRk.roa
Signing time: Tue 29 Aug 2023 08:48:19 +0000
ROA not before: Tue 29 Aug 2023 08:48:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.31.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Sep 2023 06:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:40:7a:ba:68:5b:27:ef:c9:36:c4:f8:a8:e0:2a:68:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Aug 29 08:48:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=166166e980e7d4fdf4f90cf89597af111b16c119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:79:cc:7c:8c:46:94:76:09:e2:1b:82:5a:a1:
0f:03:24:e3:66:3b:73:c7:f3:6b:d3:3e:5c:5a:b8:
c5:56:14:eb:e3:87:4b:2f:82:b0:87:2a:d8:c0:23:
df:28:06:29:12:56:98:b1:a0:e5:13:bf:65:16:86:
4e:22:14:87:f2:63:60:18:5f:df:fa:7c:8c:e2:70:
b0:04:00:8d:26:e9:bf:74:e2:0b:a1:b9:6a:0c:18:
1d:a8:b9:6e:1d:ef:c5:59:31:29:f3:7b:50:04:b5:
08:07:9c:1e:68:84:81:dd:9f:f7:f6:e4:a8:f6:35:
2d:3e:6c:19:20:f1:d1:65:ad:84:1e:d4:f5:ba:d9:
6d:b1:7c:70:bd:d6:a6:9a:26:f6:bf:60:3d:c7:82:
8c:89:ef:fe:0a:bf:d7:73:08:7b:c1:15:21:4d:43:
0a:58:b8:c3:57:6f:83:cb:4b:08:8c:d9:ce:78:5b:
6e:59:75:ae:fe:94:05:ee:92:d3:87:9a:88:8f:0a:
eb:b4:3a:b2:87:4f:03:d7:5e:0c:2b:70:29:a5:63:
07:78:3e:c6:68:99:95:d0:7f:68:38:60:20:0d:5b:
00:81:66:f8:e5:ee:85:5b:e9:6a:e0:d0:c4:51:fb:
a8:73:56:14:15:07:34:fa:26:90:f7:00:cc:e1:ac:
92:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:61:66:E9:80:E7:D4:FD:F4:F9:0C:F8:95:97:AF:11:1B:16:C1:19
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/FmFm6YDn1P30-Qz4lZevERsWwRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.62.0/24
Signature Algorithm: sha256WithRSAEncryption
71:50:cc:21:b5:b4:0d:84:b4:23:e1:20:90:76:b3:f2:76:e0:
c8:93:56:ce:02:a2:8a:14:d0:b6:e5:5e:1f:7c:5e:02:fb:c6:
33:78:6b:5d:57:3a:0c:01:63:ec:36:87:1a:56:7f:2c:d5:57:
01:a1:89:a1:03:d6:de:dc:f7:d9:19:43:f9:00:95:30:d4:97:
34:91:e5:c1:a2:e6:2c:41:2c:bd:9a:ae:ed:d6:52:60:09:ef:
7b:0a:41:dc:6c:23:7b:4c:91:61:4b:93:e7:72:b4:9c:a2:61:
d2:03:a6:32:48:d3:8e:f5:71:7d:53:3a:be:b6:1c:3d:10:b7:
7f:4c:15:4b:04:13:bf:ed:f1:bf:57:e3:25:78:85:dc:5b:0e:
9a:30:62:8a:f8:c6:3d:d2:2a:c2:f3:da:f0:1b:3f:12:ac:2d:
c7:3e:c6:3c:19:89:44:31:c6:10:8a:18:00:bc:53:0b:fb:32:
04:54:73:17:cc:74:70:98:9a:a1:8f:42:c2:b6:57:05:c6:c1:
71:db:8a:f2:17:be:7c:a0:cf:86:23:94:ab:b2:28:cf:66:58:
51:bf:f1:6f:3b:71:2f:f9:06:79:e3:12:8d:16:ab:c0:4a:00:
2e:62:7b:f0:3c:8f:9e:6b:4b:07:40:78:5b:42:ae:73:9f:8d:
8c:51:c5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:31 2024 by rpki-client on console-fra.rpki-client.org