Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/Gb8kjGDr53pkzNVw85c0w-9sfLM.roa
File: Gb8kjGDr53pkzNVw85c0w-9sfLM.roa (raw, json)
Hash identifier: tCWDrLyz+Eq/vzMSbjQYA8Q+tg1XAJ5JjdiRVIg4vtk=
Subject key identifier: 19:BF:24:8C:60:EB:E7:7A:64:CC:D5:70:F3:97:34:C3:EF:6C:7C:B3
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 0187FA6747E962F1D4C0BBE1F56798DBEA41
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/Gb8kjGDr53pkzNVw85c0w-9sfLM.roa
Signing time: Mon 08 May 2023 08:08:05 +0000
ROA not before: Mon 08 May 2023 08:08:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 193.31.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fa:67:47:e9:62:f1:d4:c0:bb:e1:f5:67:98:db:ea:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: May 8 08:08:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19bf248c60ebe77a64ccd570f39734c3ef6c7cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0a:15:ff:67:f7:be:1b:bd:fa:1f:5b:f1:09:
3a:34:06:6a:4e:59:0e:88:62:dc:a8:f0:c5:08:55:
f4:33:f3:8c:97:21:aa:57:ec:7e:fe:1d:36:d5:dc:
b4:a3:27:e0:b4:4d:88:ad:06:0d:60:3f:0b:e4:08:
40:08:17:f7:f6:c7:3c:bb:c3:28:ad:67:6c:68:51:
f5:0e:00:9a:fa:c4:d6:17:3a:9c:9d:e2:51:3a:14:
74:bc:ca:33:af:af:29:f4:10:73:88:7b:fd:72:3f:
99:7e:f3:26:53:3b:61:a2:4d:1e:f7:25:d3:78:25:
be:da:ac:ed:e8:67:c7:ce:28:51:3a:16:40:84:eb:
62:95:f1:60:dd:11:d0:06:ba:98:fe:85:f6:48:18:
e5:1d:d6:39:a7:54:d0:59:6a:95:fb:c7:9d:42:5d:
21:ff:4c:d9:a6:62:21:ea:93:4c:ce:4c:0b:64:0d:
29:0c:54:40:9f:26:c0:1b:93:93:8d:e9:89:b0:96:
e4:90:32:4f:e2:f4:5c:cb:c5:63:ad:ea:48:8e:33:
b7:db:67:cf:ed:ab:0d:e3:e7:96:fc:ab:af:96:6e:
91:98:8b:42:04:a4:9a:4a:4b:0a:5a:0c:9a:ac:05:
2d:6f:fa:b4:07:a3:2f:d3:f4:fd:37:8c:e6:50:8f:
d7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BF:24:8C:60:EB:E7:7A:64:CC:D5:70:F3:97:34:C3:EF:6C:7C:B3
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/Gb8kjGDr53pkzNVw85c0w-9sfLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.60.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:86:6c:75:a3:4a:3f:ea:17:99:2a:79:16:68:78:cc:d8:bf:
8a:3b:4a:3a:39:f3:97:f8:46:48:24:d0:24:a5:2a:d3:ed:de:
d6:c2:81:d9:e0:3d:b1:38:d1:a9:8f:95:1b:04:cc:c7:79:a4:
1e:d4:fc:84:d1:84:5d:b7:4f:f3:dc:30:99:25:db:00:71:6c:
bb:e9:9c:a6:b2:11:16:d5:dc:1f:cd:3b:a8:9b:6a:fc:4a:ca:
73:2c:a9:af:66:a1:a9:9e:f6:b8:f1:37:71:bc:80:b9:75:db:
a8:b8:13:ef:ae:bf:b9:7a:4a:b1:ad:68:b1:cb:79:8b:dd:74:
89:f0:08:2b:99:34:8f:1e:08:01:3a:2d:bf:3f:f8:12:70:5b:
dd:e9:0a:db:f7:70:b1:25:2d:02:98:2e:5c:ad:7e:57:e8:10:
39:44:47:1f:11:27:de:84:ca:0e:d2:6a:3e:50:60:ca:84:55:
bc:18:58:3f:ca:3d:16:1a:69:e0:b8:86:e2:fe:88:d2:33:ad:
cc:3d:e5:c6:c5:ee:85:55:14:62:ac:c2:5e:9e:be:c0:70:74:
e9:45:a9:e7:67:10:20:d5:3c:41:91:16:b2:70:80:b0:b0:b2:
3b:83:62:8a:83:94:39:19:99:2b:bb:11:44:b9:f4:9b:fd:98:
07:37:82:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:31 2024 by rpki-client on console-fra.rpki-client.org