Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/P1agKaZ_GABpteqhqteB4ykv0IU.roa
File: P1agKaZ_GABpteqhqteB4ykv0IU.roa (raw, json)
Hash identifier: oMdqDs0Nx4AyLNeAEcbeu/SPk/7I3K46HIBeNgCBiiE=
Subject key identifier: 3F:56:A0:29:A6:7F:18:00:69:B5:EA:A1:AA:D7:81:E3:29:2F:D0:85
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 0185729EC69523DC7A2A4DBA6D7796F97D2D
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/P1agKaZ_GABpteqhqteB4ykv0IU.roa
Signing time: Mon 02 Jan 2023 13:14:46 +0000
ROA not before: Mon 02 Jan 2023 13:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 193.31.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:c6:95:23:dc:7a:2a:4d:ba:6d:77:96:f9:7d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Jan 2 13:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f56a029a67f180069b5eaa1aad781e3292fd085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:40:7d:92:29:d6:a4:46:e7:a9:ad:0a:5a:b4:
6c:46:8c:d5:bd:60:af:50:af:85:39:e9:c9:e9:92:
3d:76:ad:71:60:1c:70:db:a8:57:33:9c:83:13:97:
56:7d:f2:61:6b:de:27:d3:28:34:c1:84:d9:98:a9:
63:33:fd:09:a5:4b:cb:c1:c1:5a:0c:08:13:9f:9b:
ca:40:36:15:0f:5e:e0:a3:eb:28:d6:49:2b:08:2a:
11:dd:db:9b:b4:a3:b7:63:d0:47:43:bc:2c:83:fb:
08:cc:02:3a:93:7e:a9:77:8a:65:44:f4:be:3b:bb:
63:33:a0:b9:9f:b8:69:08:81:a1:e4:ea:fb:ac:31:
c7:67:0a:cc:7d:22:a5:6c:9e:e3:f9:12:de:b5:7f:
ae:83:d8:f8:8f:f3:67:d5:d3:48:84:33:47:6e:20:
fb:92:99:49:7f:a5:29:7d:f6:68:62:91:af:38:d8:
df:24:f3:bf:eb:2c:65:5f:5e:c5:62:6b:c7:1d:65:
72:c4:e2:58:74:da:c1:56:c7:cd:c2:b3:58:1b:9a:
bd:58:9c:40:1f:91:76:42:73:ab:ef:f4:28:f3:91:
2b:65:0e:73:23:29:04:aa:d2:83:27:ce:c2:b6:21:
7e:3e:0c:1b:c7:82:c5:da:8f:a2:e6:c3:5e:02:76:
97:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:56:A0:29:A6:7F:18:00:69:B5:EA:A1:AA:D7:81:E3:29:2F:D0:85
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/P1agKaZ_GABpteqhqteB4ykv0IU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.15.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:2e:23:e6:14:95:65:29:25:b0:b3:8f:2e:7d:30:43:55:85:
b8:a0:b4:58:ef:d9:92:12:09:81:c9:61:b0:ff:ac:3e:b4:df:
b1:22:ad:50:ed:90:dc:68:42:66:93:0c:2f:a9:b6:62:3b:4f:
19:8a:18:7a:9a:7f:2a:2f:d6:8b:d4:03:ca:89:c0:a0:a6:2a:
66:33:78:4f:49:e5:75:a7:0e:38:48:7f:ae:ac:c7:dc:2c:7c:
6e:2d:35:c1:a9:da:74:e7:a8:0d:9a:3e:4d:3a:61:62:57:c1:
b3:ae:26:92:3c:91:88:1c:95:e3:38:63:dc:11:61:50:20:cc:
dd:93:b4:00:e8:bf:ef:ca:2a:e0:9c:0d:37:be:23:a7:68:4a:
fe:6f:7f:fe:b2:40:c6:e7:8c:42:58:cd:af:f2:61:70:6c:bd:
b1:a6:c4:9d:eb:80:92:06:6b:c6:f0:09:84:9f:2b:ec:39:47:
89:75:d4:b4:ff:81:c1:59:80:84:a1:f1:6d:e5:31:61:34:db:
2d:85:77:60:12:55:82:f9:35:76:14:ae:4e:b9:78:16:f0:f8:
bd:6d:b9:dc:46:37:61:f3:5e:bc:0a:d1:26:89:81:73:ca:9d:
08:d1:ed:84:d1:4a:ec:29:ee:21:ab:3a:50:d8:3f:b7:97:b8:
90:15:6c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:31 2024 by rpki-client on console-fra.rpki-client.org