Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/Ud40oeoV8uSLW9mKSaGiAIQDj5U.roa
File: Ud40oeoV8uSLW9mKSaGiAIQDj5U.roa (raw, json)
Hash identifier: VwLIR2pXkLZr/krdG/OnSS2aXLcR26yz+B1UftW1Rhk=
Subject key identifier: 51:DE:34:A1:EA:15:F2:E4:8B:5B:D9:8A:49:A1:A2:00:84:03:8F:95
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 0186A25B2BA089FA2495792E129206AB42F6
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/Ud40oeoV8uSLW9mKSaGiAIQDj5U.roa
Signing time: Thu 02 Mar 2023 12:45:29 +0000
ROA not before: Thu 02 Mar 2023 12:45:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 193.31.62.0/24 maxlen: 24
193.31.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 May 2023 08:08:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a2:5b:2b:a0:89:fa:24:95:79:2e:12:92:06:ab:42:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Mar 2 12:45:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51de34a1ea15f2e48b5bd98a49a1a20084038f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:1e:42:88:b9:eb:10:13:0f:d3:2b:cd:c9:
3e:96:da:af:cf:38:fb:50:93:85:af:11:e5:a5:2f:
aa:da:03:af:ad:a1:4f:89:6a:16:29:ff:1a:45:07:
3f:84:21:8e:b7:62:db:2c:b4:11:e2:40:fc:84:35:
8f:cb:07:87:ff:a7:a9:34:c5:02:a8:14:1b:c6:53:
a9:6c:a9:26:4e:fa:87:e2:18:6c:50:fa:cf:e2:a8:
91:c1:b6:57:48:80:f1:45:17:b1:8a:69:27:56:52:
a9:1a:2f:bc:65:60:f0:3e:55:9b:d5:b4:b9:b5:77:
c9:e5:ec:e8:59:e7:11:80:5e:2e:e4:6c:e4:81:1a:
2d:29:40:4a:8d:58:b2:3d:4a:24:e6:14:6b:de:ab:
24:ae:51:b0:fe:ee:9f:2d:50:05:19:92:3c:28:d9:
ad:61:45:cf:89:87:61:1b:18:f6:85:5b:bb:c5:86:
8c:2b:7e:ea:d5:e1:d4:b4:38:9f:96:ce:38:4e:91:
aa:ce:8a:a3:77:b7:87:19:dd:c5:b9:0e:fe:f6:44:
72:29:bc:8a:15:6c:1f:c5:ce:88:ff:fa:ed:f4:4c:
96:0d:e8:26:f0:ea:2f:98:19:0a:dc:8d:a2:49:95:
6f:75:a0:88:21:76:42:a0:4e:fb:6d:03:ac:f3:0c:
42:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DE:34:A1:EA:15:F2:E4:8B:5B:D9:8A:49:A1:A2:00:84:03:8F:95
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/Ud40oeoV8uSLW9mKSaGiAIQDj5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.60.0/24
193.31.62.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a6:01:1c:f2:4d:2b:0c:26:42:04:b4:00:a0:89:58:f7:c9:
b8:9e:4c:7d:6b:b4:9e:20:67:aa:af:70:32:9b:3d:d1:f4:a3:
51:44:ef:09:30:ba:9e:f8:e6:4c:f0:d8:ec:d7:2a:2b:a9:5c:
64:9d:19:94:f7:2d:b5:b6:83:bf:3b:3c:dd:4c:41:4c:97:96:
f3:c3:81:d1:74:ad:3d:38:ce:c5:44:2f:7c:57:be:03:07:8b:
13:10:5a:85:16:0f:7e:e8:a8:3f:52:d9:9d:5e:41:5a:73:04:
b5:6d:65:f3:ae:e6:b8:18:d5:83:4a:67:e2:d4:ea:06:dc:ec:
03:d1:81:dc:5b:4b:96:df:60:28:3b:c9:84:ee:25:72:38:11:
da:c2:03:63:db:67:8c:bd:c6:ad:f2:7b:51:41:fb:73:e9:44:
c1:16:1c:10:7a:d5:84:06:be:13:5a:00:83:92:08:ff:60:64:
f8:51:f1:1e:d4:11:c1:12:9d:d8:c7:9b:2c:c9:62:7b:6b:ea:
56:5c:cf:94:34:66:f2:88:32:b8:cf:8c:52:fa:06:6e:e0:df:
60:0d:6a:1b:b2:14:22:35:ef:d7:fa:3d:d6:31:87:19:f1:75:
d7:c3:b4:a6:76:6f:0d:e9:4c:9f:ac:fb:31:da:ec:d5:f5:18:
16:c5:f3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:29 2024 by rpki-client on console-ams.rpki-client.org