Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/zTmd8O6CJvenQ20v9plO2uufvCc.roa
File: zTmd8O6CJvenQ20v9plO2uufvCc.roa (raw, json)
Hash identifier: Peefvp6hyGxBCs46JlrREIqsDfd+mVBzBgbxmA6zRPI=
Subject key identifier: CD:39:9D:F0:EE:82:26:F7:A7:43:6D:2F:F6:99:4E:DA:EB:9F:BC:27
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 0189453818AF33B940C3D5636608B9321F92
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/zTmd8O6CJvenQ20v9plO2uufvCc.roa
Signing time: Tue 11 Jul 2023 13:50:51 +0000
ROA not before: Tue 11 Jul 2023 13:50:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.31.60.0/24 maxlen: 24
193.31.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jul 2023 13:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:45:38:18:af:33:b9:40:c3:d5:63:66:08:b9:32:1f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Jul 11 13:50:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd399df0ee8226f7a7436d2ff6994edaeb9fbc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3b:11:18:46:f1:e2:8b:f1:20:75:c8:b6:31:
21:62:f7:ed:6b:30:9f:81:26:80:09:f5:37:83:10:
1f:a4:47:9a:e5:cf:da:c1:96:ca:c9:8f:ef:af:df:
8f:ad:ca:09:5d:d1:99:62:fa:32:b5:84:83:4d:a6:
59:a5:b1:9d:82:8c:a5:66:f8:d4:8b:e2:78:36:84:
3c:98:5e:31:74:83:03:c9:7e:a8:bf:42:e7:3a:45:
0a:9a:05:de:57:37:7d:4e:25:34:19:c4:2a:08:e2:
c7:63:7c:18:c9:9a:c2:46:d7:46:56:0d:17:a2:7a:
bd:3b:cb:55:75:ce:35:66:9d:b8:6b:be:53:00:a4:
59:56:1c:d9:b9:31:ea:4f:b8:40:4a:6a:38:d8:7a:
14:66:90:0d:48:b4:49:c7:73:c4:ff:27:7d:0c:75:
35:0f:cf:23:95:28:6d:1b:1a:01:a4:8a:b4:81:5c:
c2:2b:a8:8e:8c:d3:93:0d:31:c5:28:c0:24:70:68:
ab:89:8f:c8:bf:fb:6c:7e:8c:69:8c:96:53:b8:5a:
e2:e4:6d:8c:b0:d6:ff:90:21:70:e4:1f:4b:20:f1:
ae:c7:4b:71:db:d5:3f:fe:ad:08:b4:7c:e3:cb:6d:
47:37:fe:ae:39:d3:04:d1:53:9b:5c:1b:7f:8b:30:
d1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:39:9D:F0:EE:82:26:F7:A7:43:6D:2F:F6:99:4E:DA:EB:9F:BC:27
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/zTmd8O6CJvenQ20v9plO2uufvCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.60.0/24
193.31.62.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:2c:df:4c:c7:b6:12:23:66:4f:f8:e8:d6:62:3d:4b:cf:b5:
d1:ff:4e:ac:c4:20:e3:8e:34:3f:ae:8c:39:0c:32:c2:ce:7a:
fc:11:73:0f:0f:9f:18:fb:39:83:53:87:7a:05:8d:b1:91:a5:
69:ec:47:23:42:bf:95:30:e9:fb:37:ee:38:73:48:96:77:19:
e2:9b:45:9c:7c:7a:78:1f:ce:29:2d:68:44:c2:5c:4c:25:42:
b2:af:5c:44:31:da:71:4d:84:68:7a:18:a9:18:5b:1d:98:89:
b6:7b:f1:88:9c:db:e8:f2:40:f1:bb:4d:71:b8:2d:5b:63:48:
66:b9:2e:ae:f6:aa:2a:44:16:92:f3:c1:c7:7a:74:6b:70:72:
73:4c:b0:6c:87:ab:55:e6:46:79:5f:9f:9d:c9:8e:ba:4c:1c:
14:58:3e:85:3e:c3:68:b3:07:9b:ea:51:95:f4:ef:68:06:14:
c0:cb:7d:c1:fd:ce:a8:37:cc:e3:c8:42:9f:79:2f:4e:f3:c9:
62:b5:05:62:af:20:65:8c:ad:3a:14:9b:18:4f:c2:50:be:92:
16:0d:a2:80:69:46:ca:57:16:e7:c4:4a:f3:4f:84:d0:a8:21:
0e:60:52:01:4b:7e:9f:48:e0:99:bd:04:38:f3:bd:6e:81:7b:
95:4d:f7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:32 2024 by rpki-client on console-fra.rpki-client.org