Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/5uMGDj7gSMiR3nVBKMO5p-c4y5U.roa
File: 5uMGDj7gSMiR3nVBKMO5p-c4y5U.roa (raw, json)
Hash identifier: Jz92De6mW2vAS3xN+AA7KGNGxtM5ZUHAvF8MM9YYmcw=
Subject key identifier: E6:E3:06:0E:3E:E0:48:C8:91:DE:75:41:28:C3:B9:A7:E7:38:CB:95
Certificate issuer: /CN=40254d4a767ad099606e442e092f91241a363670
Certificate serial: 018617300DD24F27CFAF56B000F513F82D94
Authority key identifier: 40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/5uMGDj7gSMiR3nVBKMO5p-c4y5U.roa
Signing time: Fri 03 Feb 2023 12:11:10 +0000
ROA not before: Fri 03 Feb 2023 12:11:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212517
IP address blocks: 193.22.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Sep 2023 10:57:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:17:30:0d:d2:4f:27:cf:af:56:b0:00:f5:13:f8:2d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40254d4a767ad099606e442e092f91241a363670
Validity
Not Before: Feb 3 12:11:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6e3060e3ee048c891de754128c3b9a7e738cb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:42:10:98:6b:87:63:f1:85:09:33:b1:ed:ac:
3f:88:68:c3:28:a3:dd:28:6f:0d:17:c7:56:be:b0:
30:77:e6:68:78:c3:bd:51:33:93:f4:e8:66:94:bf:
1a:3f:8d:52:ac:85:65:b3:77:d6:84:40:63:75:36:
45:c8:72:3f:36:c7:40:41:49:83:48:79:53:11:81:
e5:d2:47:77:49:65:23:c4:fe:f0:90:18:d5:90:f1:
78:9d:dd:63:c9:d2:fd:db:ba:1e:5e:cc:5d:7f:97:
03:0a:8b:58:eb:d7:5b:ed:fd:b8:79:f9:e8:aa:a0:
52:b8:69:75:b5:c9:1c:2c:6a:4e:75:04:e4:ff:3a:
eb:7e:73:16:a7:f6:d3:a5:c5:99:a9:db:b8:21:d1:
c8:5a:90:fc:88:77:2e:1d:47:0f:01:2f:58:a3:f3:
67:02:f6:bc:61:44:84:1f:42:0a:e2:2f:99:a2:89:
58:22:a5:eb:db:ef:b9:6d:69:b7:0e:67:8a:12:49:
b7:e4:ab:3c:53:95:15:35:d2:b1:f9:60:af:8d:96:
6c:5f:a8:a0:eb:d7:8f:8e:a0:53:9a:ed:6f:9c:6e:
71:9d:be:df:b5:18:6c:75:ee:6d:db:91:4a:7d:6a:
74:03:62:14:69:f9:23:04:06:a8:0c:72:e8:24:59:
c3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E3:06:0E:3E:E0:48:C8:91:DE:75:41:28:C3:B9:A7:E7:38:CB:95
X509v3 Authority Key Identifier:
keyid:40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/5uMGDj7gSMiR3nVBKMO5p-c4y5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.108.0/24
Signature Algorithm: sha256WithRSAEncryption
29:fb:a1:4b:b7:09:7e:85:32:f4:c7:14:af:b7:c5:c0:f9:1b:
e0:6e:43:b7:f3:3d:17:3d:36:2c:5c:c9:d1:38:08:82:98:ab:
2a:ac:ca:c5:97:e5:a3:9f:44:76:78:2a:11:3e:1d:cf:52:8c:
59:5a:92:d7:1b:1c:89:97:22:30:cd:d6:0d:28:e9:97:63:24:
d4:1b:fb:da:97:48:ed:59:49:2f:bb:d2:0d:26:89:0b:58:0d:
30:af:9c:f7:07:2e:6e:04:98:f8:44:81:26:00:1b:98:a5:16:
c5:cd:04:9d:00:04:25:12:28:27:45:51:2d:b8:56:a1:73:e6:
2a:d1:3a:81:42:7e:98:19:81:bb:88:04:7a:d4:1f:a3:69:57:
dd:73:9a:5c:78:60:e0:3c:fb:e7:77:77:a8:a1:8f:e6:64:66:
b3:93:6f:ce:cd:60:94:bf:49:62:43:97:a2:42:f7:2b:b5:45:
eb:aa:66:7e:5b:52:09:2c:7f:f9:cb:78:bd:db:d5:80:51:dc:
a1:42:98:72:e9:e5:9d:0f:39:d4:ab:c0:ab:67:0d:02:8a:dd:
61:6e:8c:f6:48:c7:a2:d1:e8:c5:86:f8:55:fb:ba:d1:d6:00:
40:1f:e9:9a:63:be:7a:b6:9e:5b:cd:a9:7e:9a:a3:15:ce:81:
d4:37:bb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:26 2024 by rpki-client on console-ams.rpki-client.org