Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/SB96unJQTG_dGWf3A71CoH473kY.roa
File: SB96unJQTG_dGWf3A71CoH473kY.roa (raw, json)
Hash identifier: pOCxdssKybxK16zSetuqEE9GL85sQTYSetahLaJ6/SE=
Subject key identifier: 48:1F:7A:BA:72:50:4C:6F:DD:19:67:F7:03:BD:42:A0:7E:3B:DE:46
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018A75731B1DBDE6275A9C2AFCD85A7613A4
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/SB96unJQTG_dGWf3A71CoH473kY.roa
Signing time: Fri 08 Sep 2023 15:39:52 +0000
ROA not before: Fri 08 Sep 2023 15:39:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43606
IP address blocks: 193.148.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:75:73:1b:1d:bd:e6:27:5a:9c:2a:fc:d8:5a:76:13:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Sep 8 15:39:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=481f7aba72504c6fdd1967f703bd42a07e3bde46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a2:d5:21:0b:75:8d:fb:35:74:26:6a:62:84:
e4:ef:dd:84:0a:f3:79:5a:f3:6f:67:07:98:ae:ed:
96:ac:ce:52:77:3c:cd:42:f8:c8:a0:b9:8f:b0:d1:
b0:6f:43:9a:4e:87:e8:2a:d6:f0:d4:26:c7:fc:34:
48:4e:57:e5:82:df:d0:57:a2:d8:df:31:81:5f:ef:
68:c7:af:6d:98:18:81:14:e7:cb:f6:cd:89:74:cd:
f5:23:bb:30:e8:3a:f8:48:62:36:cb:c1:77:cf:c1:
cc:e9:6b:0e:d2:fb:d6:99:42:29:45:fb:93:2f:ef:
e7:48:97:42:6f:f0:b1:48:34:b2:c4:85:16:58:91:
eb:08:9d:20:09:e1:b2:a1:b1:54:24:b6:8c:51:c1:
a6:72:83:25:60:7a:af:ee:06:82:59:ea:e9:79:4e:
22:40:40:bb:a5:f3:fb:f5:e5:09:3f:3d:90:84:89:
e7:63:78:06:f3:4c:a5:5c:9a:69:8d:23:46:cf:b3:
24:9e:61:62:f2:7c:4b:8f:1b:12:5c:5f:5b:e5:38:
8d:45:79:0f:41:a2:1b:ad:cb:7e:77:8a:83:ef:c0:
8a:15:eb:3b:7c:f9:91:72:03:d0:60:e2:3e:4d:2e:
06:0b:71:80:35:5c:69:5d:48:cb:a9:0d:50:bf:df:
9f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1F:7A:BA:72:50:4C:6F:DD:19:67:F7:03:BD:42:A0:7E:3B:DE:46
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/SB96unJQTG_dGWf3A71CoH473kY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.60.0/24
Signature Algorithm: sha256WithRSAEncryption
45:92:0b:c4:c7:e7:74:d1:ce:b8:4b:d2:31:12:7e:69:02:4d:
58:44:6f:35:70:97:50:9e:3c:a4:3b:9b:a6:a8:13:81:be:fa:
dd:c1:96:83:5c:4b:47:2b:a7:7c:bb:c9:81:c9:b0:95:77:ae:
44:c2:51:aa:01:53:1b:ed:41:48:f9:f8:98:f9:54:3c:9a:5f:
c3:22:3e:64:9d:4d:4a:9e:f4:66:cc:a6:7c:d0:85:b2:8b:23:
30:97:08:bb:aa:ce:9c:0d:72:9f:61:8a:21:55:be:81:6c:e4:
e2:4a:ce:58:99:78:20:13:a6:23:d8:06:28:6b:9a:d0:85:63:
0f:34:02:99:6b:a0:5d:2f:78:67:79:1c:0e:24:c7:50:a6:cf:
d6:6a:c0:81:7d:e6:17:bf:d4:08:10:71:1c:0c:54:bb:8e:f7:
bc:9e:80:a0:35:fa:c8:f8:7f:43:72:e9:06:a7:b3:83:65:b5:
c1:8c:ce:34:e5:7e:35:07:52:a1:24:b3:d1:af:45:74:a5:13:
66:7b:7a:53:7e:75:46:ce:44:57:05:a1:07:0d:90:4f:c1:3e:
74:62:ce:2c:2e:56:4b:c3:af:c2:5c:30:07:7c:b2:0e:40:6b:
21:c8:d9:c3:d7:d3:85:0a:fd:f7:ff:b3:25:b9:88:1c:0c:a0:
ea:56:2b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:41 2024 by rpki-client on console-ams.rpki-client.org