Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/fC8BuncYVGW5nzSGLu5Sp0309-E.roa
File: fC8BuncYVGW5nzSGLu5Sp0309-E.roa (raw, json)
Hash identifier: 7Rgkj2bbU3ylPLoqbjWuniULh7upSeKPmoxKamwGJTs=
Subject key identifier: 7C:2F:01:BA:77:18:54:65:B9:9F:34:86:2E:EE:52:A7:4D:F4:F7:E1
Certificate issuer: /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial: 01930085FD70B9ADE1EA819A39C42218AA94
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/fC8BuncYVGW5nzSGLu5Sp0309-E.roa
Signing time: Wed 06 Nov 2024 08:10:01 +0000
ROA not before: Wed 06 Nov 2024 08:10:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47536
IP address blocks: 193.105.29.0/24 maxlen: 24
2001:678:a00::/48 maxlen: 48
2a12:79c0:100::/48 maxlen: 48
2a12:79c2::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 20 Nov 2024 22:14:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:00:85:fd:70:b9:ad:e1:ea:81:9a:39:c4:22:18:aa:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
Validity
Not Before: Nov 6 08:10:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c2f01ba77185465b99f34862eee52a74df4f7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:81:39:9b:66:14:f4:07:d1:41:de:4a:e9:45:
a6:e1:ec:82:78:fd:5d:a7:69:83:8f:d4:c7:d3:00:
b5:be:42:cd:e8:a7:b6:79:87:99:30:cf:30:3c:a5:
9a:db:c8:bd:42:ed:20:82:b9:c8:f2:a4:67:54:83:
1d:a3:94:f6:1e:44:8a:b2:9e:a4:b6:67:2a:02:0e:
87:25:10:45:69:71:76:46:77:4e:f9:99:70:ec:a8:
4a:d6:06:b7:ca:de:bc:97:ef:a2:7c:b1:c4:58:3c:
34:22:04:99:fa:03:a0:40:ad:73:0c:e9:dd:0e:f3:
89:85:e7:a7:39:5d:bd:ae:e5:7b:0d:f4:63:ec:bc:
08:32:3a:58:18:b4:c9:e7:fc:07:76:f1:94:dd:fb:
4a:24:94:b5:9b:ca:42:13:07:36:7a:2a:8d:12:57:
4e:7f:c2:40:d8:70:45:5e:57:1a:15:08:6c:ac:5d:
b8:74:c3:59:d8:1e:c2:6e:35:4a:15:66:46:30:07:
1c:52:df:23:ac:96:cc:a5:8a:6a:94:fa:75:96:72:
ae:2f:48:e8:cf:17:d4:95:a1:24:bd:93:ee:2b:d3:
a7:93:ce:cf:5a:5c:af:79:06:e1:7d:be:b6:72:fd:
71:f9:c6:57:18:5f:9f:8f:96:27:87:ad:fb:f3:5b:
2f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2F:01:BA:77:18:54:65:B9:9F:34:86:2E:EE:52:A7:4D:F4:F7:E1
X509v3 Authority Key Identifier:
keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/fC8BuncYVGW5nzSGLu5Sp0309-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.29.0/24
IPv6:
2001:678:a00::/48
2a12:79c0:100::/48
2a12:79c2::/32
Signature Algorithm: sha256WithRSAEncryption
82:69:9f:a4:c8:47:0a:82:f9:e7:75:6a:94:b8:04:09:f0:b1:
7b:89:1a:f8:5e:79:59:7a:90:97:12:a2:90:9f:bc:f1:88:c1:
05:8b:2a:e2:48:4b:11:56:ab:41:1f:62:27:1e:3b:f1:c6:5d:
86:4a:c8:bd:e0:45:f8:2a:c4:d2:25:c3:f1:68:a2:d5:ad:30:
ad:8a:65:a8:29:96:9f:f1:b6:31:38:42:25:44:72:3a:1c:9c:
f7:57:aa:b6:ae:e6:47:8e:74:7a:3c:e5:7e:10:c1:d3:6c:17:
50:7e:6e:b8:d8:43:1c:e2:a3:37:c3:d5:3c:f6:5c:01:0c:e5:
ec:04:30:d6:11:73:14:1b:24:3d:ae:87:b9:9d:a0:92:b2:72:
0f:90:35:fb:42:eb:19:e0:9a:e8:1b:8e:34:6d:f2:53:21:36:
15:a6:82:1d:26:a4:5a:78:b8:01:99:e1:7c:d6:60:36:1a:0c:
57:0e:21:16:a7:50:40:0c:ce:07:48:e4:0b:ea:ca:50:48:45:
fd:ba:bf:a4:9e:b7:48:33:74:a7:69:ce:1c:3e:f6:b9:ae:53:
03:74:c4:6e:fc:4b:4c:f1:42:e5:af:d7:06:b0:03:43:28:9a:
f4:48:0f:44:2e:76:3c:9a:8c:38:50:3b:ea:8e:a2:c9:57:26:
c9:01:a6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:11:07 2024 by rpki-client on console-ams.rpki-client.org