Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/IBwYlA9Vk9nGvgM4R-HGdPYAMLI.roa
File: IBwYlA9Vk9nGvgM4R-HGdPYAMLI.roa (raw, json)
Hash identifier: RZja/mJ2CRJjcRJFd93kbU7XSQJOj9/rugddzl9ByKQ=
Subject key identifier: 20:1C:18:94:0F:55:93:D9:C6:BE:03:38:47:E1:C6:74:F6:00:30:B2
Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial: 0185714C12B3C192391B0BFF5CB8FFCE2577
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/IBwYlA9Vk9nGvgM4R-HGdPYAMLI.roa
Signing time: Mon 02 Jan 2023 07:04:48 +0000
ROA not before: Mon 02 Jan 2023 07:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 193.187.255.0/24 maxlen: 24
2a12:3e80::/40 maxlen: 40
2a12:3e80:200::/40 maxlen: 40
Validation: Failed, certificate revoked on Sat 12 Aug 2023 10:49:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:12:b3:c1:92:39:1b:0b:ff:5c:b8:ff:ce:25:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
Validity
Not Before: Jan 2 07:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=201c18940f5593d9c6be033847e1c674f60030b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b9:b5:f0:25:cf:62:01:75:00:d8:b6:3f:c1:
40:35:05:4d:aa:ad:90:70:d0:bd:e1:10:29:00:fa:
be:51:55:8c:3c:23:08:f8:3e:3e:f6:6b:ed:91:69:
ab:26:fd:1b:3a:5e:27:eb:09:10:de:15:8e:73:94:
ca:e9:99:96:ce:8f:5c:bd:ee:57:27:4d:59:e5:2d:
c5:15:fc:aa:0a:70:ee:e9:42:c2:42:9c:0b:8a:d9:
f3:94:df:82:de:a1:a9:3e:19:1e:01:cc:99:b4:f9:
c3:86:66:8d:a4:ee:8e:77:e2:e9:75:90:b8:7e:ab:
f5:d1:5f:09:ba:50:f3:bf:92:e0:57:4f:b2:1b:c1:
fd:53:92:53:e9:f7:30:86:16:5c:e8:ae:57:f0:79:
68:c5:c3:ba:52:ca:59:41:4f:5b:10:1a:53:3f:5f:
3b:16:b9:62:06:b5:22:e2:e7:67:46:8f:3e:a0:0a:
f4:07:81:3b:40:13:02:16:3d:87:b0:64:4c:bc:1d:
a6:3c:59:5b:68:bf:0b:9a:5c:44:06:16:1e:e1:1f:
88:b0:84:ed:a2:b5:52:a7:3a:bc:63:d1:a5:89:a2:
56:9f:eb:b1:c3:e1:20:82:80:66:c4:13:ef:a8:23:
14:46:b4:bb:98:f3:e5:dd:a2:3b:08:a7:4e:1e:73:
c4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1C:18:94:0F:55:93:D9:C6:BE:03:38:47:E1:C6:74:F6:00:30:B2
X509v3 Authority Key Identifier:
keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/IBwYlA9Vk9nGvgM4R-HGdPYAMLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.255.0/24
IPv6:
2a12:3e80::/40
2a12:3e80:200::/40
Signature Algorithm: sha256WithRSAEncryption
76:fd:ac:25:b3:af:63:bc:2e:a8:4e:fb:dc:e9:9c:45:5d:25:
21:01:65:ff:be:9e:1a:0e:ae:30:1a:ce:fb:72:e4:5f:6c:5f:
26:c2:e4:ba:be:82:10:61:eb:dd:81:cb:d2:9f:35:2f:7d:80:
18:2e:b3:29:a2:fd:b4:34:2d:e9:d2:f1:fc:d5:23:fe:05:1b:
0a:cd:9b:ab:7e:36:f2:0b:02:fe:2c:43:d7:5e:29:53:66:5d:
bc:3f:e6:28:38:e3:c2:36:5d:ba:d3:04:1a:f1:d1:45:d7:d1:
4e:c4:d9:14:43:ef:1d:70:5c:b1:a6:ae:77:10:06:1e:b9:28:
ca:35:2d:3a:73:a0:4c:19:81:af:e9:f6:a8:c4:65:95:a3:48:
1b:1a:c4:01:64:eb:2a:bc:db:a1:3f:10:bb:e6:b7:fd:45:8e:
86:cb:23:a7:1d:25:63:39:63:0f:ee:29:d7:41:50:4a:f4:50:
81:5f:2a:1f:87:92:0e:1c:a2:25:1e:ea:66:4d:4d:c9:f4:be:
de:31:10:0d:6d:ab:88:52:39:81:b3:0f:95:50:64:17:49:ce:
b7:26:59:b0:2d:23:ef:d5:07:9d:72:50:32:51:78:40:34:18:
6c:95:0e:1b:2e:18:99:09:20:45:f1:51:dd:ec:23:9e:83:2c:
7c:93:e5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:18 2024 by rpki-client on console-ams.rpki-client.org