Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/u29KC79pjREfXzjqgAHE1QMc5K0.roa
File: u29KC79pjREfXzjqgAHE1QMc5K0.roa (raw, json)
Hash identifier: L7/QbsoI8jZgZAjPJuad1ym8GWKhQqFGsC0EtRF3jaI=
Subject key identifier: BB:6F:4A:0B:BF:69:8D:11:1F:5F:38:EA:80:01:C4:D5:03:1C:E4:AD
Certificate issuer: /CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Certificate serial: 01856D4AA2D4CD9C5E446151C52217B71A4F
Authority key identifier: F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/u29KC79pjREfXzjqgAHE1QMc5K0.roa
Signing time: Sun 01 Jan 2023 12:24:45 +0000
ROA not before: Sun 01 Jan 2023 12:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2107
IP address blocks: 193.138.1.0/24 maxlen: 24
193.138.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:a2:d4:cd:9c:5e:44:61:51:c5:22:17:b7:1a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Validity
Not Before: Jan 1 12:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb6f4a0bbf698d111f5f38ea8001c4d5031ce4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:75:7f:cb:dd:d8:5e:ac:dc:ba:66:64:ba:
01:4b:58:a5:15:6a:16:33:ba:d2:dc:5e:e9:71:61:
3c:28:e5:31:0a:65:dc:87:ed:b5:87:4e:e5:04:39:
b9:cb:d2:51:30:de:54:5e:5b:a8:38:33:97:ea:7f:
f6:18:e6:db:f0:2b:84:69:59:56:cc:b1:0c:50:92:
31:cc:ab:b1:79:15:0b:2d:b0:6f:27:30:55:0b:ae:
ac:e1:a7:4b:e7:5a:02:7b:56:bf:41:da:6c:2a:41:
31:bc:25:1b:f0:17:4b:be:b0:cd:96:36:12:42:ed:
e3:2a:50:1a:34:bc:a2:39:8d:76:8b:c1:5a:40:12:
bc:19:0c:2f:27:e0:5c:ce:90:27:85:a7:b7:4a:ea:
63:6f:8a:5a:54:39:b9:be:73:c1:4a:d1:6d:30:41:
e8:74:3a:0a:d3:fc:29:ed:d2:90:85:6e:20:9a:46:
bb:d0:32:a1:94:5e:03:62:02:5f:be:24:fb:d8:d0:
c5:da:fa:df:d3:e5:c1:c3:5b:da:f2:b9:0a:d0:1e:
60:b8:a1:49:66:19:b8:9b:7c:ee:81:83:8a:1d:b3:
17:0b:75:00:12:5e:df:24:c1:83:d0:ea:6d:d6:0b:
c7:08:aa:83:f3:0b:af:0e:af:1a:2d:c8:a6:cd:15:
55:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6F:4A:0B:BF:69:8D:11:1F:5F:38:EA:80:01:C4:D5:03:1C:E4:AD
X509v3 Authority Key Identifier:
keyid:F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/u29KC79pjREfXzjqgAHE1QMc5K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.1.0-193.138.2.255
Signature Algorithm: sha256WithRSAEncryption
af:90:95:00:02:47:52:52:c7:cb:b0:c5:8b:2c:00:d9:fe:a8:
a4:38:c3:3e:b0:15:cd:89:e2:cc:77:6f:9f:0f:92:b5:2f:18:
de:b8:31:4f:f6:80:55:4a:5a:26:82:1a:e4:e1:27:91:f3:89:
a8:de:59:4f:7a:21:34:a3:8f:b3:2e:58:94:c9:eb:df:3e:b8:
38:83:01:73:46:86:16:3c:fc:41:bb:ad:dc:b8:86:e9:28:4a:
de:76:79:99:88:9e:25:95:7d:a4:10:cd:e0:41:c5:80:e0:4a:
e1:0c:c7:d9:5d:2c:4b:3d:22:f8:39:7a:a5:e2:ea:f2:68:b5:
8b:89:7a:81:62:ff:d7:73:fd:25:2d:d1:f8:62:98:43:ac:25:
be:a0:47:63:f5:b3:10:ad:2c:d2:65:2c:cc:c6:df:de:c0:e0:
2f:b3:34:f6:4f:71:97:47:d1:a8:a2:27:87:f1:92:ce:53:09:
7a:98:e8:52:50:ff:7d:a0:c8:35:bc:ea:22:29:92:77:9a:f8:
7d:0d:12:82:d5:80:b3:7c:93:68:fb:c5:a1:73:cf:eb:66:e3:
d1:4c:e6:9c:28:e9:2a:1e:53:ac:8b:be:05:e3:65:0d:26:25:
00:a5:73:64:f5:f2:4f:2e:f2:de:09:37:80:13:c2:a2:f4:9c:
0a:87:bc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:48 2024 by rpki-client on console-ams.rpki-client.org