Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/b-BkVB1r9aNnCfVOz_Y7oAycR28.roa
File: b-BkVB1r9aNnCfVOz_Y7oAycR28.roa (raw, json)
Hash identifier: 4FtXfooLZJcYOj3xCeNOBc58nyRboJ8Gu8ME3k3XswQ=
Subject key identifier: 6F:E0:64:54:1D:6B:F5:A3:67:09:F5:4E:CF:F6:3B:A0:0C:9C:47:6F
Certificate issuer: /CN=9b5193d843af193e24875686673c95896eae3497
Certificate serial: 0185704B9FB4044BBE258AB0FA2AE5FB0DB0
Authority key identifier: 9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/b-BkVB1r9aNnCfVOz_Y7oAycR28.roa
Signing time: Mon 02 Jan 2023 02:24:42 +0000
ROA not before: Mon 02 Jan 2023 02:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50117
IP address blocks: 193.104.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:9f:b4:04:4b:be:25:8a:b0:fa:2a:e5:fb:0d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5193d843af193e24875686673c95896eae3497
Validity
Not Before: Jan 2 02:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fe064541d6bf5a36709f54ecff63ba00c9c476f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:be:8b:0a:c9:a8:2f:07:3c:f6:07:25:ac:f5:
dd:4d:10:40:b6:56:32:36:65:1a:e6:ba:d1:14:d3:
9d:b2:01:b8:50:f8:17:15:f0:23:3a:91:6e:35:85:
d1:78:26:f7:52:f6:31:e4:07:71:dd:6e:95:7c:1c:
1e:1f:05:19:13:33:bd:33:f6:26:dd:92:ed:27:2b:
c9:2c:a8:c7:c3:63:4a:82:62:0a:6e:e7:2e:b5:86:
fa:4f:f4:40:36:1e:8a:ba:2d:62:29:a9:46:0e:51:
23:24:6d:dc:f4:0b:9b:79:cf:84:50:92:ff:03:7b:
9a:3d:ee:84:49:ed:b5:12:f7:67:3d:df:56:2a:0b:
83:8f:8f:58:0c:ba:21:70:ce:20:95:c6:4d:30:1f:
74:3f:4a:b4:90:6e:5f:aa:16:8d:eb:67:4d:6c:67:
5d:ff:98:40:f1:65:ba:75:9f:05:18:4c:72:3d:4a:
8a:3a:23:00:35:e2:4f:93:8f:3c:3c:74:4c:d2:54:
85:0c:ea:4a:ca:30:85:a2:9c:96:3c:95:09:35:f1:
d8:bb:0d:87:6d:0b:8e:27:33:a1:a9:71:28:59:07:
1c:7d:05:88:e5:6c:2d:0a:cf:46:7f:1f:8d:41:27:
27:0c:f1:5d:ec:e8:38:b1:e2:fc:14:24:0f:6e:42:
69:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E0:64:54:1D:6B:F5:A3:67:09:F5:4E:CF:F6:3B:A0:0C:9C:47:6F
X509v3 Authority Key Identifier:
keyid:9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/b-BkVB1r9aNnCfVOz_Y7oAycR28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.61.0/24
Signature Algorithm: sha256WithRSAEncryption
05:80:1c:2b:26:79:13:d0:fa:fe:94:59:74:da:f4:bf:a7:03:
29:f6:b8:38:b5:4d:7e:d5:74:b4:d0:1f:d8:08:01:01:b7:59:
f7:69:32:8d:e9:27:b6:64:69:0a:a6:83:6c:98:1e:7d:9d:e0:
01:dd:73:f5:6c:59:fb:0c:24:31:97:09:41:c6:4e:a2:0a:17:
f1:dd:ad:6d:5a:96:1c:30:42:80:77:42:4b:01:b0:c0:89:37:
81:7d:87:e4:93:e6:19:01:a7:1e:7a:a3:2f:c8:f2:fc:e3:37:
2c:45:c7:c7:fe:bf:b1:37:bd:65:b0:3c:e4:f4:c1:34:3c:d7:
34:fe:af:c0:0f:24:a6:ad:81:30:52:3b:72:78:8d:ce:68:d0:
78:a5:f3:75:2b:4c:98:30:3b:cf:ec:53:0f:30:fd:f0:4b:7f:
c8:5c:ab:4e:e6:e9:af:19:cb:34:c9:27:c9:7a:33:db:1c:f4:
bd:48:77:03:9d:c4:1c:f0:d3:44:5a:69:b4:f3:39:f7:07:f2:
07:8b:ae:1d:14:10:35:7e:7d:1f:6f:43:04:6d:7d:21:96:d4:
77:25:e8:de:50:81:5e:71:e4:3e:32:14:6c:d4:57:1e:ea:41:
93:46:54:8e:8b:b3:81:53:d9:e9:6d:3b:6e:40:51:64:8e:71:
00:58:5f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:57 2024 by rpki-client on console-fra.rpki-client.org