Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/p9yx22X0pjjTLvgldNn1Nl7fyIo.roa
File: p9yx22X0pjjTLvgldNn1Nl7fyIo.roa (raw, json)
Hash identifier: Kc1PwT+FYVywYQb7XkvhAveFtZYdRXW7v0bGXJWrRQA=
Subject key identifier: A7:DC:B1:DB:65:F4:A6:38:D3:2E:F8:25:74:D9:F5:36:5E:DF:C8:8A
Certificate issuer: /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial: 018668F5B137F4897ABA25FD632EEC967717
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/p9yx22X0pjjTLvgldNn1Nl7fyIo.roa
Signing time: Sun 19 Feb 2023 09:16:17 +0000
ROA not before: Sun 19 Feb 2023 09:16:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209500
IP address blocks: 193.31.7.0/24 maxlen: 24
83.229.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Feb 2023 15:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:68:f5:b1:37:f4:89:7a:ba:25:fd:63:2e:ec:96:77:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Validity
Not Before: Feb 19 09:16:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7dcb1db65f4a638d32ef82574d9f5365edfc88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9a:16:1e:cd:7a:f0:b4:14:29:5e:06:ed:38:
b6:39:0e:4c:b1:a0:8b:77:34:31:83:b2:87:ba:8c:
1a:91:28:c1:5c:ba:aa:a5:2c:6b:1f:a3:ac:cc:05:
19:b4:93:a1:5b:c3:84:5d:24:8f:60:e2:53:f5:db:
9e:ec:4b:c7:75:c6:b7:b3:61:14:5f:cd:f7:e5:63:
47:2b:1b:12:50:b6:be:52:1d:78:57:85:73:b0:3e:
ba:28:f1:49:43:2c:42:03:ee:d2:df:2b:5c:8e:5a:
47:70:76:a6:19:63:78:d6:99:a1:03:45:e3:02:3c:
a6:68:e6:f1:3e:29:6e:25:d2:f3:c6:ab:cd:95:09:
ab:48:ea:26:46:d2:2c:3d:2f:f8:00:9d:ad:58:72:
1c:65:3d:af:77:94:46:01:4e:a1:ba:f2:8f:b4:30:
d3:a9:f5:c7:30:c6:bc:eb:81:89:f6:9a:dd:05:10:
52:a7:e3:0a:0e:b0:4d:cf:d6:69:2f:9b:93:c8:7d:
ee:9f:32:6b:fc:c5:06:e9:94:68:19:4b:db:9f:fa:
9a:d7:49:bb:16:21:7d:22:4f:ea:65:22:21:f2:fa:
4e:d4:9c:65:94:35:22:f9:fc:71:9e:26:29:d2:93:
23:15:17:b6:56:e3:0d:d8:58:fa:08:7e:e8:d2:cc:
7a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DC:B1:DB:65:F4:A6:38:D3:2E:F8:25:74:D9:F5:36:5E:DF:C8:8A
X509v3 Authority Key Identifier:
keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/p9yx22X0pjjTLvgldNn1Nl7fyIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.62.0/24
193.31.7.0/24
Signature Algorithm: sha256WithRSAEncryption
94:e3:dc:80:05:14:73:33:ad:82:25:43:d4:08:ee:97:d2:32:
19:df:a7:9e:59:3a:d3:f5:98:38:87:20:43:6d:49:6b:19:8e:
35:9d:48:40:94:e7:2d:5b:7c:a8:9b:24:fd:47:f8:95:a1:c1:
1c:af:9e:36:58:8d:7f:52:da:8a:19:33:76:62:93:28:c6:f9:
24:a5:7e:0d:cd:c2:39:2b:a7:90:32:94:bc:aa:b1:ae:ed:6a:
f0:9e:9c:83:b5:fe:17:6e:2d:13:f8:c5:9e:86:7d:e2:2f:cf:
1c:6b:a2:06:6e:86:d0:b9:d9:b3:62:74:8e:f9:83:0e:75:4d:
35:02:b8:93:10:35:66:29:26:d0:0b:7b:58:ab:6d:59:54:b2:
30:93:6b:b4:27:84:27:3b:40:8f:53:5e:5d:04:ff:88:f1:42:
8e:db:45:f9:fe:4f:8f:55:d7:8e:a0:0f:32:ab:37:ba:ca:95:
b4:14:7d:98:11:46:4e:ea:2a:0f:41:51:3d:f1:5a:53:b7:37:
61:70:30:ff:3d:51:10:55:d1:b3:fb:bd:ed:45:87:12:e7:b9:
e0:46:85:0d:4c:0b:4a:29:dd:57:d6:d3:dc:08:ef:9b:a8:c6:
d1:d5:9d:bb:17:b4:59:0a:88:df:38:21:ef:86:a7:8d:54:5c:
de:ae:c9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:24 2024 by rpki-client on console-ams.rpki-client.org