Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/F7VK39q2HlcupFIqfxCcxTnHNjM.roa
File: F7VK39q2HlcupFIqfxCcxTnHNjM.roa (raw, json)
Hash identifier: 9TnKT6KYw/OLqTcFvsmttqTw4oi7aNeJ8hDbH8SHSI8=
Subject key identifier: 17:B5:4A:DF:DA:B6:1E:57:2E:A4:52:2A:7F:10:9C:C5:39:C7:36:33
Certificate issuer: /CN=ee0581767af4579e44da977b1082d94b3c7b9298
Certificate serial: 01881928E12B8E2A228C5450B6A26241F52C
Authority key identifier: EE:05:81:76:7A:F4:57:9E:44:DA:97:7B:10:82:D9:4B:3C:7B:92:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gWBdnr0V55E2pd7EILZSzx7kpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/F7VK39q2HlcupFIqfxCcxTnHNjM.roa
Signing time: Sun 14 May 2023 07:28:09 +0000
ROA not before: Sun 14 May 2023 07:28:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29684
IP address blocks: 193.105.119.0/24 maxlen: 24
195.85.224.0/24 maxlen: 24
2001:678:39c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:19:28:e1:2b:8e:2a:22:8c:54:50:b6:a2:62:41:f5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0581767af4579e44da977b1082d94b3c7b9298
Validity
Not Before: May 14 07:28:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17b54adfdab61e572ea4522a7f109cc539c73633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:77:85:cd:2f:c1:98:ea:0f:d3:90:95:92:79:
38:33:a4:a0:81:2b:14:d8:6a:a5:eb:99:5c:aa:a8:
53:91:f2:42:53:42:c2:b5:3b:fb:eb:27:90:6c:56:
4d:0f:2e:06:0b:f0:39:51:8c:fe:9d:f0:39:08:d0:
a5:6f:3e:ae:c6:a9:41:90:5f:96:65:d3:2d:be:d0:
f5:f6:45:13:6e:12:d3:f4:52:f6:cc:a2:b4:80:e1:
3e:d5:91:ea:49:57:36:b4:ec:0b:e5:37:8a:90:77:
5c:dd:28:6e:9e:92:e7:26:56:86:e2:9d:17:4d:ee:
3f:54:ee:56:94:5b:6e:aa:c2:c1:27:4c:37:c3:93:
94:5e:41:b1:5d:5f:09:4e:41:71:b1:ce:bc:63:a3:
2b:29:2c:ab:bc:75:17:1d:c8:64:17:c2:e9:41:fe:
47:c4:f5:47:6c:a5:e2:70:18:66:f4:df:1d:73:15:
ef:82:c3:e1:ab:32:f7:c7:de:e0:a6:45:9e:34:6e:
25:42:6b:e7:d8:82:c1:7e:cf:ea:c6:8a:2d:05:f2:
aa:97:59:cb:5e:40:a1:9e:5d:a0:45:53:e9:35:7c:
a5:46:83:b6:f5:d9:74:eb:b8:24:d4:f0:7d:9e:30:
df:69:a1:94:2f:35:e7:46:46:3e:27:3a:91:8f:88:
8a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B5:4A:DF:DA:B6:1E:57:2E:A4:52:2A:7F:10:9C:C5:39:C7:36:33
X509v3 Authority Key Identifier:
keyid:EE:05:81:76:7A:F4:57:9E:44:DA:97:7B:10:82:D9:4B:3C:7B:92:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gWBdnr0V55E2pd7EILZSzx7kpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/F7VK39q2HlcupFIqfxCcxTnHNjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/7gWBdnr0V55E2pd7EILZSzx7kpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.119.0/24
195.85.224.0/24
IPv6:
2001:678:39c::/48
Signature Algorithm: sha256WithRSAEncryption
b0:2e:6a:5a:a0:ec:91:97:ad:3c:ef:22:ec:3b:df:2c:b0:14:
05:21:f9:ea:db:92:97:b6:70:66:ef:3a:a6:a1:f6:5f:8e:e7:
9b:c0:b0:28:62:e2:56:3c:59:26:18:f8:a7:d8:d1:26:c1:cd:
49:2e:45:6b:d4:8b:89:f4:52:1a:cf:04:37:a6:66:78:03:6f:
b0:4b:12:54:4f:7e:6b:b5:a7:bc:39:c4:45:16:d9:ad:5c:cb:
96:dc:ca:34:b4:25:0f:9c:e6:72:68:be:08:f6:98:57:13:98:
d1:e0:77:c3:8e:43:f1:b8:f5:f4:1d:95:70:06:ce:3b:b2:a5:
c1:1f:80:28:c1:cb:32:b1:7e:01:95:60:dd:54:e6:de:c9:93:
90:f6:a9:d5:a0:e0:4a:e2:1a:af:8b:85:68:c2:19:26:69:4c:
d4:1c:31:90:df:63:d8:6d:f1:48:9e:a6:e8:9e:10:f0:f3:61:
b4:ed:7e:ec:1c:a9:9e:86:32:13:bb:ec:1d:8a:d0:86:94:0b:
af:94:f4:e4:b2:c4:c3:a3:be:92:76:73:e0:8f:ee:95:74:e6:
ef:24:4e:8b:71:13:a2:6c:1d:25:61:82:23:f4:a4:fb:56:b8:
aa:83:ac:02:9e:a0:77:0c:97:2b:e8:e9:b8:78:06:74:70:ca:
13:b8:9a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:28 2024 by rpki-client on console-fra.rpki-client.org