Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/sr1SxC-DnVP7II6CS9wKXUI0d0k.roa
File: sr1SxC-DnVP7II6CS9wKXUI0d0k.roa (raw, json)
Hash identifier: PvWFXyc4DeGAcwJl07/zP2HROA6zf+xzapStVLNX5CE=
Subject key identifier: B2:BD:52:C4:2F:83:9D:53:FB:20:8E:82:4B:DC:0A:5D:42:34:77:49
Certificate issuer: /CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
Certificate serial: 018BEB889FC3202EA6EB12A6050C6612C2DD
Authority key identifier: 5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/sr1SxC-DnVP7II6CS9wKXUI0d0k.roa
Signing time: Mon 20 Nov 2023 07:01:21 +0000
ROA not before: Mon 20 Nov 2023 07:01:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 193.203.110.0/24 maxlen: 24
193.203.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Nov 2023 09:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:eb:88:9f:c3:20:2e:a6:eb:12:a6:05:0c:66:12:c2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
Validity
Not Before: Nov 20 07:01:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2bd52c42f839d53fb208e824bdc0a5d42347749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1f:0a:f1:d4:dd:39:5c:1b:61:a5:81:ad:2e:
db:83:e8:dd:30:11:94:f0:22:70:ad:6b:50:76:62:
6d:1a:fb:c6:84:2f:1f:74:da:4a:64:70:5a:1c:f4:
20:47:c9:66:dc:64:6b:d0:0e:ad:6b:f0:34:37:36:
fe:a6:0b:d5:30:c3:47:3e:75:02:94:c2:6e:98:ac:
f8:47:aa:96:08:e4:5d:bc:5d:70:99:21:ed:12:38:
55:e6:37:da:16:2f:94:4b:53:f9:ce:e4:28:92:ea:
a0:8a:ab:3e:4c:0b:ab:b9:c8:cf:17:da:90:6c:e9:
ce:46:92:d8:0f:55:48:9d:82:53:c2:40:78:4e:0f:
c3:86:8a:b6:0e:11:4d:90:d0:01:b4:f1:6e:a6:aa:
72:a1:e5:9c:b7:1a:30:64:18:b7:53:d6:e2:32:a1:
2f:46:5f:62:ee:8f:27:f6:a1:a8:00:24:b2:d0:5c:
cc:ec:22:15:ae:ff:aa:4f:ef:b7:a8:18:ce:7b:f2:
51:e8:fc:3c:76:3c:92:4e:a9:09:5e:50:0d:92:3e:
a8:da:79:16:f7:2c:76:6f:6c:68:df:c7:a0:23:62:
ea:78:b9:24:89:1f:b2:77:84:f0:d0:9d:c5:19:50:
58:c8:90:07:6f:1f:89:20:d3:77:e3:01:02:e2:f5:
67:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BD:52:C4:2F:83:9D:53:FB:20:8E:82:4B:DC:0A:5D:42:34:77:49
X509v3 Authority Key Identifier:
keyid:5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/sr1SxC-DnVP7II6CS9wKXUI0d0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.24.0/24
193.203.110.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:55:fe:fd:79:15:75:d5:63:7c:a7:44:bf:31:c9:47:b5:ad:
f9:20:16:c5:19:68:ba:b4:10:f2:8b:25:8a:88:99:5b:14:cd:
ff:cc:cc:20:62:52:db:ff:51:1c:07:08:38:ab:38:4d:7b:6b:
71:08:77:61:7c:4a:62:91:88:53:ce:0c:b0:14:b6:fc:d8:3a:
38:bd:d6:a9:b5:1c:6c:00:77:99:bb:46:2e:f5:d0:50:1b:0d:
55:f4:b4:94:bf:2b:80:2c:11:5c:58:fa:9a:60:0b:a0:37:f2:
c2:a4:ca:77:1c:b8:00:8a:47:2b:ea:5f:f8:44:5f:53:93:a7:
01:d7:8a:c6:6a:b7:67:7f:e8:fb:1f:e5:94:3c:bc:07:0c:62:
48:89:f4:a3:ea:ad:88:04:14:68:c3:bc:db:be:31:14:62:59:
35:68:d3:c5:2b:83:b9:ee:fd:90:0b:8e:f8:89:f2:f7:af:34:
29:87:1e:4c:41:da:37:32:76:25:f8:78:fa:63:99:01:08:35:
d2:57:d2:ab:42:89:1e:bd:1c:b3:2f:c3:2c:68:42:f1:e1:71:
ad:20:c0:9f:ae:90:dc:a8:a1:2c:bd:9e:68:e3:3a:3a:c0:04:
6a:2c:b1:a1:fc:af:4a:4c:79:2a:fa:ca:50:60:2a:e7:7d:89:
8c:27:31:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:09 2024 by rpki-client on console-ams.rpki-client.org