Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4xnFPSTtVKFjf_1kscAOhbfauLM.roa
File: 4xnFPSTtVKFjf_1kscAOhbfauLM.roa (raw, json)
Hash identifier: 8IdZRd2QG1SIiSRuS6tNqYUk/31AHbG9qKv5rt1HVKU=
Subject key identifier: E3:19:C5:3D:24:ED:54:A1:63:7F:FD:64:B1:C0:0E:85:B7:DA:B8:B3
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018EDE044B5336543CE924A59707A88C1507
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4xnFPSTtVKFjf_1kscAOhbfauLM.roa
Signing time: Sun 14 Apr 2024 19:10:07 +0000
ROA not before: Sun 14 Apr 2024 19:10:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 193.8.112.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 13:42:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:de:04:4b:53:36:54:3c:e9:24:a5:97:07:a8:8c:15:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 14 19:10:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e319c53d24ed54a1637ffd64b1c00e85b7dab8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:19:6b:60:96:8d:a2:52:26:62:4d:f0:c1:ce:
10:2f:f6:d9:ee:b3:13:b3:95:06:56:95:28:25:e2:
00:dc:d5:e5:af:33:d4:3d:64:02:d6:e5:c0:b3:48:
7f:5a:25:e2:f7:8d:55:87:10:53:da:6c:75:bc:83:
23:15:7c:0c:57:12:d8:9f:76:eb:66:83:4d:70:80:
65:4a:e4:a9:f2:2b:e5:f0:ba:ae:0d:c7:82:88:20:
20:be:1b:6d:ed:57:8a:a2:e2:60:04:86:50:dd:84:
97:e7:7c:92:a3:9b:d7:fc:9f:ad:7c:55:4c:c9:10:
8d:48:ba:9e:3f:ef:77:2d:7e:d9:3b:08:0c:97:7f:
e9:68:e4:ef:7c:09:83:84:88:a8:ef:21:a9:9a:9a:
28:c1:74:a9:ec:00:97:23:6d:82:97:fe:2e:7e:23:
74:ac:ae:23:e2:05:8c:3d:45:72:5c:dd:c5:b9:5b:
6e:4c:16:f5:02:2e:cd:7b:c6:30:71:17:7a:e9:43:
7f:da:0f:ae:19:72:c1:f8:62:1c:5c:3e:bf:3c:d8:
9a:75:67:a9:5e:54:51:bf:91:09:b0:e7:6a:d6:06:
6f:f0:48:2b:4d:58:1f:77:37:74:0a:eb:be:4f:38:
0a:97:92:cb:b0:ca:d6:22:4b:d7:bd:99:91:4d:51:
94:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:19:C5:3D:24:ED:54:A1:63:7F:FD:64:B1:C0:0E:85:B7:DA:B8:B3
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4xnFPSTtVKFjf_1kscAOhbfauLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.112.0/23
Signature Algorithm: sha256WithRSAEncryption
52:a0:f3:14:57:3f:ac:fc:4e:92:48:ad:2e:96:9b:4e:0d:64:
46:d6:3a:94:23:53:39:01:ef:2a:b7:38:f4:52:c3:08:20:b5:
35:dd:06:6a:f0:be:91:43:43:db:ea:90:21:57:2c:a7:f2:1e:
fc:da:8d:23:d3:6a:09:ce:73:54:ba:81:6c:91:e6:5a:4c:fe:
3d:53:a6:c9:9e:f7:2f:df:68:11:33:c9:72:9c:8b:f7:61:ab:
50:87:c2:a8:39:08:c0:49:2d:9b:fc:bf:b8:90:34:8d:e8:ec:
0f:b3:6e:a9:fb:bd:4b:bc:51:5a:d8:c8:ad:fb:2e:3e:d0:1f:
cc:e5:e3:5b:d9:25:62:18:81:7c:92:b0:fd:17:77:0d:11:c4:
75:0a:45:ae:ff:3f:27:c2:b0:28:a8:b6:12:e7:fd:db:16:74:
13:ba:66:a3:2a:0b:6e:76:c0:d3:1f:7b:15:60:08:bd:97:44:
5e:62:f3:20:95:f5:49:1f:be:9d:bc:83:b3:6e:4d:ae:a2:95:
6f:a6:83:81:30:fc:20:c0:7f:72:9b:1e:4d:56:cb:2c:3f:ed:
7a:57:4f:9f:9a:f0:58:d5:ba:ac:5a:a0:85:ff:92:ab:23:5c:
0c:ef:6b:a3:d0:fc:88:ce:bd:b1:0b:1b:9a:9f:64:f9:f8:f6:
2f:2e:6c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org