Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/0IOenAV6jZ99PH9uH87n7ZKGo4w.roa
File: 0IOenAV6jZ99PH9uH87n7ZKGo4w.roa (raw, json)
Hash identifier: qlp+ve7ZAVrGZjdPZFV3J0xu1+XraT79tBUE9Y974yg=
Subject key identifier: D0:83:9E:9C:05:7A:8D:9F:7D:3C:7F:6E:1F:CE:E7:ED:92:86:A3:8C
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0190BAB09B4ECB4DF1B7BF65FCB004ED0F29
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/0IOenAV6jZ99PH9uH87n7ZKGo4w.roa
Signing time: Tue 16 Jul 2024 08:37:34 +0000
ROA not before: Tue 16 Jul 2024 08:37:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51396
IP address blocks: 193.68.88.0/24 maxlen: 24
213.21.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 17:10:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ba:b0:9b:4e:cb:4d:f1:b7:bf:65:fc:b0:04:ed:0f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jul 16 08:37:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0839e9c057a8d9f7d3c7f6e1fcee7ed9286a38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b0:0e:b2:d4:b1:3d:0f:87:7b:b4:b1:f8:66:
d3:62:58:7f:e5:f7:b4:2a:03:72:4d:6b:77:94:65:
af:54:8e:b8:d7:d1:97:e7:4a:a2:af:67:85:a5:9a:
c5:6c:de:51:65:26:8a:3d:da:d1:f8:12:d8:22:f7:
81:4a:d8:fd:39:02:5f:39:95:3b:82:4d:a8:71:45:
a9:42:52:5d:75:2e:8b:96:33:c0:04:2f:41:f6:57:
20:a3:a5:a8:b3:2d:de:4c:ce:b2:81:64:82:20:7f:
ce:22:87:12:2b:cb:3d:7a:d1:0e:33:d0:00:bb:6a:
c7:0b:a2:0c:b0:f1:62:ec:30:83:60:ea:4a:c6:15:
ad:b4:18:4d:ae:3c:ca:bb:a1:d6:60:ce:8d:d4:fa:
37:dc:65:d9:ec:8f:28:ed:ca:33:65:db:65:c8:63:
17:6e:e6:97:89:0e:e4:64:1a:fd:fb:7b:a2:b6:59:
d9:64:19:45:a9:78:9c:a2:dd:c7:d9:6e:b3:99:21:
a8:bc:6f:4d:a0:b2:c9:1c:00:d4:84:6c:24:2d:1c:
5d:d4:1c:92:13:3e:15:c3:a1:56:25:92:28:69:c4:
51:5c:83:50:9c:ba:27:64:ab:84:74:2e:cd:af:54:
f7:de:19:30:30:28:d0:a2:21:8e:91:d4:3a:7f:a1:
8e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:83:9E:9C:05:7A:8D:9F:7D:3C:7F:6E:1F:CE:E7:ED:92:86:A3:8C
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/0IOenAV6jZ99PH9uH87n7ZKGo4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.68.88.0/24
213.21.237.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ca:10:55:1c:14:bc:3e:92:fa:8b:40:a5:51:e5:f5:8c:d6:
f7:19:ad:b7:7b:e8:22:83:20:51:96:34:0c:f2:11:51:6b:92:
6d:c7:24:92:1e:d6:ef:a1:a1:f5:15:5f:c8:4b:c9:ed:98:d9:
18:1d:be:95:2b:24:bb:75:e9:46:e3:a4:d9:d5:3b:6b:34:ce:
2c:80:39:bd:a6:0c:ca:9f:68:80:cd:01:5e:80:66:84:b8:78:
f1:6c:29:af:39:6f:29:ec:0d:2d:e9:9c:b2:7e:ff:6b:32:24:
4d:16:98:2b:19:45:8f:31:14:6e:34:18:98:46:02:98:e9:0c:
d0:da:4f:85:42:03:5e:47:90:21:69:61:9f:df:d4:eb:ac:b0:
64:cb:78:87:b3:c8:d1:a0:c8:dd:e4:ca:67:13:25:57:6d:27:
96:90:00:09:7f:6f:05:07:73:4a:f9:8a:7d:50:62:46:a4:a3:
18:42:8c:cf:a3:db:55:bf:98:f1:15:c4:c6:88:c1:77:75:0b:
24:59:fa:7a:e2:d9:0d:64:14:e9:3f:e0:1f:d0:b4:4e:39:d8:
39:e0:a9:97:3f:e1:3d:fb:78:46:e9:7c:41:94:80:ad:1a:cd:
fd:17:11:cb:41:1d:26:a1:1f:f0:49:a7:3e:27:64:b6:fb:3a:
d5:1e:a6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 20:13:53 2024 by rpki-client on console-fra.rpki-client.org