Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/itBLbrwFRiKp5iUpCJqqB4KfeVI.roa
File: itBLbrwFRiKp5iUpCJqqB4KfeVI.roa (raw, json)
Hash identifier: tnaByf7GYLnAue8+r0pIWD+Ne0A52o/WRq/95yB9Id8=
Subject key identifier: 8A:D0:4B:6E:BC:05:46:22:A9:E6:25:29:08:9A:AA:07:82:9F:79:52
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 018DB21A90B407C45F30032172B4E6BD2F84
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/itBLbrwFRiKp5iUpCJqqB4KfeVI.roa
Signing time: Fri 16 Feb 2024 13:28:21 +0000
ROA not before: Fri 16 Feb 2024 13:28:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203866
IP address blocks: 193.68.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 10:59:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b2:1a:90:b4:07:c4:5f:30:03:21:72:b4:e6:bd:2f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Feb 16 13:28:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ad04b6ebc054622a9e62529089aaa07829f7952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f2:cc:b9:4d:4d:74:bf:1e:2c:10:6c:30:7a:
31:e1:38:6c:eb:69:af:70:1f:dd:16:3e:d4:5b:47:
83:c2:5c:7a:0d:36:21:48:18:2f:f6:cd:b2:7e:c9:
24:a1:9d:9c:df:68:1b:3c:94:60:ff:3c:a4:bd:d3:
58:ce:ad:4f:8f:13:24:52:e0:ea:0d:b9:83:11:67:
12:e0:72:3f:03:86:7d:2a:be:2e:1d:6b:ec:4e:eb:
f5:dc:71:c8:c3:b3:26:69:a6:83:c8:29:ee:5b:09:
6f:1d:37:d1:0e:1f:bd:54:27:77:80:0f:be:8b:28:
92:b5:76:5b:00:fc:0c:23:5f:ee:4b:d3:bc:4b:26:
b9:e8:6a:51:b9:a0:7a:0a:32:64:77:3d:45:46:93:
c0:57:9c:02:a2:69:9f:2f:f7:1a:02:ce:2d:73:55:
9b:5f:3c:d7:96:33:6f:6c:ef:35:70:a1:47:c7:55:
42:d7:dd:c3:a1:4c:d4:02:70:03:86:99:68:23:ad:
ef:b7:9d:0b:64:d4:d5:a7:23:ea:ae:0a:be:97:10:
c9:25:0d:5a:b4:0e:f0:8a:8b:d5:ca:e7:c1:d6:08:
9c:38:ff:d2:77:0d:5e:b7:3d:68:b9:f9:db:c7:ff:
ab:cf:13:17:75:8a:0f:0b:c2:0f:e0:40:db:01:98:
59:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D0:4B:6E:BC:05:46:22:A9:E6:25:29:08:9A:AA:07:82:9F:79:52
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/itBLbrwFRiKp5iUpCJqqB4KfeVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.68.67.0/24
Signature Algorithm: sha256WithRSAEncryption
97:5c:2c:b9:c1:8f:07:ec:30:79:ac:e0:cd:69:6a:cc:97:67:
f4:1d:40:03:35:23:c3:7f:f1:33:33:f1:08:56:08:f8:a0:c0:
42:16:f6:5f:39:a6:17:69:cf:b0:ec:22:27:33:5e:4e:c0:16:
5a:e5:16:ec:56:4b:ad:51:d9:70:44:a1:bf:b5:12:0c:cb:48:
1e:38:a8:98:72:a4:9d:04:b8:14:62:5f:dd:0c:a9:9c:51:d1:
7f:47:cc:ce:a3:6a:e1:ff:c9:d5:a5:3d:57:33:31:a7:76:fd:
05:85:9b:03:2c:02:2e:d7:09:ee:6d:f7:3d:15:99:25:12:8c:
43:8c:5b:0e:85:5c:03:56:4b:24:6b:67:87:46:16:14:c9:59:
da:63:9a:a3:21:81:f1:88:14:2e:21:2f:69:b3:16:99:43:6c:
d6:37:a5:b0:d5:ea:59:80:c7:07:1a:ae:3c:18:b9:d9:f4:60:
b8:86:e0:18:03:41:4e:41:19:38:0f:d2:2a:29:c5:6f:ea:77:
84:30:3d:41:64:28:32:37:30:37:ad:af:97:7a:9a:7c:5d:9f:
3a:d0:0e:b6:7f:ff:8e:c1:77:54:10:20:6c:35:45:20:7e:64:
c4:a3:9e:78:81:eb:f2:4a:89:2e:cd:09:ec:ba:f1:11:d2:82:
36:4b:20:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:49 2024 by rpki-client on console-fra.rpki-client.org