Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/6snHlXg25mRS8PqljqNJbvudOYs.roa
File: 6snHlXg25mRS8PqljqNJbvudOYs.roa (raw, json)
Hash identifier: 5/rGimYVVmCliBrYPFmddWcaukRnRtoOo5fHN/rcDNw=
Subject key identifier: EA:C9:C7:95:78:36:E6:64:52:F0:FA:A5:8E:A3:49:6E:FB:9D:39:8B
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 0185F3F3EEC0F817ADF2CC0B1ADBEF48D47A
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/6snHlXg25mRS8PqljqNJbvudOYs.roa
Signing time: Fri 27 Jan 2023 15:58:47 +0000
ROA not before: Fri 27 Jan 2023 15:58:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212222
IP address blocks: 193.227.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:f3:ee:c0:f8:17:ad:f2:cc:0b:1a:db:ef:48:d4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Jan 27 15:58:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eac9c7957836e66452f0faa58ea3496efb9d398b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fc:ca:c9:50:ca:eb:90:ee:92:e6:43:90:8b:
64:a8:8d:98:9a:68:97:f4:81:a4:25:10:e3:0e:09:
ce:50:f8:b4:b6:0c:f8:1a:c8:ef:14:a0:2c:70:53:
1b:c0:41:d0:29:f4:99:54:ff:31:b5:85:d2:29:22:
13:82:99:bc:77:22:9d:0c:d0:a9:28:45:22:ab:ba:
42:f5:06:5e:ed:eb:f9:a3:ff:cb:7a:73:66:ac:d0:
6d:de:2c:3d:12:04:cb:fc:c0:91:9f:0a:a4:5b:f2:
f2:95:06:c8:c5:42:71:b7:84:7b:51:04:72:b7:3a:
5d:1f:c2:0e:47:99:e8:20:94:62:aa:c7:ab:bb:31:
dd:af:33:85:da:56:d6:a2:7d:c4:d7:8b:86:aa:8f:
ef:45:cb:44:47:00:33:e0:0a:3d:7d:f9:a0:41:5d:
1e:84:03:00:6b:b3:93:61:e4:7e:53:92:d8:fc:3f:
31:8a:e2:d6:69:96:a9:32:22:ea:cd:e0:95:e5:35:
de:5c:ea:d2:b5:31:32:43:05:28:4b:24:78:bf:b6:
e4:48:3a:88:e0:fd:28:d5:8e:43:da:23:bb:9a:bb:
0d:cd:53:cb:13:98:ae:e5:01:53:58:e6:9b:5c:d3:
93:ed:3c:cd:47:96:cb:51:1a:5b:1d:03:8a:ab:f1:
d0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C9:C7:95:78:36:E6:64:52:F0:FA:A5:8E:A3:49:6E:FB:9D:39:8B
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/6snHlXg25mRS8PqljqNJbvudOYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.117.0/24
Signature Algorithm: sha256WithRSAEncryption
58:eb:73:e2:f2:25:e9:90:4d:f8:16:dc:d5:be:d9:b7:b7:7e:
f7:46:69:5a:c0:c4:e7:d0:e5:5a:7f:b6:cf:ca:03:b5:5a:f7:
82:39:78:29:de:cb:c1:a5:3d:66:b4:99:35:23:41:f8:6c:b1:
51:f1:42:65:d4:ae:a2:71:b6:7f:59:8f:e1:2d:9d:86:32:0c:
d1:72:57:2a:c9:cb:86:e3:64:67:c8:26:c9:b5:42:66:16:6b:
a2:4d:fd:da:c5:9f:f0:fc:8b:12:ae:ce:ad:6f:71:b2:89:72:
0f:b4:0f:16:bf:9d:bf:3a:2d:ef:37:a1:ee:4e:c1:b9:3b:9f:
84:d6:7c:2c:8a:8d:ac:57:76:83:8b:bc:5f:f7:0d:f5:31:e5:
a2:c6:c3:3f:bf:ba:c1:d6:84:48:3c:b0:02:23:f8:3c:e0:69:
61:b6:ca:05:fe:22:00:31:16:7a:8d:e0:e6:57:b9:bb:61:e6:
4a:b9:2b:a5:ed:eb:3d:ec:98:90:d4:de:5d:c6:39:e1:83:c1:
1a:e4:21:18:12:c8:0a:13:83:3a:40:0e:17:d8:a7:7e:b6:86:
81:aa:7d:9d:3f:fe:63:ef:72:c8:55:e7:c0:d7:e3:0e:43:0f:
27:67:f2:59:6a:bb:47:89:52:a5:4f:ad:95:1d:81:99:d5:3e:
40:48:e8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:51 2024 by rpki-client on console-fra.rpki-client.org