Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/2Fhr8BWdIIAT6vy5mvtDJYdXn3g.roa
File: 2Fhr8BWdIIAT6vy5mvtDJYdXn3g.roa (raw, json)
Hash identifier: pSqEm2CDaaef7gIuDlfYdk8dFASP2Nu5ghgZ0DkGMH8=
Subject key identifier: D8:58:6B:F0:15:9D:20:80:13:EA:FC:B9:9A:FB:43:25:87:57:9F:78
Certificate issuer: /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Certificate serial: 018570CC02D3818866E793F8EB21783F8187
Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/2Fhr8BWdIIAT6vy5mvtDJYdXn3g.roa
Signing time: Mon 02 Jan 2023 04:44:56 +0000
ROA not before: Mon 02 Jan 2023 04:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21100
IP address blocks: 193.106.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cc:02:d3:81:88:66:e7:93:f8:eb:21:78:3f:81:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Validity
Not Before: Jan 2 04:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8586bf0159d208013eafcb99afb432587579f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:78:89:9d:8b:cd:94:fd:e2:06:f3:b9:be:
de:30:4c:ec:81:17:3c:19:2a:12:04:83:0d:e8:0e:
f4:d0:41:d4:55:b9:bc:32:22:c3:cf:79:d0:fa:1d:
13:9b:94:ca:a7:65:0f:33:ac:ca:67:d1:a6:86:af:
6d:a5:c5:36:d3:0a:b0:6e:89:4c:a2:fd:4b:21:18:
17:1b:55:5c:75:85:a8:58:5d:d1:9f:fe:48:8a:c5:
27:e1:f8:e5:73:35:ed:d3:45:e9:06:f1:6b:9b:33:
a6:83:88:79:77:13:10:1f:62:1a:2e:67:93:84:1b:
4b:94:28:d5:75:fe:00:83:48:67:79:7b:28:43:e2:
57:c9:de:b2:51:ed:c2:bc:3e:32:31:91:4d:a4:fd:
02:b3:bd:3d:db:62:ec:38:99:ae:50:c8:5e:ad:c7:
56:22:05:a4:b6:5c:b0:97:1c:23:c3:a9:f7:f2:c4:
f5:6e:c6:13:8d:b0:e4:09:dc:44:e7:73:9d:da:5b:
14:46:8d:46:8d:0a:1a:3c:8c:99:99:a9:8f:45:57:
f0:b9:d9:64:04:a6:6c:98:60:81:f5:07:35:fd:50:
80:a8:b6:6e:12:db:75:d4:6d:8e:15:8b:07:bc:ec:
26:f2:57:81:ba:3c:68:13:db:df:72:52:40:2e:f7:
ab:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:58:6B:F0:15:9D:20:80:13:EA:FC:B9:9A:FB:43:25:87:57:9F:78
X509v3 Authority Key Identifier:
keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/2Fhr8BWdIIAT6vy5mvtDJYdXn3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.150.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:04:06:ee:56:13:08:19:95:64:1b:28:a9:70:82:ec:fa:0c:
73:5d:82:21:4b:76:21:9a:09:ba:d9:01:9e:ad:33:6b:6f:c9:
e4:86:2a:e4:25:d7:6c:df:8d:02:ad:cc:83:8a:be:f0:0c:89:
5a:cf:b4:bf:46:b9:22:81:e5:16:58:26:1b:77:17:bf:af:23:
52:43:dd:ad:16:8a:df:56:1a:6f:c2:ff:d2:77:98:5e:33:e8:
a3:62:a4:3f:ee:45:2b:79:71:30:09:47:50:eb:92:ec:cf:54:
1b:1f:48:9b:55:3c:de:60:7e:26:b8:c9:86:35:51:a0:d5:0e:
4b:36:64:59:64:c7:bd:6a:a4:3e:92:67:3c:36:3d:93:b1:1b:
b1:1d:7f:68:a4:58:3b:4e:1f:29:73:a0:1d:98:b0:0e:9a:63:
2a:30:23:4b:a9:a1:03:e4:be:f9:36:43:1f:c0:44:5f:f8:f5:
f0:51:d6:77:7a:59:e6:fc:f0:57:09:04:df:c9:dd:0f:a0:16:
c9:73:c6:36:c4:31:f2:25:03:d2:0a:a2:8f:a6:05:17:4b:02:
52:e0:07:75:05:d6:71:e2:9c:c6:c9:e9:12:88:e5:77:96:01:
e3:8c:84:32:02:f0:ab:61:7d:a6:7b:94:09:cb:52:6e:38:cd:
8c:4e:3d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:18 2024 by rpki-client on console-ams.rpki-client.org