Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/L5kZMcfJfMMxKE2fTWuYA9HBMIs.roa
File: L5kZMcfJfMMxKE2fTWuYA9HBMIs.roa (raw, json)
Hash identifier: 4eZJlGuLXCnDSEpABWgw9O796RgYnQ5kcbSbfuJQGck=
Subject key identifier: 2F:99:19:31:C7:C9:7C:C3:31:28:4D:9F:4D:6B:98:03:D1:C1:30:8B
Certificate issuer: /CN=20feef391f16300157bb78b2eaea06d61c20c945
Certificate serial: 019254331D24F062CD475EFAC6D9A2EDCBA0
Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/L5kZMcfJfMMxKE2fTWuYA9HBMIs.roa
Signing time: Thu 03 Oct 2024 21:04:48 +0000
ROA not before: Thu 03 Oct 2024 21:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207388
IP address blocks: 193.25.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 10:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:54:33:1d:24:f0:62:cd:47:5e:fa:c6:d9:a2:ed:cb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945
Validity
Not Before: Oct 3 21:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f991931c7c97cc331284d9f4d6b9803d1c1308b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:0a:33:c2:13:4f:ec:37:28:51:e6:18:3b:
1e:3b:9a:d6:28:f5:3a:af:b6:ff:f4:da:44:09:86:
2d:26:95:45:2a:6b:e6:01:eb:aa:32:87:d2:eb:ff:
a4:ed:af:06:37:f0:97:39:bf:34:b5:76:ee:0f:f2:
c2:2a:01:1d:ef:5e:2b:44:db:9f:1e:f9:0b:90:fc:
09:25:ba:f6:90:66:cb:91:f7:7d:24:05:19:63:4e:
00:d5:09:3b:f9:53:11:2e:0e:bf:19:9b:13:40:c1:
44:44:1b:6c:85:da:29:63:f0:b3:c5:18:7c:17:09:
04:22:2d:68:8a:fd:af:b8:bb:6f:d7:3b:ae:b6:36:
57:ab:c5:26:bc:f5:e5:3b:18:3a:5c:a8:9f:76:20:
9b:87:ac:12:54:a0:2a:c2:34:dd:10:0c:00:15:8d:
57:54:c0:c1:3f:77:de:a0:af:db:c9:12:a9:ea:84:
36:0e:62:7a:76:ef:31:4c:93:19:2a:c2:0d:e1:50:
be:5b:db:b1:b7:55:c4:cc:52:3f:ad:d5:dd:84:05:
db:2e:d5:d7:58:79:8c:70:50:9f:7d:45:6f:c4:f7:
e6:88:e7:d0:76:43:bb:d5:57:17:b6:0e:b7:98:2c:
da:e1:2b:48:a3:7b:bf:f6:58:fc:82:1a:20:7e:4b:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:99:19:31:C7:C9:7C:C3:31:28:4D:9F:4D:6B:98:03:D1:C1:30:8B
X509v3 Authority Key Identifier:
keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/L5kZMcfJfMMxKE2fTWuYA9HBMIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.167.0/24
Signature Algorithm: sha256WithRSAEncryption
77:9c:2f:57:56:c3:99:1d:9b:61:54:75:f1:fa:31:94:37:cf:
17:14:2a:e2:3a:5c:5d:e7:3f:f5:5d:70:7f:06:de:37:12:95:
f6:f7:5f:ed:3b:88:81:f5:57:d2:f2:de:ff:0a:0c:cf:66:52:
5e:ea:36:e9:97:03:16:43:c0:ec:fa:45:16:7a:f9:6b:c7:86:
5e:62:57:05:08:19:87:33:c2:b8:01:96:23:7c:75:3c:58:2a:
57:7e:e7:a0:e7:42:04:eb:a3:1a:84:43:aa:64:c4:d4:3c:20:
94:18:47:9e:19:ef:b1:34:0c:cb:5d:c9:31:ff:76:47:7e:e0:
7b:9d:3b:96:21:ca:b6:fc:5f:e9:ba:6a:96:75:88:34:b5:31:
3c:ff:25:c4:3c:0a:83:81:88:8b:bc:28:a1:71:75:da:fc:68:
6f:99:e7:74:2f:ea:2c:27:5f:1e:ad:ca:98:a1:02:c1:5b:b1:
df:b5:7d:83:c3:f9:e2:96:75:a9:9e:31:ef:a6:8a:a8:70:62:
4c:d8:c3:88:c8:09:61:26:82:7f:36:49:87:f2:9c:b1:ce:a0:
72:7a:ed:d6:da:05:a4:28:3a:51:53:cf:dd:95:ab:f8:75:b7:
35:45:8d:d2:25:0a:b6:33:d9:a1:23:95:f7:f6:bb:72:36:56:
44:ee:45:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 16:08:17 2024 by rpki-client on console-fra.rpki-client.org