Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/sH66hcGNq6PpPoQ4_MbC56obn4M.roa
File: sH66hcGNq6PpPoQ4_MbC56obn4M.roa (raw, json)
Hash identifier: Zufn/gD4U3Qr4688jHNAhkjT9vd1JUK8G/mkN+Rfyec=
Subject key identifier: B0:7E:BA:85:C1:8D:AB:A3:E9:3E:84:38:FC:C6:C2:E7:AA:1B:9F:83
Certificate issuer: /CN=20feef391f16300157bb78b2eaea06d61c20c945
Certificate serial: 01929198EEF5CB8DD9C11345A7F38626352F
Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/sH66hcGNq6PpPoQ4_MbC56obn4M.roa
Signing time: Tue 15 Oct 2024 19:12:51 +0000
ROA not before: Tue 15 Oct 2024 19:12:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 193.25.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Oct 2024 20:36:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:91:98:ee:f5:cb:8d:d9:c1:13:45:a7:f3:86:26:35:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945
Validity
Not Before: Oct 15 19:12:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b07eba85c18daba3e93e8438fcc6c2e7aa1b9f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:87:0c:a4:06:9a:21:05:d5:0f:80:8c:94:ee:
06:01:4f:bf:04:47:c9:47:6a:dc:8c:cb:61:57:bd:
48:0d:9d:a3:c3:c7:ff:b4:e2:e7:e4:6e:2d:2e:2a:
aa:47:fe:9e:9a:14:3f:f9:cd:d7:f1:b3:57:66:ac:
00:82:0c:39:96:51:e8:35:00:05:65:7d:d4:19:36:
9e:46:75:7f:a4:d6:1b:ca:2c:c0:37:16:a3:89:2f:
4c:15:b4:28:69:37:93:48:aa:8e:03:15:40:59:95:
6e:eb:b7:d6:d9:87:66:b3:c9:7b:b6:ff:37:f0:8e:
2c:32:0c:37:58:aa:3f:39:84:4d:f2:c0:92:50:19:
42:77:7f:dc:0b:a9:2a:16:58:71:97:c0:76:9d:15:
77:1c:ef:b9:f1:e0:42:2c:f0:1a:42:a0:33:b2:ba:
c8:92:4f:77:38:2c:89:bd:12:c6:4b:39:04:3d:76:
61:24:06:8a:03:30:04:0a:36:c4:58:7a:c7:07:98:
06:a8:58:52:88:9b:90:73:12:55:8d:5d:50:7c:71:
0c:0f:31:48:7a:37:cf:d7:a4:90:14:0d:a0:1e:ef:
3d:5d:6a:11:be:fc:5f:7b:ae:71:35:56:e8:9a:f3:
c9:8a:2c:5b:8b:e1:a8:51:e6:0a:aa:be:c9:0b:0b:
86:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7E:BA:85:C1:8D:AB:A3:E9:3E:84:38:FC:C6:C2:E7:AA:1B:9F:83
X509v3 Authority Key Identifier:
keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/sH66hcGNq6PpPoQ4_MbC56obn4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.167.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:99:96:b5:34:65:45:63:2d:96:0b:01:69:f9:74:2e:78:ce:
1e:eb:00:a9:1e:b7:f5:c0:51:5b:d9:a4:de:5c:7d:0a:06:79:
d8:b4:07:92:ce:ae:2d:f8:60:9f:e6:4d:ba:31:15:fc:43:db:
6a:79:16:ad:e9:a2:70:4e:28:c2:09:b6:20:fe:c5:6d:a9:6c:
52:49:2a:67:1c:48:f7:4b:91:aa:30:38:61:e1:3e:1a:d6:69:
68:83:89:19:63:9f:c4:28:25:c0:c3:1d:27:e8:00:1f:99:c1:
a4:04:ad:6c:fe:c7:4c:d3:b6:84:e7:54:5b:43:bf:70:43:49:
94:d0:d0:02:be:0a:cb:91:97:7c:d6:3c:5c:0d:2b:5d:fb:13:
d2:f7:59:d7:d7:92:90:ee:41:12:a4:5c:c9:92:4e:31:47:b5:
9d:4a:f7:c1:30:8a:9b:af:e7:ea:9e:61:d1:7a:0e:09:24:91:
1c:68:7e:9d:a7:37:ec:0b:b7:60:fd:b1:24:f3:cc:10:c2:f5:
b5:0e:31:ba:fa:ee:b2:9d:a2:da:eb:93:7a:9a:74:50:5f:1a:
1d:b6:69:84:e2:09:ea:a3:99:96:08:af:68:82:55:d3:cc:5e:
99:f0:f7:74:62:06:cd:3e:29:5f:16:53:bd:19:ba:23:13:72:
fc:03:a4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 22:12:23 2024 by rpki-client on console-fra.rpki-client.org