Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/JIAjpBWzw3IqcuB8-dLy7dPlEC8.roa
File: JIAjpBWzw3IqcuB8-dLy7dPlEC8.roa (raw, json)
Hash identifier: Uxt/psUil8+nM950u89dqhwmTgk92BtJDTCIPys5p3U=
Subject key identifier: 24:80:23:A4:15:B3:C3:72:2A:72:E0:7C:F9:D2:F2:ED:D3:E5:10:2F
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 0189DEBEE34EA5A1E8FF60092F7E95F2C9E8
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/JIAjpBWzw3IqcuB8-dLy7dPlEC8.roa
Signing time: Thu 10 Aug 2023 09:19:59 +0000
ROA not before: Thu 10 Aug 2023 09:19:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197520
IP address blocks: 193.151.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:be:e3:4e:a5:a1:e8:ff:60:09:2f:7e:95:f2:c9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Aug 10 09:19:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=248023a415b3c3722a72e07cf9d2f2edd3e5102f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a0:3f:2b:76:d1:0c:2c:41:b0:c9:6e:68:58:
73:24:b6:f5:28:3f:29:cf:52:05:64:e4:b5:51:1b:
5d:10:8c:43:6a:a0:e7:50:3f:27:ec:a2:9d:f2:84:
44:07:3e:d0:ea:c7:7a:a3:59:cd:a7:74:7d:fd:1f:
50:6e:47:c1:b7:18:00:09:d7:75:ea:4a:8f:87:16:
40:0d:b3:ec:dd:98:74:18:89:a4:81:d9:86:ed:31:
b5:19:e3:5f:f8:fa:e2:fe:10:b1:3a:95:47:ce:60:
8a:89:74:50:92:bd:c1:29:59:3d:a9:bf:56:3b:91:
23:0d:fa:a8:5f:e2:8c:22:0e:63:2a:d9:57:b3:34:
06:54:70:48:eb:7a:8e:3a:1f:78:cd:e0:51:3b:3e:
41:a4:ef:be:56:e3:ac:56:1a:7e:68:35:bb:17:3c:
6d:90:96:87:66:d5:f5:20:06:c0:9c:33:07:ea:bb:
67:13:6d:4e:e0:a5:d3:f3:f8:89:42:e5:c7:b9:bd:
be:e4:e6:ca:12:6b:53:d9:11:b0:47:a6:c8:42:87:
b4:3b:69:27:d4:f1:62:1a:29:54:90:3a:e5:48:60:
9f:fa:ef:0a:2f:dc:6b:59:2c:c6:e6:f0:22:60:57:
f9:9d:6d:97:71:41:70:cf:1e:c8:7f:c6:47:20:1b:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:80:23:A4:15:B3:C3:72:2A:72:E0:7C:F9:D2:F2:ED:D3:E5:10:2F
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/JIAjpBWzw3IqcuB8-dLy7dPlEC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.164.0/24
Signature Algorithm: sha256WithRSAEncryption
11:7e:0a:7e:1d:20:bb:09:10:e2:6b:61:b4:ff:0c:70:59:9e:
fe:2c:47:68:f6:b9:01:dc:54:af:6e:60:3d:c6:5e:22:e0:97:
73:82:f7:0e:58:28:4e:d5:07:63:05:98:b8:ab:23:3b:66:ba:
f5:63:55:2e:93:8d:a5:f2:20:e5:e1:18:2a:02:82:70:2e:22:
c1:e3:36:e4:98:50:56:2f:10:d7:64:0c:85:82:1d:52:de:41:
f5:75:4a:86:35:1e:63:25:24:98:b8:9e:a3:07:ff:88:64:47:
47:0d:ab:75:1a:3f:57:98:b2:96:df:30:6e:25:6f:8d:c6:eb:
36:1d:34:e8:54:5d:29:d1:f2:0a:54:a9:87:e7:ee:37:89:2e:
af:ad:0e:a4:e4:3c:ab:00:b9:4a:19:c7:63:b9:fe:0b:cf:7e:
b3:c3:83:5e:7b:a2:e6:4d:c2:30:cd:f4:14:8c:74:0c:44:21:
98:6c:14:64:9e:10:dd:33:1f:04:ca:a1:b6:f9:31:bc:93:a6:
48:c7:ca:3c:1b:d5:5e:5d:4f:01:6b:b7:e2:be:f7:7f:66:fa:
bf:61:66:79:2d:45:e0:5c:38:82:6f:32:d5:bd:e0:e6:e2:88:
bf:10:3d:e3:65:4c:a7:b6:76:dc:d5:25:89:6d:61:6e:4f:fc:
b1:f6:a4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:30 2024 by rpki-client on console-fra.rpki-client.org