Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/sNuV6R_IhxCPLlK_mYRao4MzpeA.roa
File: sNuV6R_IhxCPLlK_mYRao4MzpeA.roa (raw, json)
Hash identifier: Fih63d4meE86+xuPkTIg9wUaU75fH471856oNEDq4hs=
Subject key identifier: B0:DB:95:E9:1F:C8:87:10:8F:2E:52:BF:99:84:5A:A3:83:33:A5:E0
Certificate issuer: /CN=edfffb3c661e2f78a5785be95916044b06af51d2
Certificate serial: 018F38FE3CD629F4425D07A66574CBFF8097
Authority key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/sNuV6R_IhxCPLlK_mYRao4MzpeA.roa
Signing time: Thu 02 May 2024 11:08:56 +0000
ROA not before: Thu 02 May 2024 11:08:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57087
IP address blocks: 193.163.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 May 2024 18:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:38:fe:3c:d6:29:f4:42:5d:07:a6:65:74:cb:ff:80:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfffb3c661e2f78a5785be95916044b06af51d2
Validity
Not Before: May 2 11:08:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0db95e91fc887108f2e52bf99845aa38333a5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:76:f2:13:43:dc:93:28:ab:06:85:20:ce:56:
13:29:0d:6d:4d:81:54:ca:eb:7c:77:62:b5:3d:aa:
4a:a2:bf:9c:75:04:71:3b:ae:a3:e2:8e:66:42:e0:
86:f3:08:57:86:14:3f:16:60:e2:2e:72:0d:13:76:
50:80:c0:09:6f:8d:cf:41:6a:67:2f:f9:50:40:ae:
02:20:5e:d0:f5:5d:00:24:c6:30:b9:f8:b4:fb:27:
bb:cc:b4:56:d9:62:61:c6:b7:13:02:69:7a:3f:aa:
15:9d:f5:43:69:52:99:e0:7a:5f:47:8c:d3:f3:2b:
d2:84:b0:34:d0:28:e0:e1:57:3e:f0:f4:b0:d4:70:
8c:6b:7a:4d:94:d4:c7:5c:ad:43:3f:5b:f4:fd:27:
37:e6:ad:62:1f:71:d2:fb:66:82:71:0c:c8:35:d6:
08:7b:43:94:0f:0f:de:a1:a7:1b:79:e8:c7:a6:b6:
94:68:4f:84:5a:d5:5f:08:68:eb:4e:e8:c9:1e:97:
04:32:74:08:c8:42:cb:c4:83:42:c1:06:4c:a1:52:
da:8a:46:eb:24:e0:c0:4e:fe:ab:34:10:b1:ed:45:
e0:0e:73:d2:0b:07:b3:fe:aa:9c:5f:13:a5:65:34:
7c:be:2a:57:ba:1e:f0:ca:75:64:83:bc:00:10:be:
1b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DB:95:E9:1F:C8:87:10:8F:2E:52:BF:99:84:5A:A3:83:33:A5:E0
X509v3 Authority Key Identifier:
keyid:ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/sNuV6R_IhxCPLlK_mYRao4MzpeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.44.0/24
Signature Algorithm: sha256WithRSAEncryption
05:3f:72:dd:0a:ee:e2:bc:3d:cf:68:b4:6b:4c:8e:d1:51:a1:
9b:2a:e7:0d:5c:ae:cb:7d:f8:a0:ab:7f:22:46:9a:59:3f:57:
f2:16:f7:85:cb:e5:b6:c3:f0:e4:1c:d2:5d:6b:83:07:d6:f4:
8f:d1:26:21:6f:48:35:78:87:54:26:bc:77:37:c7:c5:54:cb:
28:ef:99:c6:04:4a:9e:06:c3:cd:ca:ce:e9:9c:ba:a5:69:5b:
f0:66:ee:2f:4f:98:08:7a:ba:1f:0f:bc:9c:96:7f:da:b6:7c:
9e:3a:34:43:b5:ed:c3:6a:8c:0f:85:5d:25:90:b7:ae:07:f4:
74:6b:25:dc:c4:6d:5f:37:0b:54:38:4e:f0:1c:55:f9:f2:e8:
73:8b:7f:61:14:2d:62:7f:e0:0d:62:10:97:53:72:e3:b9:24:
e9:e5:85:c8:8a:e9:17:2e:00:5f:fe:6a:93:5f:1c:fe:ce:72:
8d:27:b5:0f:e2:6c:b3:e4:0f:1d:63:4e:68:d7:8d:45:31:bd:
2b:6f:a9:f4:25:64:4d:86:a1:f1:68:74:4d:cb:0d:32:0c:29:
d9:6b:35:c3:a8:49:74:b4:d4:10:bc:55:3c:53:56:8c:b3:1c:
52:44:d0:34:86:ca:d6:a2:c8:ed:37:f1:be:2d:bf:4e:a3:3a:
c8:7d:c2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:42 2024 by rpki-client on console-fra.rpki-client.org