Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c1d4a2-7c4e-4adc-8f65-b148d4f066ce/1/0vk6cmAW7KOiPEQK1J9aIJMLWuM.roa
File: 0vk6cmAW7KOiPEQK1J9aIJMLWuM.roa (raw, json)
Hash identifier: H814PtWiy8p/G6S1idRMxzjb6Tmxc9rLe/X488TKuto=
Subject key identifier: D2:F9:3A:72:60:16:EC:A3:A2:3C:44:0A:D4:9F:5A:20:93:0B:5A:E3
Certificate issuer: /CN=91189e6edf53e40672c9b5f1f3519728291ec2ee
Certificate serial: 018AEF9564E3EA8733B25D19417D1209C9FC
Authority key identifier: 91:18:9E:6E:DF:53:E4:06:72:C9:B5:F1:F3:51:97:28:29:1E:C2:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRiebt9T5AZyybXx81GXKCkewu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c1d4a2-7c4e-4adc-8f65-b148d4f066ce/1/0vk6cmAW7KOiPEQK1J9aIJMLWuM.roa
Signing time: Mon 02 Oct 2023 08:50:59 +0000
ROA not before: Mon 02 Oct 2023 08:50:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.178.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:95:64:e3:ea:87:33:b2:5d:19:41:7d:12:09:c9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91189e6edf53e40672c9b5f1f3519728291ec2ee
Validity
Not Before: Oct 2 08:50:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2f93a726016eca3a23c440ad49f5a20930b5ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:09:50:bd:9f:5f:15:22:8a:d6:cf:dd:61:95:
3c:57:1c:af:29:c4:87:31:f4:1c:8a:4e:d1:10:7f:
22:05:ce:a3:71:01:22:56:8d:0c:3a:2f:30:f5:d2:
dc:83:96:76:e3:66:79:b1:05:5c:28:b7:bc:03:42:
08:00:2f:8c:24:a0:f9:f5:d8:b1:33:e8:d8:2e:95:
50:06:ec:c5:70:22:55:bc:3e:c8:87:40:ba:ef:16:
63:17:4f:8f:64:bc:a6:94:c1:06:fc:3f:66:e1:61:
97:b9:39:0c:d9:54:e8:b2:b7:ae:c1:d3:58:e7:a2:
24:a6:3f:b7:86:e9:58:c9:5b:fa:51:9b:b1:bc:ae:
bf:45:c0:2c:bb:2a:a1:d3:73:ff:f9:f6:8a:7a:55:
b8:65:6a:1b:f5:27:97:49:d5:eb:6c:ef:90:f8:31:
90:9c:fd:16:ec:2c:47:bf:ee:cf:f1:f7:9f:e8:21:
60:6f:ca:82:7a:09:a2:0f:c6:9c:ac:0a:86:65:af:
75:1a:61:0d:86:1c:72:3d:3a:0a:c0:20:07:51:d4:
f2:28:1c:1a:cf:81:ad:af:da:35:b5:a0:7b:1f:78:
d9:88:b1:80:cf:a5:7b:e3:97:c0:d6:be:be:e3:36:
40:8e:c0:07:1b:cd:5a:a7:d1:db:34:b9:2d:17:bc:
99:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F9:3A:72:60:16:EC:A3:A2:3C:44:0A:D4:9F:5A:20:93:0B:5A:E3
X509v3 Authority Key Identifier:
keyid:91:18:9E:6E:DF:53:E4:06:72:C9:B5:F1:F3:51:97:28:29:1E:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRiebt9T5AZyybXx81GXKCkewu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c1d4a2-7c4e-4adc-8f65-b148d4f066ce/1/0vk6cmAW7KOiPEQK1J9aIJMLWuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c1d4a2-7c4e-4adc-8f65-b148d4f066ce/1/kRiebt9T5AZyybXx81GXKCkewu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.134.0/24
Signature Algorithm: sha256WithRSAEncryption
92:3c:a5:b8:40:02:3a:40:d1:8f:65:56:c5:6d:a3:18:fc:79:
1d:72:ed:f6:f0:18:63:d5:4a:47:4a:60:49:e9:ef:8a:77:a5:
25:fa:5b:41:30:c7:65:3b:f7:6c:86:8d:18:1d:b2:b6:38:c7:
f4:44:37:f5:a4:9c:eb:94:69:9b:36:16:29:67:f9:c1:7a:3c:
58:42:20:b6:4b:6c:94:ad:fb:13:bd:b0:ec:9e:a5:92:7f:75:
07:77:0a:8b:af:de:a4:42:a7:8e:ee:5a:2c:79:25:a1:9b:7b:
c2:be:b3:24:f1:fd:35:eb:05:f5:f5:e1:52:e3:4e:cd:94:dc:
87:9b:2b:6e:88:e5:56:b7:b2:c9:a8:17:b4:2e:c1:2a:7c:4e:
fa:04:2c:07:7a:8d:29:57:77:d0:69:ef:3c:98:8a:53:52:12:
5e:49:47:ab:40:43:7e:e8:85:bd:68:98:9e:24:2a:c0:73:04:
35:bb:54:31:67:f5:d3:40:02:ea:a6:f2:d7:81:0e:4b:97:86:
bb:6e:cf:36:4a:ae:9e:01:eb:1d:75:54:98:9a:f8:08:63:01:
24:4b:b2:6f:60:7a:2b:16:a4:ce:39:92:e2:f4:d8:67:6e:20:
b8:be:7c:fc:c3:1e:a9:3b:19:5b:24:48:38:41:60:f9:b1:23:
ae:52:09:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:43 2024 by rpki-client on console-fra.rpki-client.org