Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/1-wwgMh732UJFseOJw2JqQwnfs1A.roa
File: 1-wwgMh732UJFseOJw2JqQwnfs1A.roa (raw, json)
Hash identifier: JYbN2k63SkN9qUacY+Q1XipBQQl9aSgP5euP1P0P/WA=
Subject key identifier: FB:0C:20:32:1E:F7:D9:42:45:B1:E3:89:C3:62:6A:43:09:DF:B3:50
Certificate issuer: /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial: 01856FF05FC59BC88B34C3E7EC8322BFCB9C
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/1-wwgMh732UJFseOJw2JqQwnfs1A.roa
Signing time: Mon 02 Jan 2023 00:45:02 +0000
ROA not before: Mon 02 Jan 2023 00:45:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201627
IP address blocks: 193.71.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Nov 2023 11:42:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:5f:c5:9b:c8:8b:34:c3:e7:ec:83:22:bf:cb:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Validity
Not Before: Jan 2 00:45:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb0c20321ef7d94245b1e389c3626a4309dfb350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:3c:f5:e4:1b:18:29:e8:0c:20:bb:b8:e2:
d0:45:e0:3f:0f:8e:82:cb:e4:0b:4d:50:55:2f:28:
02:2b:66:4b:ae:6d:63:21:9f:96:7b:33:34:40:31:
f4:9b:ee:ee:f5:28:26:c6:15:75:a7:8a:fb:d4:b9:
23:72:66:8c:d6:cc:24:c3:d7:f4:e4:da:30:48:4d:
79:cf:ad:fa:d4:fb:ef:c4:16:05:2c:8f:dc:02:f4:
41:6c:40:d6:66:26:7f:66:78:77:ff:cd:37:5c:6e:
c5:01:bf:04:0e:24:93:4e:78:36:bf:11:cc:ee:23:
09:d7:bd:9f:66:ff:aa:5c:32:95:21:95:05:28:7a:
9c:9c:65:2d:d6:6c:d7:d9:83:a3:03:f8:56:61:6a:
17:76:71:52:1a:94:4f:c1:f5:62:04:57:ed:2b:04:
75:54:30:53:1e:a9:08:60:27:52:c2:27:bd:84:41:
d0:a6:d5:6e:c6:2c:5b:83:d7:5e:e9:55:b2:65:6f:
ef:39:c6:aa:6f:02:c7:b2:30:98:62:3f:f8:d9:23:
7d:b2:f9:67:52:41:74:3b:02:0b:43:dd:db:e5:44:
03:23:f7:5d:46:49:ad:f2:ae:aa:f9:ca:8d:e5:89:
97:0b:e2:6b:68:14:a4:c0:a1:b2:4d:49:95:b9:c9:
8f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0C:20:32:1E:F7:D9:42:45:B1:E3:89:C3:62:6A:43:09:DF:B3:50
X509v3 Authority Key Identifier:
keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/1-wwgMh732UJFseOJw2JqQwnfs1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.71.228.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:4b:33:8a:7f:e3:77:87:a3:10:70:dc:3a:6c:b7:69:71:2f:
95:0e:3b:ae:18:95:c7:31:16:bc:0e:77:51:c8:6f:87:1b:ab:
aa:6c:6d:3e:6b:d6:f2:ef:28:49:4c:c2:23:95:80:26:cf:5a:
15:b2:84:70:9b:c8:bb:99:81:13:39:a0:0e:f3:00:a1:35:3d:
52:18:32:2c:ea:20:5b:4a:83:d9:82:aa:35:32:1f:de:5a:af:
97:77:e7:73:93:ec:4b:bc:56:2b:3d:5c:a4:7f:b2:59:b2:0e:
15:10:5c:0b:39:e7:1e:d6:a8:0b:d1:bf:8c:9e:65:0b:6a:d4:
1d:62:95:43:2f:64:bd:91:86:cf:a9:6c:16:99:f8:27:f1:2a:
f9:8b:2e:6e:bb:00:2c:7b:ab:99:06:32:81:79:37:79:17:f8:
74:a4:3e:05:05:6f:98:2b:3b:00:14:0b:e6:cd:43:6b:c7:2a:
80:7d:c0:e4:1e:34:99:a1:83:92:ee:57:a1:b0:75:a1:14:92:
25:ef:e5:46:8e:67:76:4c:f7:72:d2:90:d0:21:29:00:bc:99:
ec:5c:00:2a:2f:90:66:90:8d:b3:30:ad:46:84:dc:93:4c:78:
13:09:ea:ca:24:14:7a:34:c1:98:e0:ff:75:c0:5e:71:be:2d:
40:e3:8b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:07 2024 by rpki-client on console-fra.rpki-client.org