Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/JVylNHEN1SMHbnDal_MpSls7-6k.roa
File: JVylNHEN1SMHbnDal_MpSls7-6k.roa (raw, json)
Hash identifier: Eo2Qp4MteM9Xc2/owSjMjSPnwYISKUYv7PfVW4xUVdw=
Subject key identifier: 25:5C:A5:34:71:0D:D5:23:07:6E:70:DA:97:F3:29:4A:5B:3B:FB:A9
Certificate issuer: /CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
Certificate serial: 018CC8DED7C760E039151D1334EFBB2FAED5
Authority key identifier: 61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/JVylNHEN1SMHbnDal_MpSls7-6k.roa
Signing time: Tue 02 Jan 2024 06:31:36 +0000
ROA not before: Tue 02 Jan 2024 06:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 193.134.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 13:12:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:d7:c7:60:e0:39:15:1d:13:34:ef:bb:2f:ae:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
Validity
Not Before: Jan 2 06:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=255ca534710dd523076e70da97f3294a5b3bfba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2f:e0:e3:27:92:50:33:d4:76:ef:50:78:84:
d9:1e:af:3d:8c:c5:dd:aa:29:0b:a7:6f:a0:83:2c:
5e:54:26:45:42:c0:9d:49:7b:22:8a:ec:7e:1c:4b:
d7:8a:e2:ae:ef:43:73:d6:1e:dd:bd:44:c4:68:7a:
c5:e9:8e:1b:52:40:df:3e:94:af:b3:77:20:d9:62:
27:62:cc:8f:26:69:1a:fd:f2:a6:f0:cc:d8:73:88:
91:cc:c6:95:04:e3:99:28:50:e6:b8:13:1e:11:6d:
71:d9:7f:a5:e7:ae:4c:f3:fe:36:50:c6:ba:22:92:
93:fe:b0:89:e0:e6:32:01:6b:a4:4b:93:94:00:4b:
8f:08:57:88:02:33:6c:3b:2d:af:91:d1:f3:c9:e3:
2e:9c:b5:ba:ce:8c:7d:38:a6:1e:e0:01:f8:e3:6e:
8f:fe:32:b1:4f:81:43:f4:b6:0b:a9:80:16:0c:9b:
1a:d1:b7:fd:b1:8c:fc:02:da:27:bf:3e:28:e7:53:
c7:ae:27:d5:96:b2:fb:65:05:d4:69:e2:c2:b2:a3:
8c:de:45:30:fe:1f:4b:1b:8a:09:44:4e:89:22:65:
6d:e2:ca:6d:ac:2d:a7:89:92:56:1e:00:6a:d0:3a:
80:cd:03:b6:83:05:98:0b:d8:4b:b1:46:46:89:ca:
e6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5C:A5:34:71:0D:D5:23:07:6E:70:DA:97:F3:29:4A:5B:3B:FB:A9
X509v3 Authority Key Identifier:
keyid:61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/JVylNHEN1SMHbnDal_MpSls7-6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.252.0/24
Signature Algorithm: sha256WithRSAEncryption
38:68:cb:ba:9a:c3:af:ed:f0:8d:89:d8:4d:8e:de:9f:18:78:
3c:63:b9:46:da:d4:18:fd:d4:7c:81:db:57:d4:e6:9d:93:63:
dc:e1:4e:db:48:c4:16:86:a2:ba:ba:80:e5:1c:14:76:b1:08:
32:e9:e0:fa:6e:6d:d0:5e:f3:48:84:28:13:47:a5:ed:5f:08:
68:cd:ee:bd:ff:7c:49:66:be:25:83:e2:f2:58:12:e4:c0:e2:
a2:a0:26:d3:da:34:7c:74:68:2d:7c:bf:cb:96:06:48:a6:73:
0e:f2:6d:2a:e3:81:9e:e8:12:f9:d7:a3:1b:14:83:6d:79:dc:
a0:4a:23:48:da:86:bd:7a:ac:ee:3d:87:77:97:ea:00:56:64:
d0:5a:1a:fb:8b:60:44:f5:05:a3:5f:06:85:d9:f2:af:f4:e1:
f9:a7:cc:4d:5a:89:50:c1:72:ef:49:ca:c9:a4:3e:1b:a3:7d:
f6:a3:21:74:cb:27:dc:ea:8a:db:aa:3a:82:4e:fb:75:0a:fd:
8d:5c:10:a0:0a:73:4f:52:a3:53:47:9a:5f:58:2e:a3:42:3c:
ef:de:b9:33:21:a6:fc:61:76:c4:6b:74:4a:a6:08:1d:8c:0e:
2d:bb:4d:ac:1a:81:93:bd:32:08:e2:9e:80:f6:51:1d:79:04:
ca:53:a4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:33 2024 by rpki-client on console-fra.rpki-client.org