Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/JRFCrDgaOz2rR6LMAXL_T8dhd_8.roa
File: JRFCrDgaOz2rR6LMAXL_T8dhd_8.roa (raw, json)
Hash identifier: p/ccdWNG7cmbKCe4ck/grGDOFKLpIkgrxiLWxgGWH48=
Subject key identifier: 25:11:42:AC:38:1A:3B:3D:AB:47:A2:CC:01:72:FF:4F:C7:61:77:FF
Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Certificate serial: 018572835DC19085927DF82F5A2E780F4907
Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/JRFCrDgaOz2rR6LMAXL_T8dhd_8.roa
Signing time: Mon 02 Jan 2023 12:44:49 +0000
ROA not before: Mon 02 Jan 2023 12:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50204
IP address blocks: 193.106.220.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:5d:c1:90:85:92:7d:f8:2f:5a:2e:78:0f:49:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Validity
Not Before: Jan 2 12:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=251142ac381a3b3dab47a2cc0172ff4fc76177ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:90:0b:df:8e:81:8e:61:1f:41:f0:07:2b:8e:
4b:9f:80:67:ea:74:0c:c0:92:7a:3e:2a:12:ad:95:
8b:dc:5b:38:a9:3c:95:b1:e5:b2:fa:3e:75:8d:f3:
17:f7:58:09:3d:25:c4:6e:05:b4:8e:34:8b:32:3f:
11:a4:96:46:3e:f7:2b:cf:99:3a:3c:6d:9a:77:01:
d6:58:73:08:56:5f:8d:58:60:5c:4d:86:b9:53:88:
5f:0e:c5:20:3f:27:0f:7d:e4:ee:4b:4b:c5:5e:2b:
5d:ad:ce:23:0b:33:2e:70:c7:d3:af:4a:56:02:9f:
ea:91:3f:7b:e7:a5:fb:a0:4a:18:65:f1:85:05:c1:
03:41:9a:f1:c7:f0:ff:9b:ea:9c:ce:ee:73:5a:18:
37:f8:70:4d:71:db:4e:f1:39:df:9d:ce:e8:31:14:
cb:e7:bd:e6:6d:cc:90:23:44:50:4d:a0:fd:d9:47:
17:9e:05:24:fd:13:5a:0c:20:69:24:f2:77:15:a6:
3c:a4:ea:9c:74:22:7d:a2:4b:fd:a9:7c:f7:36:81:
d4:02:1b:ed:1e:b2:d2:d7:f3:60:97:a7:b2:a7:58:
e2:b2:2c:fa:3a:82:6a:52:b0:91:a3:3a:91:df:b2:
1f:d0:8c:eb:c9:ab:62:d7:64:54:25:ff:d5:89:7f:
4c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:11:42:AC:38:1A:3B:3D:AB:47:A2:CC:01:72:FF:4F:C7:61:77:FF
X509v3 Authority Key Identifier:
keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/JRFCrDgaOz2rR6LMAXL_T8dhd_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.220.0/22
Signature Algorithm: sha256WithRSAEncryption
75:9c:3c:0e:5a:8b:d7:cd:f7:6b:b1:58:1c:ed:3b:0e:43:71:
07:7e:e1:29:7e:ad:b4:47:3c:f4:e8:58:e3:75:e0:de:34:55:
f1:1e:e8:bb:2d:a7:72:ac:4c:df:ef:cd:df:1a:00:99:50:09:
72:9a:a1:50:23:46:ab:cd:0e:0c:86:50:97:ca:db:24:79:05:
3a:48:9b:6a:e1:77:31:43:97:ba:34:04:4b:4f:00:b9:a4:b2:
52:3b:a8:66:aa:9a:f9:2e:b7:8d:1c:b1:f6:e2:a2:93:b9:7e:
0a:7f:69:29:77:87:7b:35:9d:82:2a:9a:d2:43:7d:74:48:8f:
88:a8:e6:33:f8:71:25:74:e2:df:a2:64:fd:8e:58:2f:b5:50:
e3:6b:98:e1:c8:01:a7:10:5e:3f:36:df:b9:27:22:e1:a4:1a:
ce:a7:c6:1b:38:de:eb:5a:af:bd:15:ff:33:50:9f:59:07:d0:
1b:62:60:56:21:9c:69:a3:cf:24:3f:88:8e:f7:9a:19:60:05:
74:5d:02:2b:21:a2:59:7e:61:23:f4:39:61:50:0b:57:ea:c1:
a4:57:b4:fb:61:3a:98:41:b0:9c:b0:03:e8:74:46:75:7e:77:
25:6f:2b:ab:83:3d:33:15:5f:c8:ca:26:f4:93:29:c3:e6:3f:
b5:74:5b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:43 2024 by rpki-client on console-fra.rpki-client.org