Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/fL-jQY5oXxrf1l5TJhgjGbAUKe0.roa
File: fL-jQY5oXxrf1l5TJhgjGbAUKe0.roa (raw, json)
Hash identifier: Ao6CwhGjK3fXu7sDiezwm6YUZIS9jpUhL4mMzSMtQL4=
Subject key identifier: 7C:BF:A3:41:8E:68:5F:1A:DF:D6:5E:53:26:18:23:19:B0:14:29:ED
Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Certificate serial: 0185704BBC719B0764CA2EB6ACDA3CBDB693
Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/fL-jQY5oXxrf1l5TJhgjGbAUKe0.roa
Signing time: Mon 02 Jan 2023 02:24:49 +0000
ROA not before: Mon 02 Jan 2023 02:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202475
IP address blocks: 193.57.52.0/24 maxlen: 24
193.57.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:bc:71:9b:07:64:ca:2e:b6:ac:da:3c:bd:b6:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Validity
Not Before: Jan 2 02:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cbfa3418e685f1adfd65e5326182319b01429ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9f:6c:1d:0d:2f:a9:56:72:f4:e1:63:9b:df:
9a:71:9d:1b:b5:9e:6f:a8:f0:5f:54:98:95:45:08:
57:2d:da:f5:4d:fc:d3:62:f6:84:e5:74:81:5d:49:
7a:77:ad:39:79:15:90:bf:d5:c9:e3:7b:f2:73:71:
c2:67:f6:84:d0:4e:42:08:d3:a1:dc:83:2c:ba:45:
01:cf:74:03:2e:03:07:e4:2f:90:3e:6d:f6:c7:f9:
c4:9f:6d:37:7f:48:0a:52:8a:9e:4d:70:39:de:19:
b8:89:41:2c:fc:b4:c5:d0:19:ee:6c:8b:37:0b:c5:
d8:94:47:d1:b2:52:c8:50:6a:78:ec:6d:85:07:54:
56:02:42:21:90:7e:89:b3:e3:9a:64:f2:26:fc:c5:
be:a9:a9:de:5d:cf:06:b6:32:7c:0a:d5:68:5f:80:
54:67:e8:29:56:2e:b9:59:6b:22:82:65:1a:8d:40:
23:c4:17:65:c8:7c:e3:02:fd:c1:d9:a9:c0:63:5a:
2d:3a:f3:4b:0e:6d:33:65:24:c9:dd:7d:48:59:db:
4f:f1:bd:68:25:a9:ab:88:bd:dc:b0:2b:52:fa:a7:
7d:66:ef:3c:1e:3a:78:a4:8d:e6:8c:f8:43:a5:7d:
31:ec:77:db:80:12:ad:7a:a0:a6:5e:f3:1e:f2:c3:
89:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BF:A3:41:8E:68:5F:1A:DF:D6:5E:53:26:18:23:19:B0:14:29:ED
X509v3 Authority Key Identifier:
keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/fL-jQY5oXxrf1l5TJhgjGbAUKe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.52.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:3e:3f:e3:14:7a:d0:f0:9e:dc:e8:4d:97:54:44:08:9c:08:
6d:dc:5d:33:91:0c:87:93:45:98:2a:e3:88:fc:9e:9c:d2:23:
42:6b:33:c8:53:b1:e4:61:b3:37:41:ce:e8:93:10:23:da:0c:
4f:66:3e:58:67:a6:9d:ea:1e:21:38:99:07:43:0f:65:34:66:
64:ec:f5:31:10:a4:85:ed:fe:88:d3:78:90:29:64:91:ea:85:
eb:5c:5e:92:7d:28:9c:68:dd:0c:8e:de:c5:12:5c:b6:d1:20:
0b:90:a5:f0:8e:37:ab:3f:e4:fe:d7:fc:53:74:d5:dc:40:83:
b3:33:7b:55:cb:0c:ef:b0:36:a5:01:12:ad:ff:c0:2c:60:6a:
dc:3d:e1:02:61:a1:b7:23:75:8b:85:92:97:37:cc:9a:35:c6:
be:90:da:cd:bd:6b:4e:0b:53:ab:16:92:08:9c:60:82:8c:1b:
23:1d:8e:bc:92:92:36:66:c0:ed:14:27:b3:c4:c5:92:47:67:
18:61:fe:20:1b:ac:3a:15:a4:fe:c9:9c:46:74:14:42:f7:6c:
0f:40:96:7c:fd:70:24:91:92:f0:89:d3:4f:25:24:c8:a1:05:
ec:a1:49:09:ac:9c:a4:a6:62:51:90:d6:3c:67:54:2b:6b:3a:
9d:c1:b3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:11 2024 by rpki-client on console-ams.rpki-client.org