Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/svaACboNagl46jlKi56tYOQ_KX0.roa
File: svaACboNagl46jlKi56tYOQ_KX0.roa (raw, json)
Hash identifier: 1MTEyDKN6V63umH6ZsOnyzLFkKxEPIiUXgjIslhdw+A=
Subject key identifier: B2:F6:80:09:BA:0D:6A:09:78:EA:39:4A:8B:9E:AD:60:E4:3F:29:7D
Certificate issuer: /CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Certificate serial: 018CBD19427775DAEE4D126EF108B091D872
Authority key identifier: 3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/svaACboNagl46jlKi56tYOQ_KX0.roa
Signing time: Sat 30 Dec 2023 23:39:58 +0000
ROA not before: Sat 30 Dec 2023 23:39:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205873
IP address blocks: 193.35.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:bd:19:42:77:75:da:ee:4d:12:6e:f1:08:b0:91:d8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Validity
Not Before: Dec 30 23:39:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2f68009ba0d6a0978ea394a8b9ead60e43f297d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:68:0d:27:ec:b9:2c:a9:c2:3a:5f:10:e5:c7:
99:36:6e:70:4f:e5:eb:3a:03:73:46:20:0a:c2:05:
f3:63:af:b5:94:c2:26:26:cc:b4:24:da:01:b9:9a:
0a:4d:34:53:9e:73:ea:77:5a:cc:cc:7e:2a:8c:bf:
96:9e:00:8a:18:93:1c:81:a5:7c:9b:e9:16:64:0e:
f1:c0:e9:7f:df:41:f6:d6:12:28:3c:8b:6c:de:f4:
36:53:b6:c6:e1:ea:8e:f8:53:24:8d:f1:47:f6:35:
f9:ad:dd:b9:85:22:e8:7c:bb:6a:62:08:87:62:9f:
2a:44:6d:f1:54:d7:27:f9:09:e0:96:03:75:cb:8d:
20:bc:a7:71:f9:d4:6e:ac:f1:1a:92:96:e0:1f:cf:
81:0b:06:6a:2d:23:04:3e:32:e3:a0:7b:30:f6:e3:
e7:65:a1:a5:cb:1e:cb:37:6c:57:67:c3:1c:79:50:
27:42:48:80:69:c8:42:4d:3f:0e:ff:1d:f8:b3:63:
97:86:22:a2:99:8d:2f:69:e6:42:88:18:e9:b2:96:
b0:71:98:14:67:f5:7c:ba:4a:89:e1:8a:71:8d:66:
93:69:b5:17:d1:8e:97:a1:e6:37:c5:f7:7b:b5:f8:
9a:11:94:fc:48:cb:41:62:01:27:3d:c5:4c:ac:9e:
d0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F6:80:09:BA:0D:6A:09:78:EA:39:4A:8B:9E:AD:60:E4:3F:29:7D
X509v3 Authority Key Identifier:
keyid:3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/svaACboNagl46jlKi56tYOQ_KX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.61.0/24
Signature Algorithm: sha256WithRSAEncryption
67:8f:8c:56:65:43:05:c2:50:a3:07:b3:11:2b:1f:bf:2e:3c:
c4:2d:82:cc:2b:1f:2b:95:e0:20:21:97:00:92:ee:a3:bf:a4:
9f:0e:c8:ae:a9:b3:56:16:1b:2e:af:bc:fe:5c:72:71:bf:ba:
9d:94:5e:01:1e:2d:14:41:86:16:2a:b9:9d:30:4f:02:4e:a7:
a0:bf:d1:10:25:67:fb:7c:a6:83:47:9f:78:62:ab:2f:6a:ed:
32:1f:ee:3b:8b:86:5b:b6:f0:c8:fd:39:5c:58:45:61:15:f0:
d0:d7:5b:01:4f:a3:82:2c:4d:95:e1:54:21:21:8b:95:09:bf:
a2:62:b5:44:28:f7:53:07:f2:aa:01:62:ee:89:ca:28:44:d0:
53:2e:1d:54:f0:12:25:c7:2f:e6:9a:88:73:7b:18:c7:6a:98:
de:2f:f4:44:0d:30:e6:2e:8b:5b:dd:07:5d:a5:35:c2:73:f1:
3a:c3:4f:3e:03:28:9f:da:95:4e:e7:86:31:23:e4:61:fe:62:
7c:d8:c6:ab:d1:18:ae:07:0a:ba:28:e3:89:9c:b2:a1:82:07:
66:12:99:3d:40:81:38:f4:39:60:4b:d2:6e:b1:b4:66:61:fe:
66:74:90:6e:22:1c:1f:4d:79:ad:37:b0:22:56:3f:a2:12:8a:
ef:51:8a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:16 2024 by rpki-client on console-fra.rpki-client.org