Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/slJApzO4SMrAMsFAi9auQVCxwNA.roa
File: slJApzO4SMrAMsFAi9auQVCxwNA.roa (raw, json)
Hash identifier: sSuFqYfdEmWqFWOoZpsXbHCZcIiLQkCrWi1J8xJXe7k=
Subject key identifier: B2:52:40:A7:33:B8:48:CA:C0:32:C1:40:8B:D6:AE:41:50:B1:C0:D0
Certificate issuer: /CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Certificate serial: 01895E8757E92E7F040268DC7B4067690450
Authority key identifier: 9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/slJApzO4SMrAMsFAi9auQVCxwNA.roa
Signing time: Sun 16 Jul 2023 11:47:55 +0000
ROA not before: Sun 16 Jul 2023 11:47:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44138
IP address blocks: 193.109.218.0/24 maxlen: 24
193.200.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5e:87:57:e9:2e:7f:04:02:68:dc:7b:40:67:69:04:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Validity
Not Before: Jul 16 11:47:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b25240a733b848cac032c1408bd6ae4150b1c0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2e:68:49:b8:14:c0:b3:d3:74:14:6d:04:51:
2e:39:61:34:2c:7f:a2:ca:1c:68:b6:32:1d:d0:9a:
1f:13:0c:c8:a1:2d:4b:1b:d9:79:63:3e:5d:87:b8:
4f:7b:48:ad:34:30:51:f7:8f:42:fd:a5:da:09:f9:
b4:37:2b:dd:6f:26:be:57:28:c5:90:24:5a:af:62:
f8:a9:03:19:42:71:04:fb:b8:18:0d:6e:7c:16:3c:
c3:fa:71:2d:0d:ce:dc:0a:b7:d8:f7:86:c9:02:7c:
9b:35:46:fe:f6:81:a0:a2:ac:f2:34:3d:02:3c:37:
66:27:d5:11:e2:6f:35:82:9d:91:cc:3c:31:bc:93:
3a:0f:1d:02:f8:50:04:23:ee:f4:be:83:1e:0b:b1:
e1:d5:f5:2e:4d:9e:e1:94:c6:b3:db:c1:ae:42:c6:
5e:74:c4:84:f4:16:4e:97:f6:d5:e1:42:76:48:f2:
0b:d0:d7:90:80:f6:1d:2b:bb:ae:76:59:31:1a:98:
cc:24:93:48:13:78:8d:8a:30:5e:81:c0:10:d3:52:
29:43:8d:87:a4:48:c7:e2:ad:1f:92:08:e0:0c:55:
63:0b:70:3c:58:7e:01:eb:06:0a:ee:c9:f3:69:f4:
ca:5d:57:7c:43:25:bf:ee:a9:5f:2f:00:15:b3:1f:
80:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:52:40:A7:33:B8:48:CA:C0:32:C1:40:8B:D6:AE:41:50:B1:C0:D0
X509v3 Authority Key Identifier:
keyid:9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/slJApzO4SMrAMsFAi9auQVCxwNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.218.0/24
193.200.247.0/24
Signature Algorithm: sha256WithRSAEncryption
46:dd:d6:05:b8:44:8b:64:4c:74:98:18:74:a7:08:cd:44:2f:
b8:d3:27:b9:2f:fd:06:6c:92:d4:73:0e:66:49:a8:6a:62:61:
dd:fe:61:09:ff:3e:9a:5f:97:e2:63:db:49:de:5b:9c:2f:c1:
14:1b:e6:8e:e1:78:f8:3b:f4:cc:8b:d4:2a:d0:e4:ab:6b:63:
00:6f:98:f0:c0:d2:3a:07:de:56:dd:d8:db:44:f3:bb:17:07:
86:0b:5a:cc:42:52:cc:e6:20:ed:1a:6a:12:a2:0d:60:16:09:
92:4a:cf:52:76:ef:ab:4f:a1:80:bb:66:f0:1f:46:08:2d:97:
fd:df:f4:36:7c:bc:19:e3:fd:c4:10:4b:eb:6a:4d:0f:cc:9f:
fa:95:fd:88:a2:53:0c:23:89:f3:56:0a:e1:08:6b:3f:9a:05:
94:e5:44:2b:c3:1c:2d:10:4a:7e:af:89:4f:70:9c:ec:f8:76:
34:b6:b4:64:b3:ad:99:8a:95:50:c8:14:da:13:96:cc:69:98:
cf:fb:1d:05:6b:6a:1a:25:62:11:47:70:36:7e:13:00:f8:be:
05:4b:7e:64:44:92:78:4e:da:f9:79:fa:ba:fa:d3:b2:d4:e3:
41:1e:ac:bb:40:d3:73:35:8c:05:ed:69:f6:71:b1:57:93:c6:
e4:7c:33:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:09 2024 by rpki-client on console-ams.rpki-client.org