Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/j-1vtPBwN6rwBJtbqtUjKOxBU-o.roa
File: j-1vtPBwN6rwBJtbqtUjKOxBU-o.roa (raw, json)
Hash identifier: qzzMEU4VGoKOxMr4ave2OikO8IRlPAiDmQdDAG/a5SI=
Subject key identifier: 8F:ED:6F:B4:F0:70:37:AA:F0:04:9B:5B:AA:D5:23:28:EC:41:53:EA
Certificate issuer: /CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Certificate serial: 01857246B3C377ACB0ED9D5EC79FFB6A28DE
Authority key identifier: 5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/j-1vtPBwN6rwBJtbqtUjKOxBU-o.roa
Signing time: Mon 02 Jan 2023 11:38:34 +0000
ROA not before: Mon 02 Jan 2023 11:38:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43322
IP address blocks: 193.186.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:b3:c3:77:ac:b0:ed:9d:5e:c7:9f:fb:6a:28:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Validity
Not Before: Jan 2 11:38:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fed6fb4f07037aaf0049b5baad52328ec4153ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cd:6c:d2:0c:93:17:c6:9d:fd:01:2b:d7:9b:
4d:7c:25:b8:11:ce:dc:5a:8d:ee:0a:ff:82:f7:96:
62:7d:4e:51:5e:24:0f:23:b8:94:1a:41:82:f1:c1:
0a:bf:6b:31:6d:d6:27:7c:4b:4b:d5:07:0b:7a:c5:
31:0a:c5:cc:c6:de:d4:ba:c8:51:50:68:8b:3f:f4:
29:2f:a8:c9:f4:f9:c2:ae:da:78:83:04:eb:8b:d5:
98:b7:e6:8e:da:fe:a5:e9:f7:c3:06:c0:dd:bc:69:
22:00:d3:59:0a:3a:98:37:68:eb:03:bf:09:d6:51:
55:83:a3:3b:d7:fd:2e:11:a7:d1:cc:a2:19:ce:28:
90:f0:5f:8b:e1:7d:37:22:c1:c3:3b:2b:3a:98:81:
c5:5b:3d:b3:16:69:fe:4a:93:1c:7e:ef:c4:34:8c:
19:53:26:ab:5e:31:a7:e9:e2:2e:90:38:bd:9f:3f:
40:63:c5:15:9e:6f:d2:5e:22:eb:48:30:41:e4:89:
bd:62:5e:4e:3e:91:b5:e1:33:ae:cc:2c:10:de:77:
65:1e:27:fd:e7:77:6d:ed:57:43:30:5d:43:48:b7:
8b:d9:72:c0:78:3d:bf:86:08:65:e2:4b:7f:ba:83:
7d:01:44:f2:2a:fb:72:23:e3:b1:7f:d5:3f:d5:0a:
b6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:ED:6F:B4:F0:70:37:AA:F0:04:9B:5B:AA:D5:23:28:EC:41:53:EA
X509v3 Authority Key Identifier:
keyid:5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/j-1vtPBwN6rwBJtbqtUjKOxBU-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.208.0/24
Signature Algorithm: sha256WithRSAEncryption
50:32:df:32:d8:d4:ff:ac:2f:96:6b:50:80:a6:74:bc:06:ae:
2a:8a:a4:f4:4d:f0:96:31:87:01:5a:ae:63:48:82:7d:5b:4d:
38:75:1d:2b:89:d3:f0:cd:e4:42:c0:a5:d0:72:da:ec:d6:04:
23:4b:3e:ab:4f:0a:6e:ed:d1:5c:46:f6:b4:dd:fc:3e:a1:77:
3d:7a:c5:2b:10:0a:71:65:ee:e3:7d:43:34:93:4a:d3:2c:35:
20:de:be:7b:47:f9:ae:ca:2d:cf:bd:37:a4:a7:a7:fb:ff:eb:
2b:50:dc:d8:56:ac:4c:11:1c:5d:48:42:e8:a5:66:4f:58:e9:
79:24:9d:8f:f4:72:a2:42:ad:4c:fe:ee:c1:fb:ed:c3:50:85:
21:29:cf:6f:06:9e:1b:d9:c2:57:1b:75:34:47:d4:51:33:84:
8c:d2:c4:e6:7b:a3:5b:53:7c:55:67:ee:83:57:9d:1c:76:f2:
59:86:65:8c:96:96:83:9c:00:cd:67:01:bd:6d:3c:da:72:fd:
25:18:9e:76:45:53:23:b3:45:66:e9:f4:be:eb:7a:19:a7:bd:
bc:ac:18:62:ea:4c:a6:a0:9f:28:f1:b0:56:bc:44:08:d5:f2:
ef:fd:4c:5e:c9:10:6a:90:4f:44:bc:32:1f:98:60:94:87:62:
33:25:80:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:41 2024 by rpki-client on console-ams.rpki-client.org