Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/SPbuPZ5iJLrInEX2hF4vScDifX8.roa
File: SPbuPZ5iJLrInEX2hF4vScDifX8.roa (raw, json)
Hash identifier: htCwTm/so757OMqdTmG2l5Yy3ct0exXl4dDfkLht4uM=
Subject key identifier: 48:F6:EE:3D:9E:62:24:BA:C8:9C:45:F6:84:5E:2F:49:C0:E2:7D:7F
Certificate issuer: /CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235
Certificate serial: 018814E591C5982B0D9DEF3B26BDBC087DEB
Authority key identifier: 4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/SPbuPZ5iJLrInEX2hF4vScDifX8.roa
Signing time: Sat 13 May 2023 11:36:09 +0000
ROA not before: Sat 13 May 2023 11:36:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210820
IP address blocks: 193.134.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:14:e5:91:c5:98:2b:0d:9d:ef:3b:26:bd:bc:08:7d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235
Validity
Not Before: May 13 11:36:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48f6ee3d9e6224bac89c45f6845e2f49c0e27d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:13:31:f5:e4:9d:be:6a:3c:d1:78:f1:bf:19:
a1:9e:bb:73:62:b2:0c:23:a6:95:d4:53:34:df:77:
d8:7b:2a:e7:03:29:eb:fb:29:fa:16:c3:49:5e:11:
98:60:6d:3c:1e:f5:4e:6c:8e:d1:66:4e:54:5e:4c:
4e:c0:db:94:9e:25:78:4a:4d:85:1c:5e:41:ab:8d:
4a:ad:75:71:8f:14:6c:7b:bc:e1:2f:99:b9:a3:d6:
09:6c:e6:b4:f7:e2:39:69:e4:3c:68:39:e1:46:21:
7a:c1:62:a7:49:8c:82:5f:50:fb:81:7a:22:76:19:
d4:c7:69:35:29:f3:f1:a6:6c:ac:58:0e:62:0a:b3:
db:7a:10:9f:85:61:f5:9f:a5:dc:6a:90:13:cf:ca:
62:d9:0e:e4:22:86:87:f6:3c:1e:eb:61:25:59:77:
ce:3a:7b:45:d2:6b:39:ab:c4:b2:0c:b2:63:bf:20:
b0:47:d2:a8:13:b3:c3:15:42:5f:f9:62:93:25:cb:
e4:db:29:90:f1:da:73:eb:c3:00:64:a2:82:a7:50:
7c:83:f9:87:eb:42:71:5f:0f:e6:c7:52:e3:43:af:
eb:58:af:4f:1b:bd:8f:d1:8c:4c:cb:cc:14:cc:e3:
2e:c1:7a:30:93:96:51:98:f5:17:c3:1b:8c:45:98:
74:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F6:EE:3D:9E:62:24:BA:C8:9C:45:F6:84:5E:2F:49:C0:E2:7D:7F
X509v3 Authority Key Identifier:
keyid:4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/SPbuPZ5iJLrInEX2hF4vScDifX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.101.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:1e:ec:a6:b7:bc:58:00:fd:26:63:c1:8e:11:62:2a:68:bc:
e7:63:6f:a5:47:25:23:92:74:75:6b:d5:5c:49:0b:ff:5c:c0:
cd:e2:52:34:db:3c:16:3a:07:cb:e2:c5:c8:ef:e1:99:8d:6f:
9b:83:b4:51:c4:45:51:05:82:ed:1b:3a:e7:c2:da:92:1b:14:
f7:83:a4:9c:2f:7b:38:1c:f3:3e:04:99:0f:ac:5e:71:fa:44:
50:02:08:33:c0:71:d5:6e:8f:b1:dd:29:40:13:29:cc:8b:7f:
85:a2:11:d5:3d:1a:3d:8c:c6:5c:87:0a:89:1e:8c:f8:65:69:
64:e9:7f:38:19:4f:c0:a7:b9:7a:19:ac:b1:1f:92:31:78:a1:
63:3b:36:15:2a:04:59:ec:26:fc:88:a6:7a:73:1c:36:32:56:
20:6f:4b:27:b0:18:46:00:ed:25:c6:97:04:1f:e8:6a:37:79:
72:2d:e5:73:33:b9:88:6a:bd:51:5a:02:e7:7c:b5:e2:71:94:
46:8e:ab:3b:d8:ff:59:a5:0a:cd:55:b6:23:66:41:ee:8f:75:
00:17:81:7f:58:b0:07:22:fb:39:6e:35:b0:b0:77:1f:1d:ed:
72:bf:c4:35:0e:aa:8c:9c:af:eb:4e:c5:b8:6a:50:0f:b1:f1:
5a:9a:94:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:50 2024 by rpki-client on console-ams.rpki-client.org