Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/Z0_PfgYXIfS4exlNq6a7DFQf1iw.roa
File: Z0_PfgYXIfS4exlNq6a7DFQf1iw.roa (raw, json)
Hash identifier: ifHnI9YWei7FO/zrGSVyoJZNBAbpQlLXdV5OxrhUIkg=
Subject key identifier: 67:4F:CF:7E:06:17:21:F4:B8:7B:19:4D:AB:A6:BB:0C:54:1F:D6:2C
Certificate issuer: /CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba
Certificate serial: 018573B178F48F267DA48D645B9E9636A3BA
Authority key identifier: 9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/Z0_PfgYXIfS4exlNq6a7DFQf1iw.roa
Signing time: Mon 02 Jan 2023 18:14:48 +0000
ROA not before: Mon 02 Jan 2023 18:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196895
IP address blocks: 193.105.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:b1:78:f4:8f:26:7d:a4:8d:64:5b:9e:96:36:a3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba
Validity
Not Before: Jan 2 18:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=674fcf7e061721f4b87b194daba6bb0c541fd62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:37:f2:77:a6:ed:95:b8:b6:d0:f2:bd:44:2f:
24:37:5a:4a:57:4c:98:eb:6f:91:da:4b:02:de:11:
d9:08:87:04:25:fe:86:69:8f:15:40:c9:d7:7c:8a:
ba:d4:08:8b:49:d6:6a:13:c3:1e:6c:73:f2:ac:91:
38:ec:d7:90:f6:5f:79:36:d6:93:07:5d:04:02:59:
1c:7b:35:4d:8b:b0:ea:a5:4f:b0:04:bb:ff:ba:0f:
7e:57:49:43:80:22:69:f9:ee:e8:4e:53:84:06:91:
a1:9d:41:02:ce:23:b6:ba:fc:9e:3b:e9:6b:a5:86:
a4:4e:cb:8b:13:8f:05:09:8c:e7:d2:2e:f6:3b:bd:
c4:e5:75:8a:21:ba:04:bb:0a:cf:3d:9b:b7:6e:78:
f8:1f:18:e4:2c:f1:9c:1d:d9:1e:e2:8d:91:26:62:
6b:51:6e:7c:75:f0:b1:d8:e9:0a:43:6b:ca:75:a4:
2b:8b:9f:27:f4:3d:e1:2e:d9:d9:76:73:c1:f5:78:
93:26:fe:5b:6f:dd:c2:37:70:28:22:32:37:e4:5e:
b4:2f:47:93:8b:1e:d0:f2:2c:d1:d4:47:aa:81:12:
8a:29:9e:46:a9:a2:42:6e:bf:07:50:95:1f:e8:30:
4e:76:2c:1e:73:eb:83:6d:94:71:28:fa:a0:69:cb:
80:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4F:CF:7E:06:17:21:F4:B8:7B:19:4D:AB:A6:BB:0C:54:1F:D6:2C
X509v3 Authority Key Identifier:
keyid:9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/Z0_PfgYXIfS4exlNq6a7DFQf1iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.22.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:16:c8:04:a9:47:db:d2:b5:be:24:00:33:81:18:a9:5e:df:
55:d0:e5:a4:1b:c2:69:be:81:cb:fb:64:c9:31:37:d1:ed:7c:
26:f8:ac:0c:2e:f2:ae:f5:6c:a1:99:62:74:d2:8d:b4:4c:5f:
84:58:f1:65:5c:df:8b:1c:50:46:a8:8d:0a:4a:43:d8:52:91:
83:00:f8:ce:26:6c:ed:61:b5:4f:55:f7:88:12:eb:eb:63:5e:
5f:f1:62:a9:87:32:c7:d5:99:b3:3b:c0:05:69:9b:8b:4c:34:
30:ee:41:a4:80:91:3a:46:dc:ba:73:6b:48:59:ee:c6:09:99:
99:2a:9b:14:53:d0:04:b0:45:63:5f:0a:24:ab:a1:2f:98:f7:
0e:b0:84:08:cd:18:da:de:d0:e1:85:cc:75:aa:5b:a0:50:37:
8f:b8:8c:c3:e4:6b:77:2d:fb:10:01:03:19:72:85:87:d7:60:
14:42:8d:20:c7:ef:f5:5f:bc:46:bb:a9:ca:5d:93:e5:1e:b6:
d0:4a:c2:d9:33:1a:06:b0:01:4b:22:c0:f5:ce:d5:b8:cd:47:
9d:d4:26:35:55:92:11:17:d7:08:fa:cb:4d:9a:0a:a8:2f:2e:
f6:32:0e:11:d7:91:db:93:36:5f:34:a1:fe:9c:08:ca:26:7b:
8c:f4:fd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:16 2024 by rpki-client on console-fra.rpki-client.org