Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/kZAIDDGK9jvhJjEq_MCPKZQFJzs.roa
File: kZAIDDGK9jvhJjEq_MCPKZQFJzs.roa (raw, json)
Hash identifier: WEZt7CYk2mWEKotYQAQg92zcGQH1TPIdVnG0RZuAIJw=
Subject key identifier: 91:90:08:0C:31:8A:F6:3B:E1:26:31:2A:FC:C0:8F:29:94:05:27:3B
Certificate issuer: /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Certificate serial: 018B5CAFA297D62FC63011B456E485504B22
Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/kZAIDDGK9jvhJjEq_MCPKZQFJzs.roa
Signing time: Mon 23 Oct 2023 13:18:16 +0000
ROA not before: Mon 23 Oct 2023 13:18:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201228
IP address blocks: 193.247.209.0/24 maxlen: 24
193.247.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5c:af:a2:97:d6:2f:c6:30:11:b4:56:e4:85:50:4b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Validity
Not Before: Oct 23 13:18:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9190080c318af63be126312afcc08f299405273b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2b:5e:ec:55:8e:d8:0b:fe:6e:c4:59:53:a0:
2f:39:da:1f:0f:f2:30:f5:e3:c6:d7:55:b3:d4:85:
b5:44:44:3b:55:82:b6:66:1e:99:08:5e:ca:07:e7:
2e:65:cc:0a:b1:67:71:3b:b8:0f:46:80:af:69:48:
a2:88:45:0d:99:4a:4c:50:cc:a4:aa:26:60:b5:96:
3f:b7:ea:1c:53:d9:21:dd:81:8e:56:ae:89:24:02:
25:2e:67:f7:fd:97:c0:9d:28:77:95:2c:64:cf:89:
d1:7b:1a:ce:43:69:4e:ff:af:81:20:1d:66:b1:dd:
d5:a4:d3:17:40:b6:0e:83:76:15:c1:fb:32:63:23:
d6:e8:34:50:d8:04:68:bf:78:0e:31:1d:90:64:22:
32:05:b1:67:f0:19:87:e6:6c:6d:00:2a:64:d1:82:
05:c6:ee:4e:cc:fb:16:72:8a:70:71:74:ad:b2:a3:
86:03:fe:bc:b7:21:cc:dd:b5:98:b6:91:4b:77:dc:
f5:bc:c4:89:d8:71:df:2b:85:32:04:78:14:70:20:
4d:6b:b8:7b:4a:c4:29:e9:c0:70:11:c6:e0:e0:ae:
61:75:6a:a5:01:28:6e:e5:c3:fa:8f:69:66:da:11:
2c:58:6c:a3:9c:ed:df:92:28:28:8f:9c:72:2a:17:
b1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:90:08:0C:31:8A:F6:3B:E1:26:31:2A:FC:C0:8F:29:94:05:27:3B
X509v3 Authority Key Identifier:
keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/kZAIDDGK9jvhJjEq_MCPKZQFJzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.209.0-193.247.210.255
Signature Algorithm: sha256WithRSAEncryption
3e:2d:81:9f:2e:95:03:64:c3:31:4c:4c:63:ca:52:a5:89:5b:
79:88:22:17:6f:81:03:33:83:35:0a:e1:82:98:2d:25:ae:82:
77:ac:e8:69:63:93:c8:da:54:01:2d:cc:04:fa:82:74:19:4f:
82:b2:49:ff:a1:e8:92:9f:1d:13:e5:c1:ea:05:9b:e3:9b:8e:
bf:5d:87:45:79:5b:51:20:0a:78:b9:81:78:03:e7:55:ab:a9:
02:c0:7f:52:0b:a3:7a:ea:e7:ef:07:c0:46:77:e6:a8:8b:e4:
f7:96:e5:7e:a7:67:36:00:38:3a:a7:c7:9f:9d:c0:ad:c6:77:
6c:7b:cd:08:84:09:e6:3a:32:2c:ad:61:c4:65:27:41:6c:6e:
31:20:11:52:cb:26:70:88:bd:b2:0a:30:cc:d7:af:92:50:01:
5d:1e:9b:e6:f0:da:3d:8f:f7:a7:28:3c:3d:11:40:19:9c:1a:
cb:c3:08:05:b8:3c:d8:0b:89:77:e9:99:7f:41:e6:0b:5c:73:
02:be:81:1a:44:30:10:b6:6b:3d:2d:33:4a:09:a5:0c:14:af:
4f:06:6a:27:13:0a:73:85:3a:3c:7e:7e:6f:0b:55:b3:78:ba:
3b:e9:8a:d8:a8:cb:c1:d4:1a:d6:b7:1b:81:55:a8:30:b2:54:
9b:ad:1d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:17 2024 by rpki-client on console-fra.rpki-client.org