Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/xn5Weghsxb5ARP3kuYPIlGhA4-M.roa
File: xn5Weghsxb5ARP3kuYPIlGhA4-M.roa (raw, json)
Hash identifier: 3usJU/WxkKgcQRtXpdLf7RairS5kYZJtx71aGnpfR90=
Subject key identifier: C6:7E:56:7A:08:6C:C5:BE:40:44:FD:E4:B9:83:C8:94:68:40:E3:E3
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 01856CB857879E175DC419BFDDCC8C8DF0C2
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/xn5Weghsxb5ARP3kuYPIlGhA4-M.roa
Signing time: Sun 01 Jan 2023 09:44:58 +0000
ROA not before: Sun 01 Jan 2023 09:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206713
IP address blocks: 194.51.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:57:87:9e:17:5d:c4:19:bf:dd:cc:8c:8d:f0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 09:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c67e567a086cc5be4044fde4b983c8946840e3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:36:d3:c5:49:0f:ef:83:3a:4c:7d:06:77:ac:
64:81:08:53:6a:32:ac:ac:10:bc:f4:ae:dd:03:9d:
89:88:03:95:b3:66:a7:bd:48:ec:18:c1:04:08:48:
41:71:1e:6d:c2:b6:94:48:07:f9:c5:03:44:f5:6e:
ba:ec:c4:27:e7:77:18:77:d5:d3:41:57:c4:45:23:
63:b2:ce:82:60:26:37:59:7a:00:c5:12:57:86:49:
c2:55:9b:8c:0b:01:34:a1:ee:82:d7:0d:f1:49:6d:
f1:28:dc:f0:a7:3c:37:e1:14:f3:3c:80:b9:5d:ad:
2a:ab:5e:36:b8:63:b3:69:c8:7d:2b:04:3f:cc:bd:
5a:e9:97:de:7e:4f:76:e5:c0:a1:46:97:65:b0:d7:
ca:72:c7:69:b6:fd:45:aa:10:d0:fb:d5:76:09:a4:
05:0e:9d:d3:db:77:0f:48:74:76:8c:41:e0:eb:75:
1d:75:3b:0e:f5:e5:dd:60:c0:eb:34:47:b4:7c:12:
e9:42:a9:68:0c:37:9a:3f:9f:b8:d6:34:be:83:06:
f5:2a:a9:33:94:4a:c4:a4:1d:05:6f:7a:79:b5:5a:
07:b4:ea:88:f5:60:f9:e3:90:41:9f:35:46:ab:33:
bc:88:63:0f:98:5f:af:82:42:47:2f:3b:6e:1c:b2:
1a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7E:56:7A:08:6C:C5:BE:40:44:FD:E4:B9:83:C8:94:68:40:E3:E3
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/xn5Weghsxb5ARP3kuYPIlGhA4-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.51.35.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:00:1b:25:a9:27:75:85:5a:46:23:58:47:62:5e:5c:83:25:
5b:cf:4f:51:9e:ce:bc:45:ff:a8:a2:2d:b8:ca:83:6d:22:5c:
bb:45:87:ab:2a:bc:76:27:9e:a9:fd:a8:0e:85:58:c5:c9:32:
67:46:6f:16:ce:85:90:ec:f8:ea:65:22:9e:81:d9:2e:f0:4e:
3f:9a:6b:9e:e1:37:e0:29:54:80:e0:77:81:3a:a1:aa:7d:4a:
05:5b:4d:e1:c6:ca:87:91:64:91:e1:35:6d:3a:51:fa:9a:e8:
28:d1:62:7a:e9:4e:be:20:84:8a:d0:79:50:24:f6:77:bb:71:
10:96:b0:73:5d:e0:28:c8:08:52:51:69:31:87:2f:97:cf:db:
68:a5:b1:8b:64:14:6d:d3:1e:f8:9c:1c:d7:59:ec:81:72:7b:
56:cb:b0:17:2f:b0:82:58:34:4b:e8:83:51:cb:dc:4d:35:e0:
c2:ba:54:67:8b:ed:d8:d0:d8:68:eb:7b:dd:af:d2:b0:d9:68:
13:11:53:b1:f3:f7:11:ee:53:2c:f4:0c:f3:77:44:ae:4c:fb:
a7:70:44:6b:1f:fd:83:77:b3:5d:17:8b:58:ac:b5:a5:cc:24:
82:e5:d0:aa:5e:8c:77:cf:ff:89:18:78:1d:61:42:08:0e:2b:
56:19:60:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:52 2024 by rpki-client on console-fra.rpki-client.org