Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/oGdbGWKxmSWSF6r6-UjzuJsOkl8.roa
File: oGdbGWKxmSWSF6r6-UjzuJsOkl8.roa (raw, json)
Hash identifier: UteWKzNfTGZ3k63N23MooIWDtw2sI4sgZZ66oFrAJjo=
Subject key identifier: A0:67:5B:19:62:B1:99:25:92:17:AA:FA:F9:48:F3:B8:9B:0E:92:5F
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 01856EAFD37A114DDAA815B1CEFEABABC3D3
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/oGdbGWKxmSWSF6r6-UjzuJsOkl8.roa
Signing time: Sun 01 Jan 2023 18:54:54 +0000
ROA not before: Sun 01 Jan 2023 18:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42681
IP address blocks: 193.142.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:d3:7a:11:4d:da:a8:15:b1:ce:fe:ab:ab:c3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Jan 1 18:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0675b1962b199259217aafaf948f3b89b0e925f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:23:79:92:71:25:ee:72:79:7e:49:2c:a4:cd:
b1:73:06:29:c2:ca:70:0f:01:83:b0:6b:33:02:b8:
ea:c2:25:a5:7e:b9:9a:0a:3d:d0:84:5d:b7:76:f9:
cd:87:99:7c:eb:0e:17:f8:b9:0b:83:76:17:e0:3e:
c3:dd:24:c0:d2:a9:d6:de:e3:a9:73:ff:de:15:9b:
05:83:93:57:c8:49:13:31:0c:65:63:71:d0:f5:ed:
7e:35:cc:ee:23:46:4f:e8:96:8b:cb:3d:ff:c6:40:
7b:25:f0:d4:ca:f4:35:65:85:11:8c:d1:bb:2e:50:
b2:d7:51:72:a6:de:6d:ea:66:79:5c:89:f7:a4:c6:
7c:d8:b2:6a:71:b8:bb:36:8f:c8:63:41:e9:da:d3:
ed:91:86:1c:34:66:16:aa:2b:19:f1:7a:f3:5f:62:
4f:c4:b5:d2:75:4f:87:87:bf:80:5f:fc:50:9c:59:
9b:73:81:da:c8:ce:41:df:53:68:c9:48:3a:a0:9e:
2d:71:8f:e9:0e:07:94:9a:82:86:04:ac:02:f9:72:
28:52:f2:22:8e:20:81:8c:8f:9e:18:f9:51:22:c0:
c5:b9:0a:46:64:e9:c2:c0:d7:76:dd:8f:f4:d6:d8:
87:30:3b:c0:12:76:21:58:ca:38:30:ac:1e:14:01:
d8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:67:5B:19:62:B1:99:25:92:17:AA:FA:F9:48:F3:B8:9B:0E:92:5F
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/oGdbGWKxmSWSF6r6-UjzuJsOkl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.116.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:40:4d:f4:e2:9c:c9:7f:5a:a7:70:d5:62:c1:c4:24:9b:a3:
ea:31:2f:57:56:fb:51:99:d1:89:36:76:65:c6:bf:83:68:a4:
71:52:c7:b1:2b:77:a3:06:f7:61:25:ef:c9:e9:83:75:52:60:
5e:9d:e2:dc:1e:0f:cf:d2:0e:6d:7c:02:3f:d1:d8:ee:55:fd:
83:3c:9e:d5:cb:2d:1c:5a:96:70:5f:bf:d0:6e:65:23:dd:e2:
d3:b9:05:10:cf:60:af:16:45:dd:d4:a5:54:a3:35:83:d1:df:
01:fa:a9:69:0e:a5:20:9e:19:4b:31:f6:25:38:d2:e7:0d:15:
02:ae:69:86:b5:b1:4f:43:cc:4a:1e:e2:33:7b:f8:0a:d3:42:
a8:aa:99:e9:f5:f4:54:a1:9e:c4:de:80:e0:cc:89:d9:8f:3d:
7c:f7:f4:3e:92:a8:24:38:c8:d7:45:a9:cc:46:ba:21:a9:41:
b5:77:ec:9c:9a:56:c0:e3:98:5d:10:2d:81:48:2e:37:66:60:
4c:fa:d8:80:a5:88:a8:d8:c0:39:73:c9:d9:56:4d:d4:8d:f0:
b4:aa:e3:58:b5:a2:f9:1e:83:a1:da:7a:3c:5a:23:31:e5:98:
12:bf:03:d1:b7:3e:53:ee:42:53:bf:b9:1a:8b:5e:c5:73:18:
67:02:41:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:09 2024 by rpki-client on console-fra.rpki-client.org