Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2un0HkmDJ9rTvPBnODqkIoWyITk.roa
File: 2un0HkmDJ9rTvPBnODqkIoWyITk.roa (raw, json)
Hash identifier: 9MC7A141hwtAfItlLHgl6YBrEsjMMQ2bavXBMJvuiSc=
Subject key identifier: DA:E9:F4:1E:49:83:27:DA:D3:BC:F0:67:38:3A:A4:22:85:B2:21:39
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018D587D8E6DC11A652F420FC4D7F1D36CCA
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2un0HkmDJ9rTvPBnODqkIoWyITk.roa
Signing time: Tue 30 Jan 2024 03:50:39 +0000
ROA not before: Tue 30 Jan 2024 03:50:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208287
IP address blocks: 193.124.90.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 13:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:58:7d:8e:6d:c1:1a:65:2f:42:0f:c4:d7:f1:d3:6c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 30 03:50:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dae9f41e498327dad3bcf067383aa42285b22139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:29:7b:bc:e2:0b:5b:30:31:24:a9:4b:cd:ff:
9a:1f:59:58:cb:21:92:3d:dd:f1:d1:26:b6:3b:b4:
ec:03:0b:ec:a7:4c:04:69:f6:17:16:95:39:4a:5f:
11:84:ba:85:98:67:92:cc:7e:ce:6a:e8:f1:61:2f:
7d:c9:03:6d:34:78:39:d8:ec:dc:da:f0:24:25:b0:
cc:a7:44:00:1a:01:1e:54:0f:6e:51:7d:3f:ff:b8:
a2:d2:36:d9:f0:dd:08:20:58:db:c7:cc:26:62:8a:
a4:e9:2d:a7:3b:67:86:6c:00:1a:ad:2e:45:44:2e:
a8:91:86:23:9c:12:ec:fc:a4:0c:a6:5a:c0:db:ed:
3e:d7:b0:19:31:e5:10:13:70:13:de:93:25:bf:1c:
69:b2:01:45:92:63:9f:e2:f7:c6:c7:93:95:df:e9:
3d:60:14:44:ae:c1:5c:09:7a:5a:f7:c9:7e:37:4d:
8b:71:20:9d:15:46:43:cd:06:b8:e7:c8:84:03:f3:
13:10:86:82:78:07:44:08:2b:bd:b2:6f:2d:ad:37:
22:6c:bb:d2:fc:02:9f:34:d8:9a:96:aa:31:22:35:
b0:fe:17:7a:64:71:3f:ff:4e:89:47:ce:47:92:34:
7a:8a:d5:7f:62:c4:5a:45:35:80:30:ef:3a:a3:7c:
77:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E9:F4:1E:49:83:27:DA:D3:BC:F0:67:38:3A:A4:22:85:B2:21:39
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2un0HkmDJ9rTvPBnODqkIoWyITk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.90.0/24
195.133.6.0/24
Signature Algorithm: sha256WithRSAEncryption
16:37:e6:b6:6f:90:e6:d0:1c:ad:79:59:8b:97:2c:be:b4:52:
ca:7c:16:a9:b6:8b:4b:f6:ad:0a:10:49:df:e7:57:be:34:07:
d4:d9:74:8b:a7:af:70:52:43:62:bf:a0:6c:68:df:55:8d:e9:
21:5e:43:b9:69:ef:03:f6:0a:86:4e:d8:06:12:69:36:e1:4a:
fc:85:6f:f2:da:b7:eb:65:0d:a7:30:54:59:1f:25:6c:89:7d:
cc:0f:23:99:02:a2:2b:63:df:85:08:3d:56:a5:32:95:95:b6:
9b:bc:f8:81:9f:38:b0:0b:56:3b:dc:bf:bb:bc:9f:4b:2d:47:
0e:be:a8:61:3d:55:fd:1e:4e:86:a3:5d:d5:97:ed:32:01:19:
e1:f5:eb:e2:f1:6c:99:e9:42:0d:d0:15:ce:81:2a:2e:a9:a5:
38:53:ad:e3:9d:0d:2f:4e:41:b8:f0:3d:75:8b:f3:0b:2d:f7:
5b:b6:17:12:fc:cc:c0:2a:11:59:64:de:de:41:2a:b8:e4:85:
9d:e3:bf:c2:aa:51:7d:a0:8a:af:9f:b9:3c:9f:11:b5:0a:11:
8b:69:89:76:da:1a:52:b3:78:b5:30:cd:23:c7:b0:a6:dd:df:
f0:55:79:5b:59:b4:72:06:b6:7c:9d:ff:a6:dd:69:14:6d:75:
fa:c6:54:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 18:24:44 2024 by rpki-client on console-ams.rpki-client.org