Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3Ewh21t1HAG4DYzEiucCYLfSQ0Y.roa
File: 3Ewh21t1HAG4DYzEiucCYLfSQ0Y.roa (raw, json)
Hash identifier: WBYh1w8JJxlQl79PcH09hAP54DpZJs1e493ythBZBok=
Subject key identifier: DC:4C:21:DB:5B:75:1C:01:B8:0D:8C:C4:8A:E7:02:60:B7:D2:43:46
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F66E9F210B46076B2B1582FB441B38E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3Ewh21t1HAG4DYzEiucCYLfSQ0Y.roa
Signing time: Sun 01 Jan 2023 22:14:53 +0000
ROA not before: Sun 01 Jan 2023 22:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9002
IP address blocks: 193.124.92.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:e9:f2:10:b4:60:76:b2:b1:58:2f:b4:41:b3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc4c21db5b751c01b80d8cc48ae70260b7d24346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:6a:b4:b4:f3:c9:dc:a7:7e:9c:c3:8e:fb:
81:b3:b5:01:2d:88:5f:a9:2c:c8:8f:c6:cf:a2:3c:
eb:1a:ac:9e:88:7d:c0:51:55:d4:d2:ce:78:e2:97:
4f:0b:87:a9:db:2d:ac:f1:44:d3:c8:14:8e:b2:46:
a9:52:94:44:bd:21:34:50:fb:3a:77:fd:09:8d:35:
e4:93:ee:26:d7:01:23:94:35:4e:01:c4:36:b9:31:
25:09:22:3e:30:aa:bf:36:c4:89:eb:21:58:f1:af:
95:40:45:03:6d:22:e6:cd:28:fd:c6:0a:3c:c7:e7:
dd:7a:e8:36:58:1c:0f:9a:12:51:26:d3:da:e9:89:
e8:dc:28:cd:0c:ef:f9:d5:e0:37:f6:8e:e9:92:ea:
89:8b:b4:fc:d3:75:9c:e5:2e:bd:87:d6:0e:9f:b5:
20:34:7e:06:3d:d5:5a:47:e8:fc:ee:13:c9:82:f6:
e7:24:ec:b3:a0:07:44:d3:e3:8c:45:8a:05:40:67:
a4:e3:f2:96:67:4f:ce:4d:4e:2a:2a:aa:47:11:64:
15:4a:df:9e:72:8d:62:53:5e:f3:2c:a1:d6:fc:15:
c9:3b:6b:26:ed:76:8f:0c:5f:f6:2c:3b:e1:fc:ee:
45:9a:a7:7f:da:be:98:23:ee:da:d0:59:61:c3:db:
0d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4C:21:DB:5B:75:1C:01:B8:0D:8C:C4:8A:E7:02:60:B7:D2:43:46
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3Ewh21t1HAG4DYzEiucCYLfSQ0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.92.0/24
Signature Algorithm: sha256WithRSAEncryption
96:e8:96:2c:0f:7b:bc:d5:3e:04:e9:fd:69:13:fc:f9:48:f4:
30:6c:bf:24:07:e4:14:d4:28:b4:24:dc:f2:46:2f:b9:c8:62:
0d:f9:9e:cf:21:9d:7c:cd:3d:e8:53:c6:d3:aa:b6:0d:da:c3:
e2:f6:4d:3f:9f:e4:c9:ed:38:c7:d0:51:17:dd:63:3d:4b:64:
d6:8d:98:f5:ba:21:fe:8e:dc:77:84:67:9e:b3:e3:a9:c4:33:
44:d3:b6:b2:b2:6e:0e:58:4f:5a:db:90:7d:b0:ff:5a:c9:21:
48:ae:4b:74:ab:43:41:37:b6:90:e9:d5:bb:bf:9c:10:21:83:
af:7d:32:f3:95:bb:1e:fb:98:4a:44:c7:f0:f2:63:18:9e:5b:
63:3b:da:bd:69:f0:02:e4:84:6f:c5:2a:3f:9e:f5:bf:af:74:
5d:6c:db:e1:9c:36:f6:1a:01:ea:a0:af:81:29:1c:86:4b:1e:
3f:8a:82:bc:22:9c:8d:f4:ae:d5:ed:a2:e7:ae:25:2a:b4:18:
3f:10:0a:58:3e:df:d5:77:50:1c:39:42:b4:03:4a:ab:f0:8f:
de:43:c2:db:65:5d:58:03:bc:41:a4:d1:09:2e:60:3e:8a:a5:
8a:6e:90:f3:53:e7:a3:56:3c:c7:2b:22:53:1c:93:75:1c:8d:
35:26:ed:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:55 2023 by rpki-client on console-fra.rpki-client.org