Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/71_GpVo6WW0EmKSx41WxMdczmz0.roa
File: 71_GpVo6WW0EmKSx41WxMdczmz0.roa (raw, json)
Hash identifier: xVbzp/JkaSd3JE53QxT4kqNSGqEfAxk8KGOvbmVsSOk=
Subject key identifier: EF:5F:C6:A5:5A:3A:59:6D:04:98:A4:B1:E3:55:B1:31:D7:33:9B:3D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CFCDBEDCC9AC76B132B44CBFB99E55F4D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/71_GpVo6WW0EmKSx41WxMdczmz0.roa
Signing time: Fri 12 Jan 2024 08:48:40 +0000
ROA not before: Fri 12 Jan 2024 08:48:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207326
IP address blocks: 193.124.5.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 09:53:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fc:db:ed:cc:9a:c7:6b:13:2b:44:cb:fb:99:e5:5f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 12 08:48:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef5fc6a55a3a596d0498a4b1e355b131d7339b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:85:a9:df:28:bf:38:0f:8e:8b:89:8f:cc:7a:
a7:0e:05:f2:cc:f4:4b:b9:15:aa:73:e2:99:4f:cb:
cd:a6:dc:44:6f:52:a5:28:62:91:5c:63:54:1e:ce:
69:92:d8:89:dc:3e:95:8d:d6:dd:d8:2d:d1:37:44:
eb:7d:2b:83:f1:2a:56:b9:49:13:78:8c:9a:41:41:
e5:95:c2:b3:3b:d7:06:89:3c:63:68:41:ea:6b:d9:
06:ec:4e:47:ec:2c:38:f4:c8:c5:37:9e:ca:8a:79:
4c:b6:e5:be:32:06:07:e5:17:1f:4a:35:b7:2a:09:
0f:f8:75:e7:5d:6a:2a:e3:c8:72:68:33:c8:4b:32:
97:e8:f8:15:44:b7:e6:89:5e:23:31:1e:d7:05:68:
ac:a1:a7:a2:08:e8:ba:a3:70:ff:2f:3e:19:9a:4b:
96:88:f0:c1:dc:2b:7b:3f:8e:63:30:4c:11:ae:83:
5c:2b:50:8e:e4:76:e4:99:d9:25:8a:9a:39:18:85:
8a:ee:26:af:f0:79:bf:4d:2f:e3:dc:1a:12:b4:e3:
21:70:72:c4:c9:07:ec:01:49:a8:70:c5:a3:02:57:
c6:44:3c:63:13:3e:78:4a:87:5d:f8:e0:58:a9:6b:
0c:fb:e6:e1:b4:50:1c:f6:fc:ba:77:4f:49:b5:63:
30:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5F:C6:A5:5A:3A:59:6D:04:98:A4:B1:E3:55:B1:31:D7:33:9B:3D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/71_GpVo6WW0EmKSx41WxMdczmz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.5.0/24
194.135.18.0/24
194.135.32.0/24
Signature Algorithm: sha256WithRSAEncryption
79:2b:60:7b:5f:c0:45:90:ad:58:e0:28:5d:24:82:ca:2f:71:
94:ed:d7:dc:b2:cf:98:af:c4:f9:42:0d:fd:f5:1f:eb:9d:90:
c7:4d:9f:e1:2b:de:5e:a5:92:6d:9b:c7:60:93:ff:f0:a0:c8:
17:98:35:1b:6e:d7:6b:9f:9e:38:40:57:2e:df:a6:af:50:d3:
46:54:e7:e5:8a:cf:94:75:1e:29:21:a6:a1:52:47:66:00:f8:
b7:37:b1:e5:a6:b1:b9:d7:01:0e:ca:97:1b:e7:4a:a6:db:7a:
f5:4d:56:8a:68:52:8c:8b:17:09:17:26:7b:55:d4:83:e0:37:
97:a8:d9:a1:27:3d:59:47:4e:3c:9d:55:a0:24:9d:36:ee:fc:
4f:e9:6d:34:ee:3e:be:0a:42:ea:e6:12:e2:8f:08:62:57:c7:
30:a7:b3:1b:b8:d4:d2:31:89:37:83:de:d5:60:f8:f1:f5:0e:
57:67:9e:b3:03:e2:cd:8d:14:4a:b1:ff:39:3f:de:28:b2:ca:
f6:a9:51:4a:23:4a:15:3e:22:07:39:4d:14:36:2d:7d:b8:6a:
c5:55:f9:08:81:53:d9:7a:8d:a6:b3:ba:30:fb:6d:f8:6e:44:
78:f9:2f:f0:72:e2:53:94:08:d9:76:b3:d6:04:a0:fc:3b:e0:
4e:fd:9d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 19 12:37:56 2024 by rpki-client on console-fra.rpki-client.org