Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/72Ny_fW8GeFaHhvo_mE1EVPvGiU.roa
File: 72Ny_fW8GeFaHhvo_mE1EVPvGiU.roa (raw, json)
Hash identifier: VNEXrDD6Fi9QQRtvzC9CQ2KnnZlxz6NGpVT1D+vBRUA=
Subject key identifier: EF:63:72:FD:F5:BC:19:E1:5A:1E:1B:E8:FE:61:35:11:53:EF:1A:25
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A70FC2F8385EE8D4025B974538875
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/72Ny_fW8GeFaHhvo_mE1EVPvGiU.roa
Signing time: Tue 02 Jan 2024 12:33:48 +0000
ROA not before: Tue 02 Jan 2024 12:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 193.124.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 10:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:70:fc:2f:83:85:ee:8d:40:25:b9:74:53:88:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef6372fdf5bc19e15a1e1be8fe61351153ef1a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:39:c9:c0:57:89:c5:c5:91:56:4d:a7:67:d1:
4a:22:2d:66:64:36:ce:3a:2e:80:16:38:fd:a0:eb:
b1:54:0e:1e:8a:09:14:6d:a7:fc:c6:07:55:89:35:
fc:8a:3a:7c:a0:e2:49:d9:76:d2:4b:75:61:d2:42:
6f:57:cb:d9:85:b8:a1:42:75:36:2d:e6:46:43:3f:
9a:79:e6:71:ed:84:f7:f3:0b:6e:b0:c2:3a:51:e5:
5e:39:0c:e8:52:08:ba:d0:e5:ec:31:ad:cb:03:dc:
4f:2a:4e:59:cb:1b:7d:40:b7:df:27:cc:27:6d:07:
b7:66:c2:05:97:b8:59:c9:bc:9e:e9:09:ee:1b:83:
28:2d:10:36:a6:dd:ab:c7:06:f1:54:63:73:c6:c1:
51:4d:2e:80:a5:2d:0f:41:dc:85:6a:27:6e:da:ae:
38:12:e5:bf:19:40:5e:31:cb:46:c0:73:4a:03:95:
18:86:35:f3:82:00:c6:27:12:f4:ad:37:0a:04:5c:
cd:d6:ab:a6:0f:93:cd:68:87:84:46:c9:f5:27:c9:
bd:a7:d5:e5:ab:2c:8b:5e:87:cd:fc:24:0f:46:df:
7a:ac:95:de:95:0c:32:8c:45:96:76:78:1c:b2:9f:
ce:da:7b:93:af:69:ea:2e:e4:d5:a6:b0:80:5c:d5:
d9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:63:72:FD:F5:BC:19:E1:5A:1E:1B:E8:FE:61:35:11:53:EF:1A:25
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/72Ny_fW8GeFaHhvo_mE1EVPvGiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.89.0/24
Signature Algorithm: sha256WithRSAEncryption
66:04:fc:fe:3c:e9:ee:45:7b:59:14:fd:dc:ed:0a:d6:b2:61:
e1:03:a6:4b:39:d3:44:77:40:a4:44:cd:3d:84:51:58:fa:b3:
0f:c9:9f:6b:e6:fa:dd:c7:0f:db:a1:84:46:29:ef:4f:54:99:
51:0f:6c:c2:63:e9:f6:8c:6a:f6:87:a3:2f:a9:59:43:ac:2b:
6a:91:71:e5:76:1e:86:65:a6:4e:d6:ce:c7:2f:db:9e:80:10:
11:78:b2:fd:92:e1:3d:20:23:93:1a:8e:43:57:b3:8f:19:cd:
63:bd:38:30:30:ed:c5:eb:49:92:0e:07:81:08:dd:73:23:89:
cb:65:b0:8a:2e:6e:9b:77:90:d0:3e:f3:a4:c5:ed:c2:71:76:
8f:72:54:03:b7:6a:2f:b6:56:19:22:80:5d:59:37:8a:45:78:
4f:84:e0:3b:7f:33:5d:87:97:2b:a1:2d:6e:73:e4:ce:ed:f3:
ea:9f:8f:5d:c2:d2:0b:29:38:51:f4:86:25:01:0d:7b:3d:3b:
6c:c6:a0:19:2b:4d:de:f8:bc:de:59:38:72:14:9b:07:51:7c:
99:fc:04:ba:ce:0a:e2:33:ee:70:2a:0f:81:74:ce:9c:2c:89:
e5:88:4d:5d:fa:29:48:76:60:b0:fa:f9:46:9f:ff:0f:9c:d6:
b4:4a:8c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 14:03:07 2024 by rpki-client on console-ams.rpki-client.org