Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9ggJcnMvXx1dc5qxF_BVO5AWVW0.roa
File: 9ggJcnMvXx1dc5qxF_BVO5AWVW0.roa (raw, json)
Hash identifier: RlTmk0tCiZJxQS/+egJXzYA7+yXeSC6b7DJGInsWdLc=
Subject key identifier: F6:08:09:72:73:2F:5F:1D:5D:73:9A:B1:17:F0:55:3B:90:16:55:6D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018AF031ED4D9C1C8CB0AF615069F557055B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9ggJcnMvXx1dc5qxF_BVO5AWVW0.roa
Signing time: Mon 02 Oct 2023 11:41:58 +0000
ROA not before: Mon 02 Oct 2023 11:41:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398698
IP address blocks: 193.124.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Oct 2023 13:26:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f0:31:ed:4d:9c:1c:8c:b0:af:61:50:69:f5:57:05:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 2 11:41:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6080972732f5f1d5d739ab117f0553b9016556d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3d:a8:e3:f9:1a:d8:45:67:8e:41:38:33:a2:
85:92:57:0a:f4:91:a1:da:d9:bf:4f:bf:9f:ef:d0:
c2:e0:32:fb:86:33:8d:df:de:3e:52:7f:2c:1c:56:
b5:e8:e7:8d:44:5f:ae:c1:fe:a7:a7:18:c8:a5:9f:
d7:98:09:b1:5c:61:a0:1c:00:93:8e:35:bb:81:bf:
50:1f:f4:b1:1a:69:79:af:0a:61:c3:66:25:b2:38:
4a:de:95:79:df:60:9a:ae:96:35:5e:d9:20:8a:a2:
9e:49:c0:ec:fc:87:43:bc:09:19:56:bc:81:e8:f6:
42:a5:25:9c:f4:37:c7:ca:60:dc:42:eb:5c:55:76:
9f:5a:74:4c:1f:39:5f:50:97:6f:c2:0a:5d:8a:13:
aa:8e:2d:d0:15:91:ff:c2:05:8e:3a:22:c7:38:a9:
94:c3:4b:66:40:bd:bf:5b:08:1a:c5:cb:5f:59:9f:
11:a1:ad:84:dd:74:fc:3c:58:18:c7:70:6d:05:c7:
8e:26:b2:d9:5d:24:34:7e:ec:e1:8b:9f:5a:db:22:
52:10:dc:5c:fc:3e:4e:e5:cd:4a:e4:dc:25:92:52:
a4:27:50:b8:66:09:68:96:a7:ba:32:27:d4:5a:ff:
3c:b7:70:78:57:d1:44:14:2b:1e:03:fa:3b:25:d1:
d7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:08:09:72:73:2F:5F:1D:5D:73:9A:B1:17:F0:55:3B:90:16:55:6D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9ggJcnMvXx1dc5qxF_BVO5AWVW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.95.0/24
Signature Algorithm: sha256WithRSAEncryption
50:78:46:af:29:88:2f:a7:af:e1:5b:71:29:af:66:ac:6f:25:
c7:de:5e:8e:78:52:a6:72:a5:e5:19:e5:0d:cc:ce:d0:5d:74:
56:39:56:48:a0:e1:ae:81:aa:74:4a:28:5e:0b:8e:a9:9e:82:
29:5e:f9:50:30:72:79:7e:f5:cc:45:7e:86:73:4a:7b:6d:b2:
c4:9e:d6:14:1f:b3:1d:f1:93:66:c9:0a:9a:a2:fd:16:10:98:
98:ab:7c:67:76:d5:e4:13:9d:99:21:af:26:19:95:e5:08:64:
72:3d:94:99:a7:60:5f:5c:29:68:93:59:2d:d2:5f:fb:7c:35:
99:5d:71:28:ed:e2:4e:68:c8:eb:67:b4:8b:d0:79:7f:ba:ea:
67:40:ac:cf:36:20:6f:f3:f9:bc:2a:37:7c:2c:d5:2f:87:da:
3a:3d:85:1a:4e:9f:bc:ba:ed:cb:82:b4:d0:c5:f5:3d:7b:85:
19:df:6f:5a:97:91:9c:aa:29:46:ac:b3:27:ef:a9:72:e5:e7:
e7:75:38:aa:49:24:44:f3:cf:56:9b:07:7b:a9:2f:a7:21:c5:
18:0e:eb:78:b3:7b:6b:5f:53:bd:1f:39:be:57:68:9a:43:96:
b5:04:70:1e:f5:86:77:71:89:de:da:d7:5c:42:7f:ce:dc:47:
8e:ce:e3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:08 2024 by rpki-client on console-fra.rpki-client.org