Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9paKYwWWouM0wCEzS2uddeyyRTc.roa
File: 9paKYwWWouM0wCEzS2uddeyyRTc.roa (raw, json)
Hash identifier: 51UCZnZfVOPRbB5R0J65dVxdGw5TSDcCefcXypp4SlI=
Subject key identifier: F6:96:8A:63:05:96:A2:E3:34:C0:21:33:4B:6B:9D:75:EC:B2:45:37
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018EA4966C3E5F381C2D2FD13086FBCB8AE5
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9paKYwWWouM0wCEzS2uddeyyRTc.roa
Signing time: Wed 03 Apr 2024 15:31:45 +0000
ROA not before: Wed 03 Apr 2024 15:31:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 192.124.177.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Oct 2024 13:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a4:96:6c:3e:5f:38:1c:2d:2f:d1:30:86:fb:cb:8a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 3 15:31:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6968a630596a2e334c021334b6b9d75ecb24537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:28:34:60:84:78:29:35:21:35:7e:88:4d:c1:
a3:6e:74:4c:48:60:a9:99:06:27:9f:e2:34:c1:fa:
5f:a4:d1:8f:86:3c:ae:35:f4:70:68:46:63:54:0c:
15:23:1b:d8:3b:f9:f6:73:d4:3a:a1:ee:b8:c0:83:
45:f8:e6:9d:c2:46:5b:cb:05:d6:c9:7f:6c:9f:e3:
37:b1:ad:50:20:7d:a3:86:39:59:39:30:36:dc:47:
98:ff:c1:de:9a:b2:c7:84:17:90:18:2e:71:b6:de:
6f:ba:d5:d1:af:9a:b7:51:7c:95:53:54:af:8e:5a:
55:c2:a9:8e:41:38:40:1d:64:25:83:d3:f7:4a:e0:
0c:4b:ea:4f:03:1e:54:4b:32:06:9c:dd:78:30:4a:
13:75:11:91:ad:a8:2a:55:5d:61:44:c4:4b:8e:1e:
bb:bd:25:d3:dc:9c:81:c3:c5:08:eb:4c:fb:db:42:
61:51:cc:3c:a4:fa:3e:fe:0f:21:88:9a:6e:0f:54:
ca:5f:0b:71:f9:ec:8c:37:e9:cb:c1:d9:51:f9:60:
ed:45:3f:c6:f0:2f:11:3c:cb:62:f0:f1:30:53:4a:
85:ee:2a:6c:6a:fe:f5:98:a0:5b:4a:f6:00:90:dd:
03:03:69:af:eb:f7:7f:0a:76:1d:46:9c:58:66:99:
90:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:96:8A:63:05:96:A2:E3:34:C0:21:33:4B:6B:9D:75:EC:B2:45:37
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9paKYwWWouM0wCEzS2uddeyyRTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.177.0/24
194.87.64.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ac:5c:b4:68:f0:0a:e8:d2:23:ab:87:b0:4e:8c:c5:95:6f:
ed:53:de:36:18:cd:3a:c8:10:c0:e1:a3:2d:6c:b5:b9:c9:d3:
aa:65:64:e0:6a:15:60:51:cb:0f:e5:c0:7d:b6:42:bb:1f:1c:
47:4a:18:ae:c5:53:9a:db:c7:0b:e6:54:e5:e8:6e:00:bf:8e:
50:1a:86:f7:8a:52:1b:e7:bb:7d:1d:23:75:e1:ac:f0:23:50:
96:df:16:00:a3:b4:49:96:72:fb:b9:d1:9c:3b:fa:e7:0b:bc:
06:bf:6c:b3:f6:d8:22:a6:db:89:bc:7d:9a:05:5d:a3:d8:41:
64:49:b7:c3:e0:b6:c5:48:9c:a9:39:b0:4d:b5:48:01:86:16:
a1:05:2e:26:ea:39:0a:c3:94:1d:90:cd:91:54:34:d9:0d:dd:
4a:d4:42:c9:64:53:f5:6d:e9:69:c8:c2:57:36:7e:79:1c:e2:
06:39:8e:58:4c:8b:7a:d9:cb:b8:cc:1a:0f:8b:32:69:74:59:
cc:b0:df:21:f9:bd:87:84:a7:db:e9:0a:8a:58:33:b9:51:35:
e4:11:b7:b3:24:89:eb:4c:0a:6f:4c:98:9c:d6:6a:b0:c9:75:
b7:bf:ea:82:e5:fc:4d:d5:4a:f0:7f:27:80:f2:20:c1:e7:12:
c8:d2:da:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 17:42:54 2024 by rpki-client on console-ams.rpki-client.org