Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9yylYt0FzUlHDJwQ2Ei-jXau94w.roa
File: 9yylYt0FzUlHDJwQ2Ei-jXau94w.roa (raw, json)
Hash identifier: Jdxi+a/ceChzqDx9KBPe2PQHZ2hm8JG4YHG54j15maU=
Subject key identifier: F7:2C:A5:62:DD:05:CD:49:47:0C:9C:10:D8:48:BE:8D:76:AE:F7:8C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018645F8F367F3A4A17FA1EF09F1D51EFF25
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9yylYt0FzUlHDJwQ2Ei-jXau94w.roa
Signing time: Sun 12 Feb 2023 14:13:08 +0000
ROA not before: Sun 12 Feb 2023 14:13:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 193.124.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:45:f8:f3:67:f3:a4:a1:7f:a1:ef:09:f1:d5:1e:ff:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 12 14:13:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f72ca562dd05cd49470c9c10d848be8d76aef78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:af:73:60:1f:a1:6c:8c:46:a2:fa:02:22:c5:
34:e8:2e:b3:e9:ae:52:6e:20:72:40:4f:39:fb:27:
24:15:e9:65:6c:b9:c8:ad:5f:41:5e:91:e2:a4:09:
0d:93:63:94:13:cb:a9:04:a7:f0:6e:0a:f0:f1:2c:
0d:33:a4:b6:31:c7:a4:68:54:ec:ef:ff:80:2e:49:
ee:87:7a:c2:0e:7d:e8:ce:d7:e3:05:31:af:93:86:
3b:89:f7:f8:13:74:96:f7:c1:0e:4b:6d:77:56:df:
91:5f:76:58:db:36:44:b1:a4:3e:2f:1d:83:cd:5e:
fe:98:81:ca:08:c2:b6:1f:da:49:8a:3a:34:87:a2:
b9:f9:ad:09:d2:60:4f:b1:e5:2b:24:f9:93:c0:54:
88:0b:80:31:7f:fa:8f:d1:12:ea:f7:65:03:8b:9e:
66:ea:57:7b:2a:2e:3a:c1:ba:1d:aa:28:47:2f:ed:
65:81:77:7b:37:7b:70:2a:57:51:a1:a9:14:56:69:
20:4b:e7:b7:66:fd:69:fc:80:bb:74:bf:b2:3d:4e:
4a:c6:32:8e:54:18:23:f5:99:2e:c2:8f:d3:24:15:
a6:75:aa:58:32:2d:9f:37:8d:33:ec:e6:4d:c8:fd:
19:4d:8a:9f:51:c6:a8:df:99:0a:2b:37:61:52:41:
e3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2C:A5:62:DD:05:CD:49:47:0C:9C:10:D8:48:BE:8D:76:AE:F7:8C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9yylYt0FzUlHDJwQ2Ei-jXau94w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.33.0/24
Signature Algorithm: sha256WithRSAEncryption
24:ee:f8:de:8a:97:b5:c1:57:bb:a9:4f:62:44:ab:7a:0f:ab:
40:35:17:ac:39:0e:43:12:b5:ee:65:8a:ef:55:ab:5a:6e:d5:
82:83:ea:d4:34:e3:82:a1:6e:8f:ec:15:7a:4b:8c:ca:ed:f3:
7d:f1:a8:8a:57:9a:9e:7a:4e:1d:1d:3c:2d:19:95:e9:74:74:
fb:07:43:90:ce:62:31:c5:85:f7:e6:cd:17:13:cc:d0:8e:53:
d7:bf:2c:41:ca:76:75:45:bc:63:13:a9:d6:7c:26:3b:e3:f7:
70:e8:0e:6e:bc:ba:72:dc:25:d5:43:3d:f7:14:8d:50:63:9c:
d2:59:ba:2e:24:af:9d:42:44:08:30:ef:8b:63:96:bd:1b:91:
73:e5:27:31:52:7a:14:e2:8b:d9:d9:df:91:41:a5:0d:5f:12:
54:c3:80:e3:89:28:a7:09:1f:0f:32:ef:9b:33:f4:35:40:64:
fa:84:8e:67:1b:af:8f:4f:89:23:83:3a:74:36:18:57:b0:c3:
51:cb:83:bc:76:77:99:77:88:89:63:6c:aa:12:31:e5:82:1e:
79:6f:5e:26:0c:1e:a7:2a:0f:25:00:0c:d7:d5:89:d1:da:d4:
c5:a0:e1:23:c0:2c:0c:16:31:b3:3b:46:d1:64:95:09:54:bf:
80:62:23:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:57 2023 by rpki-client on console-fra.rpki-client.org