Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CXGrRmoXrwn94HG_k_LmAxUJ744.roa
File: CXGrRmoXrwn94HG_k_LmAxUJ744.roa (raw, json)
Hash identifier: X3pvfr2twC1b2ec5aEWAxjbdWEywS8HRUWVR4NUsK1Y=
Subject key identifier: 09:71:AB:46:6A:17:AF:09:FD:E0:71:BF:93:F2:E6:03:15:09:EF:8E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A794A62BBA146D8051C0680AC46C43729
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CXGrRmoXrwn94HG_k_LmAxUJ744.roa
Signing time: Sat 09 Sep 2023 09:33:52 +0000
ROA not before: Sat 09 Sep 2023 09:33:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211373
IP address blocks: 193.108.112.0/24 maxlen: 24
212.192.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:79:4a:62:bb:a1:46:d8:05:1c:06:80:ac:46:c4:37:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 9 09:33:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0971ab466a17af09fde071bf93f2e6031509ef8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:00:d7:d2:c5:f5:7b:b3:ab:73:0e:6b:7a:
01:4f:61:98:42:ba:68:49:cb:23:cb:73:59:83:c7:
d0:1a:ef:9e:d5:83:71:65:72:ba:7a:40:96:0e:d3:
05:91:e9:a9:1e:6c:57:ec:8e:2d:b1:07:ea:b4:cc:
0e:29:93:2a:cf:a7:29:85:5d:a0:1e:a4:49:10:fc:
89:0b:50:ab:b5:3b:f8:e6:ff:52:2d:0d:bc:24:9a:
7e:b6:8c:c2:b3:99:51:a3:79:f6:d1:75:ff:2b:0b:
09:4a:f7:c4:65:e2:2e:e6:a0:69:30:b7:06:80:d2:
eb:04:e4:6a:0b:8e:a9:22:73:6d:60:72:22:dc:9d:
ac:75:c5:85:64:f9:4d:22:aa:42:25:9c:a5:47:34:
5e:1d:34:5b:5e:eb:29:d5:28:f0:48:33:23:ef:5a:
f7:d9:ac:98:7c:d9:7e:89:3c:8c:d6:81:2c:14:13:
e0:06:71:5f:b0:63:2c:0a:ec:8a:cc:f2:f0:aa:5f:
5e:ac:d3:b9:be:5a:da:d0:10:2b:67:88:d4:21:78:
40:24:fd:3d:e9:82:92:44:e7:00:c9:7e:8e:23:b8:
b7:86:0a:ac:e8:95:94:a5:a7:4e:4e:b1:a9:89:44:
26:67:43:2a:da:3e:18:7b:92:87:7b:c4:4e:9f:37:
34:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:71:AB:46:6A:17:AF:09:FD:E0:71:BF:93:F2:E6:03:15:09:EF:8E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CXGrRmoXrwn94HG_k_LmAxUJ744.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.112.0/24
212.192.6.0/24
Signature Algorithm: sha256WithRSAEncryption
47:e3:57:da:97:11:47:28:9d:a6:ef:81:96:f2:40:c2:a8:97:
3d:75:d7:0f:30:8c:74:2d:87:ca:76:8a:6c:98:33:a5:4f:38:
6e:2d:28:18:39:be:d7:24:5e:57:31:e5:28:4d:1d:ab:9b:8e:
7e:7a:be:ae:34:ea:3e:87:5d:c9:7e:2c:54:58:5b:ba:5b:2f:
0e:da:46:48:95:3e:34:b2:50:55:bb:27:65:d0:1d:99:09:8d:
83:cb:87:47:26:26:b3:c2:9d:78:9e:17:bd:d7:04:2c:26:43:
46:04:b8:79:38:c3:7f:87:d2:6d:06:65:06:06:43:99:f2:90:
f6:46:e4:90:3c:d2:ab:5a:d9:cf:3f:86:fc:09:91:27:a7:d2:
4b:74:e4:4d:fb:ee:53:17:7c:f0:12:2c:ea:97:a8:d9:64:5a:
53:1d:1b:22:a8:69:b7:76:18:74:d5:0c:00:e7:19:8c:5e:1b:
5c:8e:f5:36:fb:f3:b4:6c:23:80:dc:c7:19:88:76:63:85:67:
4b:70:c6:a3:c5:d9:37:41:5d:76:f0:a7:db:5a:df:d9:8d:2d:
4a:87:47:f9:e5:c4:6f:24:21:26:de:0a:ee:84:0b:4a:2d:2b:
0c:e9:25:84:2e:7e:17:9d:6b:78:d6:c5:56:5e:ef:a7:01:27:
7c:52:61:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:20 2024 by rpki-client on console-fra.rpki-client.org