Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CgkhrxPG59-2h4TmBQE0aZcgxIQ.roa
File: CgkhrxPG59-2h4TmBQE0aZcgxIQ.roa (raw, json)
Hash identifier: ++dzVFjkhUBaxcpGfK259ZzBW3QkB8lTUgZTQRTYxEs=
Subject key identifier: 0A:09:21:AF:13:C6:E7:DF:B6:87:84:E6:05:01:34:69:97:20:C4:84
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B5DA32A8C4B6AEE42BF006E301922989B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CgkhrxPG59-2h4TmBQE0aZcgxIQ.roa
Signing time: Mon 23 Oct 2023 17:44:16 +0000
ROA not before: Mon 23 Oct 2023 17:44:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21769
IP address blocks: 194.87.22.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Nov 2023 03:54:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5d:a3:2a:8c:4b:6a:ee:42:bf:00:6e:30:19:22:98:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 23 17:44:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a0921af13c6e7dfb68784e6050134699720c484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0f:d5:db:fe:a6:99:79:5a:42:a2:37:25:24:
a2:fe:de:d6:f1:fe:87:d9:72:08:12:26:45:39:f7:
66:11:0a:89:41:2c:1f:3c:88:ed:85:7a:fd:a1:94:
c4:7d:4b:f5:12:a6:26:6f:c3:f8:64:de:ae:9e:e8:
ec:8b:6e:65:8b:8f:f6:44:9b:b7:4e:21:ac:2c:57:
38:e4:48:9e:21:4c:c3:ac:11:23:ca:7e:f5:73:a3:
5c:89:7a:c3:b1:c7:88:5f:6a:ab:fd:d7:87:a3:1a:
a0:90:ec:a4:52:1a:e8:ef:d7:aa:df:c6:78:92:75:
22:7d:e1:89:f8:51:f3:39:0c:54:f9:44:c7:c7:92:
63:3b:24:2f:7f:36:a2:67:51:11:a4:8c:0a:1b:4d:
2a:40:f5:f8:00:77:b9:6c:75:0f:d1:ff:05:5b:66:
d6:67:79:ec:48:c1:1a:74:fe:94:57:04:05:11:8a:
3d:6b:1c:ea:93:1e:d7:f1:22:9d:94:79:7c:71:59:
34:23:22:f6:49:3d:c9:fc:a1:9d:c5:da:40:30:64:
16:05:d5:51:1d:85:95:ab:4d:19:7e:cd:ea:8d:40:
d1:fc:60:0b:02:a6:ab:99:04:3d:e9:87:6a:59:db:
1b:7a:d4:86:67:5b:e6:d1:fb:57:d8:4c:e5:de:63:
43:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:09:21:AF:13:C6:E7:DF:B6:87:84:E6:05:01:34:69:97:20:C4:84
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CgkhrxPG59-2h4TmBQE0aZcgxIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.47.0/24
194.87.22.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:1c:2d:bb:11:d0:66:ed:81:79:0b:9f:78:00:ea:97:4d:82:
a1:c8:23:c9:9e:45:3e:bc:8e:4b:4e:e4:ad:d8:b3:5b:60:71:
81:e0:e2:1e:d7:d7:bb:7e:5e:32:24:d9:af:f2:87:04:df:b9:
e0:f1:0a:70:8c:26:ea:99:c8:82:37:23:05:38:65:98:39:2f:
07:20:4b:68:09:81:5c:7a:2a:d2:45:c1:2d:95:e9:fe:0f:5b:
3f:1a:14:dd:71:e7:75:ba:f2:9e:94:f9:d6:39:94:e9:b2:2d:
6c:24:4c:92:ce:e4:60:13:75:7c:18:b5:c9:83:f9:50:96:cd:
0c:fa:49:f0:f8:73:71:d1:83:ae:ac:92:5b:d4:eb:1a:87:3e:
58:2d:d9:79:a3:f6:a4:72:94:05:b0:7f:24:1b:96:f2:5f:fa:
ee:53:9d:20:1b:73:9a:19:03:32:4b:69:89:7c:61:1d:62:75:
6c:9a:c3:75:b0:36:93:d8:dc:cf:52:a9:71:32:bd:69:01:5f:
41:92:84:b2:74:57:cb:e2:cd:dd:9d:1b:7d:59:d6:e1:ad:73:
65:62:a5:4b:93:e6:1b:f8:54:df:92:de:87:e1:31:ac:d0:56:
fe:98:41:d7:e5:74:00:61:32:5f:01:38:46:20:34:fb:c6:ab:
63:98:6d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:09 2024 by rpki-client on console-fra.rpki-client.org