Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/E4SJagibuDcId9-MfRuvOU1NdkI.roa
File: E4SJagibuDcId9-MfRuvOU1NdkI.roa (raw, json)
Hash identifier: skwf5gdWXSUxiACb2qK/ScZa6DCVdzwJv3X4KSdxAac=
Subject key identifier: 13:84:89:6A:08:9B:B8:37:08:77:DF:8C:7D:1B:AF:39:4D:4D:76:42
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018BF296F5D9A6DE23788AA63B8750132906
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/E4SJagibuDcId9-MfRuvOU1NdkI.roa
Signing time: Tue 21 Nov 2023 15:54:21 +0000
ROA not before: Tue 21 Nov 2023 15:54:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 212.192.221.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Nov 2023 16:07:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f2:96:f5:d9:a6:de:23:78:8a:a6:3b:87:50:13:29:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 21 15:54:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1384896a089bb8370877df8c7d1baf394d4d7642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:8d:79:79:99:c9:dc:40:ef:98:cf:5c:df:
f3:23:b2:9d:d5:30:45:74:aa:3d:cd:c4:bd:30:1a:
5f:59:1a:8c:9d:aa:a0:e1:6b:30:a9:21:c3:c5:43:
47:49:35:85:87:fb:55:8c:28:c7:2b:03:ae:0d:10:
e8:8e:ea:33:d8:3c:e6:9c:28:d0:59:f2:25:d2:be:
89:6f:02:67:48:8b:9a:ef:7e:3d:2a:4c:a8:27:5a:
49:77:e1:5b:3f:72:40:bc:be:4c:85:f4:cc:bc:4c:
fd:27:66:c5:a1:38:bd:73:69:0e:4b:57:53:39:85:
54:ed:eb:75:f4:a4:9d:5c:06:84:0a:a2:5b:4c:38:
9c:93:e9:f7:7e:9d:6d:85:34:f7:d5:64:5e:25:7d:
9c:13:5c:60:27:84:bb:db:b1:ae:9c:d0:60:0a:b3:
6b:5f:f0:25:d8:ec:68:e6:d8:bd:4a:ec:46:42:0c:
ba:50:51:81:81:51:7d:a1:a2:9d:42:ec:56:0a:0b:
dc:d7:25:b0:5d:87:0e:2e:11:05:ac:95:c3:a5:57:
25:2f:8f:16:9f:5c:cd:dc:a0:11:d4:2b:27:e3:c1:
3e:6f:15:b9:a6:7e:15:5f:45:1f:1a:8b:d8:a4:c8:
99:9a:b5:70:72:3e:6b:ec:80:b4:d1:7f:d2:44:e0:
cd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:84:89:6A:08:9B:B8:37:08:77:DF:8C:7D:1B:AF:39:4D:4D:76:42
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/E4SJagibuDcId9-MfRuvOU1NdkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.181.0/24
192.124.190.0/23
192.124.209.0/24
212.192.221.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:63:28:f8:7c:75:1b:1c:40:c7:58:f6:81:64:3a:cc:73:a6:
39:cd:e5:3f:eb:2b:1e:cf:3b:f5:16:5d:a0:cd:15:87:8e:f6:
a0:a2:8f:87:22:a8:66:c5:92:cf:2d:03:b7:d4:af:02:8e:41:
d1:94:30:ab:e3:ba:38:1e:a6:d6:47:6d:2a:ec:95:64:ba:fa:
54:6c:5f:ee:c4:d3:f7:d9:64:55:7a:a3:53:2b:d9:25:c4:a5:
46:96:b3:f8:e8:12:e3:78:71:9f:aa:e1:30:5c:b4:1c:1e:ef:
27:e8:0f:5f:76:df:8f:42:79:68:62:47:2e:5d:70:e8:41:65:
bc:39:08:b8:2d:ee:09:d1:1b:a7:4e:37:c1:db:91:0a:c9:24:
38:12:1f:0d:be:75:b5:37:1e:5b:5a:89:2e:9e:1e:d2:17:82:
5e:d0:3e:ce:40:dc:1e:a6:e7:6b:f6:bb:4c:2e:f1:79:f5:7a:
00:8d:ef:15:c4:82:ba:0b:d6:ba:4d:d1:a6:80:21:cf:2e:81:
0a:8c:09:c4:65:50:2a:fb:6e:38:26:d4:6e:b9:ab:b6:9c:c7:
c3:f7:58:69:74:56:d8:e6:c9:10:e5:70:73:ff:d6:95:75:3e:
2a:49:58:e1:3f:45:6c:9b:5b:9d:eb:42:02:a1:d0:f2:7e:5a:
fd:a5:a7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:10 2024 by rpki-client on console-fra.rpki-client.org