Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Fj1HJGPA_la-g3V441otPrIwUDE.roa
File: Fj1HJGPA_la-g3V441otPrIwUDE.roa (raw, json)
Hash identifier: dxjOxAxak/dZGYLGn9f6/Iht43UpApFoLaLYDlHz2xk=
Subject key identifier: 16:3D:47:24:63:C0:FE:56:BE:83:75:78:E3:5A:2D:3E:B2:30:50:31
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0191367506F58917689F288E33BC0D0D90B9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Fj1HJGPA_la-g3V441otPrIwUDE.roa
Signing time: Fri 09 Aug 2024 09:25:24 +0000
ROA not before: Fri 09 Aug 2024 09:25:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200239
IP address blocks: 193.124.80.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
194.87.91.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 13:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:36:75:06:f5:89:17:68:9f:28:8e:33:bc:0d:0d:90:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 9 09:25:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=163d472463c0fe56be837578e35a2d3eb2305031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d6:bd:be:0f:24:2c:72:a3:10:f2:a6:35:98:
71:60:b2:f3:5b:18:b3:68:6d:99:2a:d6:ce:29:9d:
39:19:71:8d:eb:47:9c:52:da:ed:7b:8d:1c:16:4c:
3f:b2:c3:80:e3:0e:be:91:c6:20:c4:ea:26:12:68:
bb:a9:65:c3:19:2b:c1:28:f5:34:93:a3:81:8a:a4:
bd:0f:10:70:25:ff:4f:59:40:33:d9:ff:3d:fc:79:
4e:a7:02:bb:4c:fb:b0:48:71:a5:3f:80:51:b8:ae:
cd:a6:43:3d:25:a7:68:5c:a3:f7:b5:62:cd:67:f7:
9a:42:af:9f:cd:82:cc:36:9d:de:54:b2:f3:fb:22:
7f:87:ca:62:e8:53:cd:c6:be:94:e3:d9:8b:07:34:
42:af:48:c1:d1:38:a6:3d:8e:a2:29:6f:6f:27:86:
73:a6:6b:4c:02:ae:68:26:af:7e:60:5c:96:68:70:
8c:22:49:2c:da:16:32:51:0f:fc:73:52:9b:0e:82:
dc:19:cb:87:8b:01:6e:57:92:e9:64:32:0e:8c:05:
8f:1e:47:60:1f:8b:0c:d4:fa:77:1a:cc:48:5a:5e:
01:77:54:c8:4c:fe:68:54:ba:e9:61:0f:88:df:ea:
7f:57:53:8a:72:7e:04:85:30:30:ea:ad:2d:94:5a:
78:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3D:47:24:63:C0:FE:56:BE:83:75:78:E3:5A:2D:3E:B2:30:50:31
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Fj1HJGPA_la-g3V441otPrIwUDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.80.0/24
193.124.90.0/24
194.87.91.0/24
195.58.63.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:8b:6f:16:e1:dc:58:62:23:73:eb:62:db:e7:88:45:2a:ce:
36:5e:7f:1e:2c:26:b1:67:82:61:72:48:b5:58:78:b2:21:fa:
54:e8:7c:99:ca:12:41:da:2a:7e:55:94:41:4d:dd:8a:77:74:
61:8f:19:be:35:18:b2:25:1c:ef:04:06:57:74:3a:13:24:b6:
cc:96:43:93:3f:99:af:9e:8e:52:2a:56:54:dc:62:fb:d6:19:
46:2d:b2:27:77:f4:44:3d:2d:3d:02:db:a7:5d:5c:36:ec:26:
a2:6a:6f:ff:33:75:f9:a2:11:bc:c6:ab:4a:f6:f0:c4:0c:e6:
d8:b9:5f:9d:0f:fc:81:39:9a:66:5f:37:f2:de:c6:f5:03:45:
11:27:d8:45:8e:8d:89:dd:67:aa:5c:cd:4b:6c:87:a0:38:9e:
b7:66:7b:35:41:2d:a6:69:62:30:b1:46:1b:f6:a1:a3:41:7c:
02:6d:10:ec:49:27:4b:b4:91:f0:21:a2:5b:63:cf:26:02:a9:
af:ec:ef:85:92:5c:90:d5:7a:d3:77:2e:65:ef:c5:73:42:0e:
1e:04:be:42:9c:2a:24:a9:f9:9f:51:82:da:8e:1d:5e:fd:02:
a1:9d:64:ce:d8:e1:fb:45:7e:cd:dd:93:5b:e1:dc:a2:d1:b5:
20:06:0c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 17:14:22 2024 by rpki-client on console-ams.rpki-client.org