Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/G__9allb9bdfvqmFjYgkNyDeEsI.roa
File: G__9allb9bdfvqmFjYgkNyDeEsI.roa (raw, json)
Hash identifier: YelTrXK1i+IuhxpLgKnmwp1clWHYgRpzq0IfJlPeXLw=
Subject key identifier: 1B:FF:FD:6A:59:5B:F5:B7:5F:BE:A9:85:8D:88:24:37:20:DE:12:C2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01859FA0950B6D976FC6E8CF380160A938BF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/G__9allb9bdfvqmFjYgkNyDeEsI.roa
Signing time: Wed 11 Jan 2023 06:59:39 +0000
ROA not before: Wed 11 Jan 2023 06:59:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49870
IP address blocks: 193.124.45.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9f:a0:95:0b:6d:97:6f:c6:e8:cf:38:01:60:a9:38:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 11 06:59:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bfffd6a595bf5b75fbea9858d88243720de12c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:8d:66:85:97:b2:c2:2f:9c:8c:4f:3a:a5:
96:43:bb:86:52:79:ed:95:a0:ed:84:44:de:60:43:
eb:4d:4e:7c:3e:9a:30:d6:2b:2a:dd:93:4d:ad:11:
45:bb:12:8b:aa:1b:c5:bc:dc:57:73:5a:4c:f2:13:
3c:15:18:b6:a6:03:37:13:45:43:b6:27:8c:7f:ae:
9c:c6:8d:83:7e:41:80:7f:17:7d:96:e2:97:c9:dc:
5c:55:6c:e5:67:07:31:76:fc:92:50:f5:65:3f:5a:
2d:76:42:1d:9f:f0:54:fe:50:20:5f:f2:d2:d1:46:
fc:0c:3c:11:d4:d1:c6:9f:78:c0:c6:77:be:4f:87:
a3:9f:cf:8a:d7:92:3a:ab:ac:3c:6e:84:76:44:5b:
04:30:0a:0a:66:69:54:9e:1b:a8:4e:b4:d1:9e:80:
fc:2a:c2:c9:3e:81:02:65:63:25:f8:19:07:82:6b:
4d:9d:df:21:3a:66:42:08:e5:de:74:bf:91:23:94:
63:42:12:df:6e:32:10:4c:bb:cb:e2:88:38:06:5a:
4c:2e:ba:fc:da:84:e4:97:bb:d4:c0:cd:82:64:2f:
eb:ed:34:8f:70:64:0f:be:7b:f5:4c:c9:0c:82:e4:
58:95:95:9c:0f:b8:49:2e:76:6b:84:c9:bc:a4:9c:
23:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FF:FD:6A:59:5B:F5:B7:5F:BE:A9:85:8D:88:24:37:20:DE:12:C2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/G__9allb9bdfvqmFjYgkNyDeEsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.45.0/24
194.58.58.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a8:58:75:ac:4b:8e:c4:5f:d4:ef:a9:4f:8f:9a:cb:43:b5:
49:5e:30:fe:d0:aa:d3:9e:dc:3c:1b:1f:ce:c9:a8:9d:84:2f:
f1:a8:df:d6:7f:b7:12:93:90:9f:fc:1a:08:1c:e4:17:47:af:
9e:6b:95:87:52:6f:34:e2:2b:63:bb:a7:ef:cb:43:a4:4e:d7:
a5:e6:6a:4a:6c:91:c8:f0:c2:f9:d7:a9:bb:bc:07:46:83:9e:
8f:a0:1d:e3:69:fe:ae:c2:62:a3:ce:7d:72:66:df:9f:a7:1f:
2b:79:11:cf:ed:9f:60:4d:73:a6:ad:c3:4d:09:8a:83:56:50:
85:3f:94:11:d9:b0:b3:a1:84:98:38:ab:74:81:3a:fc:cb:b0:
ca:38:53:ef:c5:30:78:4d:b4:8b:b1:e6:0d:c4:e4:cc:f4:6d:
08:ee:03:9d:4b:2f:71:8a:b4:a3:82:8f:ef:89:c9:f6:0b:54:
b2:9e:d9:a0:23:f3:d7:f1:48:57:3f:20:8a:ec:6f:5d:89:67:
b1:4d:ef:5c:5c:ae:68:92:f7:c2:6f:83:aa:fc:3d:4b:b1:ba:
ab:71:f4:36:03:f0:86:85:39:e7:8d:44:1a:cc:61:e6:f2:f5:
fd:01:89:cb:76:df:d9:d4:3c:05:4a:95:6f:12:28:4a:05:b0:
66:85:ac:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:54 2023 by rpki-client on console-ams.rpki-client.org