Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IgnoeTp082M6KlNREwH_QhUeopI.roa
File: IgnoeTp082M6KlNREwH_QhUeopI.roa (raw, json)
Hash identifier: t2yuBCAbt1fDvx5xGtrSq1SA+3B57hZVPq78HY95X/8=
Subject key identifier: 22:09:E8:79:3A:74:F3:63:3A:2A:53:51:13:01:FF:42:15:1E:A2:92
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C49F102562CF919DAA35C74B33C5B5A13
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IgnoeTp082M6KlNREwH_QhUeopI.roa
Signing time: Fri 08 Dec 2023 14:59:40 +0000
ROA not before: Fri 08 Dec 2023 14:59:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207326
IP address blocks: 193.124.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:49:f1:02:56:2c:f9:19:da:a3:5c:74:b3:3c:5b:5a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 8 14:59:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2209e8793a74f3633a2a53511301ff42151ea292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:54:2e:3c:81:8b:3e:53:d1:02:35:3e:66:ae:
72:13:af:89:08:44:ea:d8:7c:28:ed:50:d6:53:75:
b2:7e:2b:5f:16:1f:86:e7:fe:d5:64:0e:b4:8c:4d:
ec:57:d4:d9:bf:0c:ee:9b:ed:a0:1b:27:3e:5e:9d:
55:79:00:db:94:28:59:13:01:94:af:ba:84:97:c7:
bf:db:7a:61:cd:29:a1:3e:b6:bc:be:3f:6f:fc:10:
b5:fd:1a:5a:59:df:43:63:3f:2f:89:5c:c6:33:ae:
a2:fe:0b:fb:f0:54:97:2a:cc:d4:49:e5:f8:76:80:
69:f1:b1:e8:a7:53:8f:c6:86:be:e2:cd:86:0a:b7:
29:1b:c7:ab:d0:c0:3f:19:8c:a0:50:7f:b6:dd:1b:
a7:ae:c2:1b:6d:56:0c:f0:07:11:97:5c:d7:ca:60:
47:60:88:b0:55:c6:d4:a6:33:c1:b7:69:15:e3:40:
26:ab:a1:8d:67:c5:fa:ce:b2:88:f7:48:89:ef:79:
01:16:0f:c9:75:2a:6b:50:ed:87:ee:e2:0e:df:0b:
2b:02:85:df:ff:34:13:69:44:08:2d:ac:c6:ba:d9:
be:b9:a0:6c:f8:d6:cf:10:a1:da:41:14:e7:d9:91:
e4:bb:5e:47:29:8e:c6:ae:98:a0:f0:6b:d9:b2:83:
42:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:09:E8:79:3A:74:F3:63:3A:2A:53:51:13:01:FF:42:15:1E:A2:92
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IgnoeTp082M6KlNREwH_QhUeopI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.5.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ab:be:b3:01:a9:b8:e8:ea:b6:1e:12:94:85:c1:5a:85:ff:
6e:ee:64:b3:54:9f:d3:b9:a9:e2:2a:b0:35:1b:33:06:d5:c8:
c8:e3:2d:6e:8d:6b:55:e2:06:91:ee:6e:80:43:55:79:d4:45:
d7:ee:61:4d:2c:d3:20:90:b1:10:b9:38:42:15:6b:9a:56:62:
ed:16:5d:cf:71:5a:ee:c1:96:ca:8c:33:69:3f:d6:ad:70:a0:
59:6f:6d:ea:11:4d:70:90:65:5b:a0:e2:37:54:fb:5b:06:9a:
e6:19:4e:00:c4:4c:aa:28:5b:23:ae:b0:67:d8:3f:5e:fb:43:
80:5c:3f:3f:56:36:85:d5:23:d6:f8:80:39:d7:ab:47:de:71:
54:6e:de:fa:55:51:45:76:90:09:5d:98:fb:35:dd:0c:31:02:
30:21:0c:a6:68:1c:3b:ba:01:c5:4f:58:6c:b8:9e:55:01:01:
3a:cf:75:17:e2:7b:9d:3c:6e:67:27:59:d2:a9:dd:c0:09:c9:
55:84:88:5d:0b:59:fe:9e:08:d4:50:f4:15:60:32:5c:a4:08:
49:94:df:fc:b2:18:d2:54:a6:c6:67:0b:70:48:5c:ec:10:9c:
82:24:2e:88:3e:6b:bc:90:00:e2:a1:13:b8:5c:c3:85:bb:2a:
fd:89:59:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:18 2024 by rpki-client on console-ams.rpki-client.org