Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/J_uZG3CLhzuW1UjlGW_fLpp_6Ec.roa
File: J_uZG3CLhzuW1UjlGW_fLpp_6Ec.roa (raw, json)
Hash identifier: 5BbqSPjAXVWhgCK64OLZq6vpSCwM3wM8pxSs86VW2gw=
Subject key identifier: 27:FB:99:1B:70:8B:87:3B:96:D5:48:E5:19:6F:DF:2E:9A:7F:E8:47
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01892117BBB62E9E5FA323A77BF0B3EE4590
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/J_uZG3CLhzuW1UjlGW_fLpp_6Ec.roa
Signing time: Tue 04 Jul 2023 13:29:10 +0000
ROA not before: Tue 04 Jul 2023 13:29:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9002
IP address blocks: 193.124.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:21:17:bb:b6:2e:9e:5f:a3:23:a7:7b:f0:b3:ee:45:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 4 13:29:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27fb991b708b873b96d548e5196fdf2e9a7fe847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:21:7b:4b:8e:1b:f2:64:9f:a1:d8:c5:25:4c:
4a:ec:2c:54:91:38:8e:92:68:4b:bf:88:94:44:92:
0a:7b:e5:56:73:9e:5e:f4:16:a9:5d:d1:16:aa:78:
f9:5b:d8:84:ef:c0:cb:36:30:34:c9:dd:0c:de:e2:
a2:19:65:3f:fb:b2:52:8c:5a:0d:74:51:4c:1a:f0:
0c:4a:e7:4d:76:af:31:11:79:d7:43:83:5e:4f:76:
f7:ad:57:cc:99:31:2b:34:29:46:f3:71:ae:85:76:
e1:15:1d:7f:d2:d4:1a:99:1a:2b:6d:80:7a:c6:dc:
8d:09:10:7d:fd:55:4b:b3:b9:15:28:7a:cc:ed:e7:
ae:4b:48:c1:13:3c:50:ef:0d:0a:6f:ca:1b:fd:80:
7d:d6:26:91:c4:a7:ba:66:fd:ea:cd:b9:04:42:f7:
a7:a4:db:82:46:94:1a:18:26:02:f7:2b:ad:98:6a:
00:db:a6:cb:f1:bc:b7:dc:b7:be:5c:76:4f:3a:df:
b5:f8:fa:39:36:7b:5d:3b:43:9d:f6:ea:d3:b2:12:
9a:9c:14:c9:58:1f:15:b0:ab:87:ed:40:95:78:c5:
a0:9e:38:49:c6:39:da:11:30:2c:54:1a:f1:a7:04:
75:ab:7a:8f:e2:7d:c6:8a:f1:51:23:3a:35:54:df:
53:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FB:99:1B:70:8B:87:3B:96:D5:48:E5:19:6F:DF:2E:9A:7F:E8:47
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/J_uZG3CLhzuW1UjlGW_fLpp_6Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.92.0/24
Signature Algorithm: sha256WithRSAEncryption
82:39:34:6a:af:9e:ea:0d:17:3c:e6:58:a6:58:3c:73:90:fa:
45:9e:a6:a5:49:f6:2d:31:ce:e3:a9:f4:ea:8f:71:94:50:ee:
90:e5:d1:b5:75:07:2a:88:9a:83:9f:0c:d4:36:b8:00:73:25:
39:34:54:eb:bd:e9:35:a5:b7:89:85:f0:d1:33:2a:ff:b3:43:
d2:d7:21:d9:47:66:db:7d:5e:f7:b6:ce:6c:95:c3:78:67:f1:
a8:97:28:6d:7b:0b:12:01:ab:ac:4c:19:df:a2:ec:23:ee:50:
02:33:74:46:77:2f:05:93:91:4b:a1:ef:00:08:78:87:f4:ba:
a8:c7:40:81:d9:66:9e:b6:e2:47:ae:29:fd:31:b3:16:ff:f1:
0f:ac:3e:75:80:6f:18:71:49:6c:41:8f:ff:b3:56:0d:d1:ff:
2a:7b:a3:12:1c:b7:31:8f:05:bd:d8:86:f2:05:fd:37:ca:8b:
15:30:86:9e:d8:72:0b:19:4b:00:8c:a9:d2:97:29:c7:ed:6f:
23:26:b2:40:49:84:90:41:b6:2c:35:1e:df:43:54:ee:97:45:
26:79:f2:5e:ed:86:71:1f:bd:68:d1:21:c8:19:56:27:4d:47:
73:c4:0c:86:ee:d3:67:0e:05:ee:f8:0e:2b:5d:06:90:b5:a6:
c3:c6:f3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:12 2024 by rpki-client on console-fra.rpki-client.org