Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KA7atmJ6s2_u578C46dyIia0nL4.roa
File: KA7atmJ6s2_u578C46dyIia0nL4.roa (raw, json)
Hash identifier: vrXzjQqPWGWeAQwRiGJOVZO4T1Xq0fCq6108KmgxdSg=
Subject key identifier: 28:0E:DA:B6:62:7A:B3:6F:EE:E7:BF:02:E3:A7:72:22:26:B4:9C:BE
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018E32E224F6FDF0016C3F1708F4BB77C4FB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KA7atmJ6s2_u578C46dyIia0nL4.roa
Signing time: Tue 12 Mar 2024 13:37:45 +0000
ROA not before: Tue 12 Mar 2024 13:37:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208287
IP address blocks: 193.124.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 09:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:32:e2:24:f6:fd:f0:01:6c:3f:17:08:f4:bb:77:c4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 12 13:37:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=280edab6627ab36feee7bf02e3a7722226b49cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:a1:48:c1:7a:8f:bb:65:4e:16:3c:04:37:
83:18:64:d3:57:65:aa:0d:35:bb:ec:1c:5c:0a:29:
b3:f7:e6:25:65:45:f9:30:26:b9:f8:35:f4:81:c1:
14:8c:a8:96:b2:0a:b7:1c:11:56:bd:e2:6a:9d:c3:
2c:d7:a8:89:72:e4:be:68:8b:d5:5a:ee:62:96:98:
a2:fe:c7:e3:8a:ea:07:97:a0:dd:4b:8b:35:98:d4:
4a:3a:16:82:cb:84:b7:f8:29:c8:b0:8b:44:49:92:
74:f7:7e:17:86:64:2b:6f:e9:eb:62:56:84:dc:2c:
f9:72:47:e8:65:99:ec:54:3d:f9:97:2d:fd:e1:48:
fe:9f:b1:1a:66:e3:7b:e9:b7:20:ff:b9:c6:ff:32:
57:20:7f:ff:f9:d0:72:c3:f4:f6:49:9a:60:96:cf:
e7:52:83:76:7b:b3:ee:27:9d:a2:1b:b8:7a:63:dc:
62:c3:b9:01:55:4a:82:60:95:c7:2e:10:b5:a3:b2:
07:7d:1c:2d:83:86:2d:6a:cb:6e:45:89:34:fe:0d:
dc:04:ca:50:f0:60:1e:5c:da:b9:43:6e:03:e9:35:
48:7a:9c:2f:24:7f:25:bc:8f:f5:4f:bb:0f:c1:e1:
89:85:ff:74:66:f1:3e:68:8d:e6:3e:ae:a8:3f:d5:
17:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0E:DA:B6:62:7A:B3:6F:EE:E7:BF:02:E3:A7:72:22:26:B4:9C:BE
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KA7atmJ6s2_u578C46dyIia0nL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.90.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:c8:77:33:c9:19:76:88:7c:b5:99:2d:7e:3d:c6:f8:5a:d7:
18:cd:50:2b:04:dd:3a:1f:69:be:51:cb:2e:ae:ef:b9:c2:09:
44:55:e0:b6:ce:3a:1e:dd:d4:92:e9:5c:bf:55:1a:0e:0f:17:
84:62:f5:b6:6d:71:20:de:b8:04:3c:86:8d:07:42:2d:56:90:
5c:f4:21:63:ba:b4:c4:3d:b7:9b:a2:df:28:60:dd:61:45:1e:
5d:d3:45:91:c1:7d:44:63:e1:be:53:84:9c:23:9f:39:9b:a6:
05:fa:7a:3f:e7:76:39:6e:d2:42:1b:4f:67:26:46:fc:fc:b9:
a8:3d:66:70:0b:5e:78:e5:7f:a0:72:8e:0e:06:01:ca:16:9f:
f6:a5:cf:7b:90:ac:79:44:9e:1a:96:55:66:36:5c:02:7c:7e:
01:71:2c:b3:4e:ac:a3:88:a7:2e:e7:f5:92:96:7c:c9:c4:2c:
11:18:45:4c:96:5f:9a:33:55:ed:bf:30:f4:f4:b1:7f:f3:15:
22:a7:97:37:75:2b:6d:80:d3:13:c6:20:26:e9:4f:36:97:a5:
46:76:c4:b6:05:3f:46:28:6b:12:60:cd:11:c6:11:c5:25:73:
df:50:6f:bf:f1:e5:43:94:36:a2:31:b5:76:f8:2c:f7:f7:af:
82:32:b5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:13 2024 by rpki-client on console-fra.rpki-client.org