Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/L4aIxtMpclyUTxHJ9kjCGGlbCUE.roa
File: L4aIxtMpclyUTxHJ9kjCGGlbCUE.roa (raw, json)
Hash identifier: JaR05PPm2kTu1yBykj6ES6uWpKVxYRijwqhiPO94eW8=
Subject key identifier: 2F:86:88:C6:D3:29:72:5C:94:4F:11:C9:F6:48:C2:18:69:5B:09:41
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A2CD6A7A39ABB7CBF20C07CFB76131B34
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/L4aIxtMpclyUTxHJ9kjCGGlbCUE.roa
Signing time: Fri 25 Aug 2023 13:16:19 +0000
ROA not before: Fri 25 Aug 2023 13:16:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197450
IP address blocks: 193.124.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2c:d6:a7:a3:9a:bb:7c:bf:20:c0:7c:fb:76:13:1b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 25 13:16:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f8688c6d329725c944f11c9f648c218695b0941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:45:3b:8b:53:54:3d:f5:6a:4c:b7:af:84:c1:
c8:88:3e:f5:12:9c:84:f2:c9:a5:1c:53:51:41:34:
fb:3b:1b:96:21:44:58:db:be:d5:b1:fa:19:7c:47:
5e:67:0f:1b:7f:41:8f:2a:a0:28:e9:4c:fa:6b:47:
ac:b1:c5:73:9c:c0:01:ea:80:b0:60:25:ce:e9:b2:
4e:40:38:a3:63:d1:13:b6:e2:89:0f:f3:f7:8a:dd:
7b:eb:fd:48:86:11:f8:5c:e7:f1:90:33:32:43:01:
17:49:50:c1:6e:e2:45:8f:a9:93:fd:cc:1e:59:b4:
4a:5f:b3:81:11:6d:89:15:5a:e7:26:42:c0:f2:47:
1b:df:9a:09:45:f5:f9:12:4f:76:97:bf:e7:bf:db:
c1:b6:55:69:ee:b7:c0:9a:f9:7e:b1:e4:c8:04:bd:
e1:f1:3b:01:fe:ae:29:b1:87:26:f1:51:a4:d1:59:
76:00:3f:f4:ac:0b:2b:b4:dc:14:af:1e:10:dc:95:
56:0d:34:80:bd:01:6b:c9:65:e3:a1:32:ff:13:06:
65:6f:24:40:9a:f9:4e:51:53:63:eb:ab:99:84:36:
c1:f8:59:d7:a3:16:96:90:66:55:99:0e:22:a6:85:
b2:e0:a4:33:61:ad:ef:a3:40:bb:1b:b8:a2:c3:06:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:86:88:C6:D3:29:72:5C:94:4F:11:C9:F6:48:C2:18:69:5B:09:41
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/L4aIxtMpclyUTxHJ9kjCGGlbCUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.17.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:03:3a:d4:1f:b8:5b:61:20:61:7c:dd:28:7f:c4:d5:22:2b:
d0:8c:28:4d:e9:80:d7:75:c7:ad:22:62:83:01:4c:e8:41:91:
8f:ae:e9:8c:a2:cd:0b:66:84:fa:14:a0:b9:24:cf:fb:ab:bf:
ff:4f:b2:63:c0:97:eb:9e:02:f6:44:45:40:1c:8f:35:7a:91:
fd:6a:0c:c2:53:76:b7:01:9c:6c:cb:bb:d2:08:af:c8:cd:2e:
7a:05:a3:b7:fc:e1:f9:79:2a:13:76:60:f5:ee:d5:56:a9:59:
a6:f0:a3:c8:18:bd:f9:78:26:3e:5d:52:b6:68:81:8e:63:90:
af:d4:f1:51:8c:40:04:2b:d3:f3:41:1b:ad:52:63:c4:4d:7b:
03:cb:ea:91:88:71:5c:63:8f:ba:2c:87:b8:62:3f:c5:c0:f7:
42:a9:5f:78:62:41:d8:ed:91:87:e1:87:7b:ad:12:7d:38:a1:
c1:ee:98:e9:6a:9e:47:11:4e:65:ce:13:0d:a4:fd:c5:14:1d:
e5:81:22:6f:43:e0:c9:14:71:12:72:8a:80:04:18:29:56:89:
f0:10:9c:cd:34:22:e8:e7:b1:42:36:44:6b:8c:78:d9:e8:f1:
dd:52:3b:7e:83:e6:40:39:38:c9:ef:72:a7:3e:1b:08:3e:3e:
06:9f:a1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 08:40:43 2023 by rpki-client on console-fra.rpki-client.org