Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LaJwZyC2CCNyJMDvXX96A5y3ZVY.roa
File: LaJwZyC2CCNyJMDvXX96A5y3ZVY.roa (raw, json)
Hash identifier: ytJVv+d3xY5iSD1pCc29KoeDdQFUfy60DZ7i/ujUbz0=
Subject key identifier: 2D:A2:70:67:20:B6:08:23:72:24:C0:EF:5D:7F:7A:03:9C:B7:65:56
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0192E8B2C059A9FFA78A2DB72174E976CC2D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LaJwZyC2CCNyJMDvXX96A5y3ZVY.roa
Signing time: Fri 01 Nov 2024 17:08:01 +0000
ROA not before: Fri 01 Nov 2024 17:08:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202656
IP address blocks: 193.124.7.0/24 maxlen: 24
194.87.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 04:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e8:b2:c0:59:a9:ff:a7:8a:2d:b7:21:74:e9:76:cc:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 1 17:08:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2da2706720b608237224c0ef5d7f7a039cb76556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3d:dd:7e:3e:05:a3:cf:d5:88:85:9c:5c:7e:
eb:5e:8e:96:3c:7f:6e:6e:2f:d5:bb:86:f5:00:a9:
6b:00:4c:29:40:a1:0c:bc:e9:9f:0d:26:30:0f:8d:
db:fd:22:7f:c4:f0:04:97:67:4b:92:a4:cb:68:93:
53:aa:1f:8c:c6:06:d6:63:70:a4:c2:00:2a:12:fd:
dc:8a:80:ff:81:11:bc:a3:8f:ab:c2:66:29:4d:92:
35:99:61:71:6a:a3:e2:05:7d:c0:6a:26:78:d2:6b:
66:38:b0:16:13:62:8c:f3:ee:47:a0:d9:00:22:40:
e4:3c:46:a7:3c:ef:0f:13:4b:cf:91:2b:19:c1:50:
9f:85:33:d5:22:07:81:ad:60:ca:eb:f6:b6:42:2b:
c3:5c:9f:cd:49:51:6d:63:3d:5f:62:2f:2d:52:16:
2d:ca:2e:bf:b5:de:5b:49:92:1b:94:61:9d:23:55:
44:99:49:e1:12:60:5c:f1:fd:ef:53:21:2f:e4:89:
e4:50:48:a7:38:cf:75:85:86:82:b2:0b:f6:9b:68:
40:68:c4:a9:2e:c9:ae:01:97:4e:44:fc:9d:ad:b5:
f8:18:1b:2f:1f:48:b7:59:57:c0:df:e8:6c:7b:2a:
b9:16:60:51:27:d6:8d:a5:65:62:51:41:03:49:b6:
ac:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A2:70:67:20:B6:08:23:72:24:C0:EF:5D:7F:7A:03:9C:B7:65:56
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LaJwZyC2CCNyJMDvXX96A5y3ZVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.7.0/24
194.87.52.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:c6:dd:29:0c:28:98:46:98:d8:95:cb:46:b5:f9:fc:4c:4f:
d6:6d:1b:6d:37:18:8f:44:93:18:3c:af:13:68:38:b4:4f:a0:
96:be:79:cc:32:83:f4:7e:23:c8:ef:06:e1:46:ca:12:cd:73:
8d:4a:d7:c5:76:43:15:60:0f:4c:12:a8:72:13:76:e8:65:96:
f9:df:a1:6e:59:cb:22:8d:3d:1e:41:f4:31:c8:a4:bd:92:c7:
01:02:c8:0e:d2:a4:d0:c9:bb:2e:80:53:f3:2b:28:81:b2:9d:
17:c9:17:67:ac:c2:6d:dd:f2:11:20:bb:14:dc:62:b3:84:c9:
d9:58:ab:66:01:e1:af:25:cd:e1:a7:6e:03:fc:00:e0:90:39:
f2:92:05:ef:7e:f1:8d:71:27:0c:93:7a:62:fb:18:7b:22:e3:
ff:42:d0:5b:cd:3b:aa:9c:ce:bb:16:ae:0a:f0:fe:87:df:ab:
e5:68:b7:67:41:4c:c4:42:b7:3f:8b:ba:ec:80:18:6e:5f:2e:
0d:6b:b0:a8:56:7d:40:3e:22:22:4d:21:bc:9c:95:bc:6d:0a:
a4:67:f4:de:62:1b:b9:26:a8:5e:8c:34:2f:be:a9:ce:b5:59:
06:7b:28:9d:dc:f3:46:c3:23:5a:4f:ae:78:6e:5a:ac:6b:2a:
fd:dc:11:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 05:56:07 2024 by rpki-client on console-ams.rpki-client.org