Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ObKsKE6GhsOgIK7SXpqzpF4qxr4.roa
File: ObKsKE6GhsOgIK7SXpqzpF4qxr4.roa (raw, json)
Hash identifier: SHx7Mq6KfOFiuyHHSj+wp7Wg5G//kXP5ZxPNU/0ujjM=
Subject key identifier: 39:B2:AC:28:4E:86:86:C3:A0:20:AE:D2:5E:9A:B3:A4:5E:2A:C6:BE
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A76DDCE737CDDCE05203E7A372490
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ObKsKE6GhsOgIK7SXpqzpF4qxr4.roa
Signing time: Tue 02 Jan 2024 12:33:49 +0000
ROA not before: Tue 02 Jan 2024 12:33:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48207
IP address blocks: 193.124.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Aug 2024 15:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:76:dd:ce:73:7c:dd:ce:05:20:3e:7a:37:24:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39b2ac284e8686c3a020aed25e9ab3a45e2ac6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ef:85:2d:1d:c5:60:2c:8a:f0:89:02:f5:40:
3c:d2:23:a7:45:19:01:9f:6b:0a:4d:53:aa:2e:6d:
7c:53:09:5a:84:83:54:4a:ee:86:65:6f:9d:fa:8b:
59:1e:4b:32:4c:3d:9f:73:05:1b:47:05:91:87:44:
8a:2a:d6:47:3b:93:c6:19:ec:ba:21:01:d9:a8:54:
54:a6:b6:f8:3d:9a:ea:88:21:25:3c:66:49:fd:94:
2a:1f:46:32:20:d8:a5:04:91:19:0b:31:bc:b0:27:
0c:75:75:d8:12:4d:e5:f6:9e:b0:8e:1d:56:ee:03:
8f:72:50:90:d6:ad:e2:8f:ba:0d:eb:04:08:88:b9:
be:c7:0f:e4:10:04:37:a6:5c:ae:bb:c4:46:17:68:
af:47:87:dd:89:d6:d6:b4:c2:f8:84:b6:58:dd:a3:
40:ce:0d:a3:43:d9:f8:b0:06:5c:7d:d8:89:5c:89:
7e:06:b8:c6:8e:92:43:0a:c7:1c:87:ef:fe:1b:85:
22:b4:80:1a:11:7d:77:88:d1:a6:46:5e:29:18:be:
18:2e:93:9a:ef:42:86:67:69:09:03:40:62:ef:26:
45:8e:17:dd:82:7b:41:c2:18:48:d1:e7:5c:57:6c:
2f:fe:e1:e1:8f:55:21:2e:0c:8f:9e:72:df:14:8e:
9c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B2:AC:28:4E:86:86:C3:A0:20:AE:D2:5E:9A:B3:A4:5E:2A:C6:BE
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ObKsKE6GhsOgIK7SXpqzpF4qxr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.45.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:59:7a:14:7d:61:cb:2b:12:0d:9f:32:e7:e6:6b:21:15:36:
a7:e5:b9:b3:66:a2:5f:49:e0:5c:91:dd:a1:cd:97:94:43:0b:
63:0a:19:6b:1b:3a:02:b8:81:62:a7:e8:c6:e2:bb:f3:f7:f6:
3c:6f:d0:25:f4:b3:31:55:1a:fe:a7:db:10:44:c6:98:3f:a6:
ee:bc:51:a5:49:65:6c:27:42:33:5e:3a:86:44:79:82:e8:4d:
ff:c4:33:78:99:32:af:81:bb:eb:61:af:bd:ad:bb:da:d0:92:
d2:4e:90:b5:7c:04:26:56:a0:f7:73:f4:44:70:23:f0:ee:c5:
5b:9c:03:20:fb:b8:38:64:f4:3c:e3:ec:38:de:84:f9:4c:56:
80:cf:d7:5c:01:50:7d:66:0d:ac:d9:0d:17:19:7a:83:6e:48:
42:3f:76:64:f6:8b:5c:70:2b:d8:07:58:c4:68:49:c0:e5:08:
ee:d6:2a:9f:c2:f0:a2:ad:20:d7:4b:cb:8b:05:84:93:49:b6:
82:60:c9:7b:26:8b:7f:5d:17:ed:f0:0d:55:54:6f:13:04:3c:
a1:a5:a5:f0:b8:a8:8d:9f:62:d9:2f:0a:35:2a:5d:f2:60:c7:
01:76:c8:3c:08:1d:22:6b:3b:55:c2:d2:d6:7b:a8:27:a0:da:
5c:59:e2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 20:36:33 2024 by rpki-client on console-ams.rpki-client.org