Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/T8idbnMbSi4PFrd-O0y8PVBE8yk.roa
File: T8idbnMbSi4PFrd-O0y8PVBE8yk.roa (raw, json)
Hash identifier: ap5XHHjmFe/0Qir25dwmYDinIFfpWRrebKFoNsNNpHo=
Subject key identifier: 4F:C8:9D:6E:73:1B:4A:2E:0F:16:B7:7E:3B:4C:BC:3D:50:44:F3:29
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018AF63811B04621D8D452E6218B845A4F18
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/T8idbnMbSi4PFrd-O0y8PVBE8yk.roa
Signing time: Tue 03 Oct 2023 15:46:24 +0000
ROA not before: Tue 03 Oct 2023 15:46:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31863
IP address blocks: 193.124.36.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Nov 2023 13:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f6:38:11:b0:46:21:d8:d4:52:e6:21:8b:84:5a:4f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 3 15:46:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fc89d6e731b4a2e0f16b77e3b4cbc3d5044f329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:28:fe:99:4e:46:3c:e0:f5:17:9a:e9:c0:b6:
c7:08:92:11:c0:88:57:67:89:f4:8f:32:75:86:f8:
fc:20:85:1c:65:68:13:58:f3:d3:d2:a8:f8:a2:3f:
a4:06:db:24:49:6d:b1:38:97:11:5a:ed:18:38:82:
71:70:50:4c:e4:b3:7d:de:f8:ea:7a:3c:a3:f9:6c:
51:d0:45:5b:5e:81:f1:60:31:d0:07:2f:09:ca:6e:
ce:18:c0:01:2f:8e:05:2c:60:92:e9:6b:86:34:8c:
fd:b5:09:b6:f3:d2:fb:a7:f0:93:d3:49:20:09:3f:
07:49:31:76:bb:09:0e:b1:80:7d:74:c2:23:d9:5d:
a9:6f:c2:8f:72:1f:b1:38:08:b3:60:7f:1a:cb:da:
61:aa:31:d9:a6:b7:1b:fb:9a:30:22:38:90:5c:7f:
c6:35:27:8d:77:1c:87:ca:7a:1a:76:b2:a2:32:d0:
1c:a1:d0:90:7a:4c:80:87:42:8e:3a:56:ed:47:38:
04:79:10:a9:79:89:b3:a1:98:d2:f1:ee:ec:96:04:
56:ed:34:73:18:a7:2d:26:d0:88:90:04:8f:bd:3f:
f5:c7:5e:19:11:5b:29:79:79:6c:d3:d9:1f:8b:be:
11:22:7f:2f:a8:d2:a6:49:de:a8:f7:2f:9b:54:5a:
4b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C8:9D:6E:73:1B:4A:2E:0F:16:B7:7E:3B:4C:BC:3D:50:44:F3:29
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/T8idbnMbSi4PFrd-O0y8PVBE8yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.36.0/24
195.58.36.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:f8:db:d8:52:d6:78:60:25:de:cb:42:26:b2:4c:99:9f:1f:
70:8c:14:71:41:9f:c1:14:47:5a:dc:1e:3d:4e:7c:97:26:16:
23:b4:cc:3a:bc:17:56:a8:b5:1d:02:7c:ff:f2:a8:19:13:2c:
6d:02:74:1b:06:14:4f:bd:f4:bc:ee:47:3c:58:89:45:31:d0:
e7:95:a2:5c:c9:b6:17:48:8e:3b:db:01:94:7b:b6:39:4f:11:
49:cc:17:6c:8c:fd:6d:12:44:f1:54:f9:5c:5e:f6:a0:74:e5:
99:18:d9:8f:90:3e:14:09:35:76:6d:a8:f5:90:6f:e8:88:23:
fc:07:c6:31:8b:5d:c2:22:ea:02:0f:7a:5a:32:b6:f6:84:8c:
27:ed:74:c0:30:8f:a4:8e:fc:23:ea:18:89:32:69:10:97:9f:
22:be:be:4c:18:88:d4:f5:ee:19:5f:c9:95:35:33:ba:ab:b1:
62:0a:d2:b2:ba:88:81:f5:c7:f9:58:b0:bb:44:be:af:1d:ea:
92:ec:d4:c6:5a:51:af:82:98:71:09:4c:b9:c4:04:0d:59:59:
0f:02:dd:3a:7d:80:a5:92:5e:5f:75:c1:01:f8:7f:b5:70:9d:
07:a5:93:e5:dd:d4:28:38:ca:0f:2d:12:62:59:d2:89:10:2c:
7f:5c:4e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:17 2024 by rpki-client on console-fra.rpki-client.org