Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cosHLzibhsOfuEsIBlciCBCH1Xk.roa
File: cosHLzibhsOfuEsIBlciCBCH1Xk.roa (raw, json)
Hash identifier: RBpB1lfBgjOnFQDcRh5QK7s3YSsKESaT3pRlm/sC8gs=
Subject key identifier: 72:8B:07:2F:38:9B:86:C3:9F:B8:4B:08:06:57:22:08:10:87:D5:79
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189D8E51529BEAD7E6D00537CC85E06E8DD
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cosHLzibhsOfuEsIBlciCBCH1Xk.roa
Signing time: Wed 09 Aug 2023 06:03:59 +0000
ROA not before: Wed 09 Aug 2023 06:03:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398373
IP address blocks: 193.124.224.0/23 maxlen: 23
194.87.41.0/24 maxlen: 24
212.192.16.0/21 maxlen: 21
194.87.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Aug 2023 21:13:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d8:e5:15:29:be:ad:7e:6d:00:53:7c:c8:5e:06:e8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 9 06:03:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=728b072f389b86c39fb84b08065722081087d579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d9:5d:7d:2d:8e:ac:40:62:1d:0b:25:93:4e:
24:74:7b:a6:3a:ac:5e:6e:a5:98:98:df:14:8a:d8:
f7:cc:96:42:40:14:de:5e:f4:47:a4:b0:c6:8b:7d:
7e:ea:89:41:aa:6b:ce:9a:17:bf:48:3d:a7:67:98:
56:99:da:32:d0:6c:49:77:e4:d4:2d:62:0a:80:74:
cc:27:53:59:ef:df:a3:2c:fd:6a:86:c7:d2:fe:94:
74:f3:ca:90:db:ea:9f:f2:82:36:b4:47:39:5e:0f:
70:3b:1b:e2:eb:e6:3c:18:f6:de:55:d0:d4:d6:80:
a1:df:a0:cd:af:9c:40:39:98:5e:a8:e3:7c:52:c3:
f2:51:e8:2b:c3:cd:33:3d:ad:f0:89:15:5c:3e:47:
c4:ce:a5:99:ec:2e:83:a9:99:d6:26:73:01:b5:88:
e5:cf:8a:9b:c4:43:1b:ee:3b:7f:03:b7:64:06:70:
74:49:a0:0b:23:da:f6:f7:81:5f:25:b2:f4:b0:b5:
52:dc:a3:d0:d7:66:cf:d6:34:88:35:70:47:64:d8:
64:76:b3:b3:35:6e:a3:fd:46:01:43:6e:0e:a7:72:
24:f2:d3:ed:07:65:59:b9:05:ba:46:ff:50:f8:d8:
5e:e2:9b:cb:33:7c:df:02:55:07:c1:70:b5:95:8d:
20:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8B:07:2F:38:9B:86:C3:9F:B8:4B:08:06:57:22:08:10:87:D5:79
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cosHLzibhsOfuEsIBlciCBCH1Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.224.0/23
194.87.41.0/24
194.87.61.0/24
212.192.16.0/21
Signature Algorithm: sha256WithRSAEncryption
37:cd:22:47:a1:81:1c:66:38:f7:d6:04:e0:57:a2:c1:85:90:
49:6e:b8:50:d8:11:cb:0a:8d:91:73:3e:32:72:37:d1:21:64:
29:30:4b:a7:c5:26:6a:d0:db:b2:a6:a2:1a:8a:db:f9:45:ce:
03:56:5a:89:fc:53:c2:00:3b:1d:38:01:a1:92:a8:70:ae:08:
13:8e:8f:9f:e0:16:46:7a:27:17:67:2e:48:08:f0:32:16:92:
4b:25:2a:ff:f1:47:15:15:f6:e5:f3:94:f5:47:e8:54:4e:aa:
ba:16:7e:34:c1:b9:d7:c2:cb:6b:2b:b7:ee:1a:c1:c5:5c:47:
61:ee:8c:e2:88:3e:39:30:4b:4d:7c:e1:a3:c1:dd:7d:d6:e9:
6e:c4:fd:f1:57:a4:b7:a1:f3:db:52:e6:7a:6a:7f:62:e5:26:
11:3d:66:51:22:fb:cd:9b:9e:f8:d6:90:f8:12:30:73:76:ad:
b9:35:52:ed:be:9f:0e:e2:99:b0:d5:fa:50:e7:3f:2f:dc:ab:
4d:80:07:71:2c:5a:00:75:f3:a0:be:39:de:c4:93:1f:23:5d:
37:42:9a:9c:13:7d:68:8e:4e:ca:66:fe:a9:f7:81:b8:f3:05:
19:d1:b4:83:1c:30:41:4c:d7:91:8b:6e:48:09:c8:25:ba:34:
f5:11:18:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:22 2024 by rpki-client on console-fra.rpki-client.org