Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dkEGLwQt2aYYZHgNlYil_K8ktB4.roa
File: dkEGLwQt2aYYZHgNlYil_K8ktB4.roa (raw, json)
Hash identifier: 2Itpzqn8itquGd+IRi92W42yVmMPD/uYXhPUT2dqm/c=
Subject key identifier: 76:41:06:2F:04:2D:D9:A6:18:64:78:0D:95:88:A5:FC:AF:24:B4:1E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0191B22916A929EC38DE1FE0EA7643BACE5A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dkEGLwQt2aYYZHgNlYil_K8ktB4.roa
Signing time: Mon 02 Sep 2024 09:55:22 +0000
ROA not before: Mon 02 Sep 2024 09:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50738
IP address blocks: 193.124.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 16:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:29:16:a9:29:ec:38:de:1f:e0:ea:76:43:ba:ce:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 2 09:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7641062f042dd9a61864780d9588a5fcaf24b41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:54:34:f3:e8:5b:2a:12:76:17:e1:78:f9:
70:ce:51:c7:6f:39:71:f5:d2:ad:af:e6:f7:dc:16:
d3:43:19:ea:8d:e0:3c:a6:4d:41:3d:c3:8a:ba:ec:
38:d1:4c:fb:c9:3e:75:7b:3b:20:31:12:0d:e8:01:
77:72:74:e5:fc:ef:19:3e:98:dd:c5:a1:36:75:7b:
08:10:95:1b:d9:22:14:6a:03:7f:63:69:69:33:ff:
70:53:dc:1f:e7:a1:78:dc:4e:7a:e2:e9:bb:84:00:
97:16:ba:d5:d4:46:5f:8b:13:fb:a0:9c:d7:0a:29:
47:bd:1b:bc:ad:ab:50:da:2d:b6:27:bb:ed:e3:55:
0b:73:91:79:eb:62:8e:9b:f3:6b:cc:5c:0e:ba:95:
4e:13:17:f1:93:3f:d0:f6:4a:3f:68:14:46:66:ed:
29:8b:ba:d6:0d:97:89:b2:cd:8e:64:98:05:a9:fd:
ea:00:e5:3a:04:10:e6:8f:5c:8f:b0:ae:45:0f:38:
60:e0:97:32:d4:67:eb:1b:70:ee:de:c0:30:10:88:
4e:9a:a9:cc:21:de:15:6e:a4:d4:04:fa:aa:ef:1a:
88:15:b2:40:2b:9f:66:13:6d:63:b3:4b:a7:5c:a3:
2d:c0:18:1a:8a:16:bc:91:60:41:ef:f9:59:a4:63:
10:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:41:06:2F:04:2D:D9:A6:18:64:78:0D:95:88:A5:FC:AF:24:B4:1E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dkEGLwQt2aYYZHgNlYil_K8ktB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.44.0/24
Signature Algorithm: sha256WithRSAEncryption
18:13:1f:32:27:8c:36:6b:6e:e2:c9:69:c9:21:d1:16:dd:11:
ff:5a:a4:2b:a0:b0:5d:06:0f:3c:d9:73:77:93:35:d1:5d:0d:
ed:59:29:b7:2b:fa:2d:34:9d:d1:a1:59:d9:20:fd:e8:2a:c6:
dc:77:62:1c:85:f5:50:e1:dd:ab:d0:6e:b5:b7:53:4e:63:51:
19:ad:b8:b0:2d:70:c3:0e:b5:13:a8:67:59:20:5b:f6:53:96:
2b:68:24:04:1e:50:85:bf:1a:5a:b6:31:a9:3c:32:7a:bf:dc:
7e:d5:e5:f0:60:c5:2f:d0:68:c1:38:fd:0e:c7:a2:e4:52:4a:
02:45:f8:48:1e:77:d2:f0:75:6d:c8:30:e8:7e:7b:31:94:a5:
ad:91:ab:54:8a:77:56:47:87:58:2a:43:89:35:2a:fb:10:14:
52:4f:e0:30:da:43:04:22:af:7c:02:db:e7:52:88:ff:09:3a:
d9:24:39:eb:3f:ce:26:8d:79:95:c1:da:a4:c9:7b:d7:e6:9a:
01:7d:b8:14:ab:93:4c:36:cf:79:ba:b3:7b:6b:6e:49:bc:47:
c1:9c:d7:02:da:db:c9:a0:65:82:59:be:43:73:c0:f7:14:12:
f2:e1:7f:75:ec:90:2e:f2:c6:46:99:aa:48:24:0b:8c:4b:c6:
9c:fb:4a:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGyKRapKew43h/g6nZDus5aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwOTAyMDk1NTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjQxMDYyZjA0MmRkOWE2MTg2NDc4MGQ5NTg4YTVmY2FmMjRiNDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzlUNPPoWyoSdhfhePlwzlHHbzlx
9dKtr+b33BbTQxnqjeA8pk1BPcOKuuw40Uz7yT51ezsgMRIN6AF3cnTl/O8ZPpjd
xaE2dXsIEJUb2SIUagN/Y2lpM/9wU9wf56F43E564um7hACXFrrV1EZfixP7oJzX
CilHvRu8ratQ2i22J7vt41ULc5F562KOm/NrzFwOupVOExfxkz/Q9ko/aBRGZu0p
i7rWDZeJss2OZJgFqf3qAOU6BBDmj1yPsK5FDzhg4Jcy1GfrG3Du3sAwEIhOmqnM
Id4VbqTUBPqq7xqIFbJAK59mE21js0unXKMtwBgaiha8kWBB7/lZpGMQRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHZBBi8ELdmmGGR4DZWIpfyvJLQeMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvZGtFR0x3UXQyYVlZWkhnTmxZaWxfSzhrdEI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwXwsMA0G
CSqGSIb3DQEBCwUAA4IBAQAYEx8yJ4w2a27iyWnJIdEW3RH/WqQroLBdBg882XN3
kzXRXQ3tWSm3K/otNJ3RoVnZIP3oKsbcd2IchfVQ4d2r0G61t1NOY1EZrbiwLXDD
DrUTqGdZIFv2U5YraCQEHlCFvxpatjGpPDJ6v9x+1eXwYMUv0GjBOP0Ox6LkUkoC
RfhIHnfS8HVtyDDofnsxlKWtkatUindWR4dYKkOJNSr7EBRST+Aw2kMEIq98Atvn
Uoj/CTrZJDnrP84mjXmVwdqkyXvX5poBfbgUq5NMNs95urN7a25JvEfBnNcC2tvJ
oGWCWb5Dc8D3FBLy4X917JAu8sZGmapIJAuMS8ac+0qU
-----END CERTIFICATE-----
Generated at Mon Sep 2 21:05:44 2024 by rpki-client on console-ams.rpki-client.org