Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dvTdkKuSBdjB8WoVf332bsfjtuE.roa
File: dvTdkKuSBdjB8WoVf332bsfjtuE.roa (raw, json)
Hash identifier: 63QWGLdv++uroAHbHqfgPcheV03mxFiirY/Igw0Taq4=
Subject key identifier: 76:F4:DD:90:AB:92:05:D8:C1:F1:6A:15:7F:7D:F6:6E:C7:E3:B6:E1
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0190924551FEA227813F39078D714E8EC57C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dvTdkKuSBdjB8WoVf332bsfjtuE.roa
Signing time: Mon 08 Jul 2024 12:15:34 +0000
ROA not before: Mon 08 Jul 2024 12:15:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200239
IP address blocks: 193.124.80.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
194.87.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Aug 2024 09:25:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:92:45:51:fe:a2:27:81:3f:39:07:8d:71:4e:8e:c5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 8 12:15:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76f4dd90ab9205d8c1f16a157f7df66ec7e3b6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c0:a1:7f:7f:14:c7:de:0f:86:1e:2b:44:32:
47:0c:ed:b0:1a:aa:1f:db:68:eb:20:4c:98:d8:74:
e2:01:cc:40:b5:ca:54:d7:0c:91:8a:53:c1:bc:f2:
d3:c9:7f:9e:30:7d:0b:c3:ac:81:15:7b:07:aa:c9:
39:46:f8:89:1c:8a:10:49:dc:c2:56:a0:8e:03:08:
11:c0:c1:02:ac:fe:a7:ca:66:8a:24:f6:ff:c3:9f:
6c:81:68:e7:89:cd:4a:c5:51:5d:f4:f3:cf:bd:8c:
b4:e9:77:5d:98:d8:81:f5:94:70:7a:65:92:d7:40:
89:b1:a0:27:8f:7d:aa:f0:45:61:70:16:e6:30:69:
21:22:62:a0:2d:a1:71:3e:e7:2d:06:26:8c:f0:e8:
90:2a:02:7e:1c:a2:7a:03:d3:4f:c1:48:5c:4e:c7:
44:ce:bd:67:2f:36:98:19:89:d6:ef:5a:39:37:b8:
58:f4:ab:0f:b1:65:26:65:40:84:47:aa:49:db:86:
54:de:94:d6:b1:cd:e3:6f:60:3f:06:e1:16:33:50:
fc:31:1e:9b:75:a3:21:3c:ac:5e:85:d5:f5:45:db:
b3:6c:65:5c:f9:e2:79:44:e2:92:d5:1c:ef:b8:11:
e7:91:7e:42:b1:df:7b:1a:d2:1a:4d:a7:fc:78:43:
d5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F4:DD:90:AB:92:05:D8:C1:F1:6A:15:7F:7D:F6:6E:C7:E3:B6:E1
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dvTdkKuSBdjB8WoVf332bsfjtuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.80.0/24
193.124.90.0/24
194.87.91.0/24
Signature Algorithm: sha256WithRSAEncryption
87:a3:89:52:04:ee:49:71:78:b5:12:0b:de:ce:a2:4a:cf:34:
80:6d:b8:b3:c4:6c:0d:ec:60:07:bf:87:52:23:6e:88:cd:b6:
93:dc:42:e8:82:4e:f9:bb:f7:1a:9b:55:3b:c2:26:49:d8:dc:
65:be:90:be:da:88:65:64:7f:9c:4d:bd:f6:d8:cb:3a:23:de:
c6:53:65:d0:9f:fd:c6:09:95:00:75:a1:52:7c:10:a2:0b:0c:
65:52:ec:69:b0:3d:ef:c6:d2:72:62:86:a0:b4:27:01:de:7b:
d7:9a:45:9a:d1:5e:9c:aa:7e:3c:63:0e:1c:04:b0:2b:3f:8b:
b7:83:bc:92:f6:1e:83:1e:ec:09:b8:76:cc:36:cd:5c:c1:26:
5f:37:67:d9:95:41:59:42:bf:e6:bc:8d:6a:1f:c9:66:ca:a4:
bb:3e:f3:c4:5d:b6:a2:bb:25:f6:f6:f1:85:d4:9b:a3:fd:cf:
42:5c:0d:5b:0d:ee:da:e2:2c:0a:a4:21:54:c8:5d:11:d2:0a:
94:b6:5d:48:38:17:df:e2:a6:55:b6:b5:0a:a8:bb:88:18:17:
c9:fc:10:c7:a4:fc:ec:8f:c8:1f:82:ef:ba:cb:df:d2:8f:ae:
89:8d:32:3f:a4:f0:f2:9c:de:01:42:6c:da:70:8e:12:87:4c:
b8:6a:9d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 13:17:21 2024 by rpki-client on console-ams.rpki-client.org