Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/twVtyuWhnhQEAgT_hXaNowm3SbI.roa
File: twVtyuWhnhQEAgT_hXaNowm3SbI.roa (raw, json)
Hash identifier: Uoc8Cq+f8QR1XPnMhlaFo0emjZ2oddb7PV3I9Tr/y9I=
Subject key identifier: B7:05:6D:CA:E5:A1:9E:14:04:02:04:FF:85:76:8D:A3:09:B7:49:B2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189678D2E93775980950556534DC87238CE
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/twVtyuWhnhQEAgT_hXaNowm3SbI.roa
Signing time: Tue 18 Jul 2023 05:50:53 +0000
ROA not before: Tue 18 Jul 2023 05:50:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41798
IP address blocks: 193.124.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:67:8d:2e:93:77:59:80:95:05:56:53:4d:c8:72:38:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 18 05:50:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7056dcae5a19e14040204ff85768da309b749b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fb:42:17:25:ff:30:ca:f5:f9:87:5e:e8:f3:
67:ac:f7:d3:28:30:16:5b:51:6e:83:94:07:1e:39:
c8:63:75:40:97:86:0e:e8:f1:0c:9e:b6:75:f2:81:
53:7c:98:b9:da:62:de:07:6a:a0:c4:5d:d9:35:aa:
8f:5d:96:e9:25:da:e3:b5:52:a9:90:98:b1:69:7c:
7c:d2:58:b6:a7:02:3b:77:28:8d:69:31:46:f0:c6:
55:e7:58:11:5f:59:fe:0b:9c:e7:ef:24:f7:09:81:
31:85:f4:8b:e7:56:2b:28:4b:9c:e6:a1:db:7e:bd:
ba:b9:99:3b:e2:64:5d:01:83:72:8d:7c:92:fa:f4:
bd:e5:5f:22:b6:2c:c9:8e:d4:51:58:77:e5:ce:00:
c4:94:e8:be:a0:bc:42:cb:ca:6a:f6:8b:fd:e3:c7:
ee:c3:30:ec:b3:dc:2d:db:3e:06:c2:d6:91:36:ca:
a1:85:5a:34:48:2e:e1:b0:64:ae:ad:41:3a:a5:f2:
6e:56:9b:d3:d1:a3:46:2f:92:9d:0b:2b:fb:e6:5d:
e8:30:52:7c:9e:e7:65:98:79:24:bb:4a:ce:e8:71:
84:1d:ea:9d:98:73:f8:5a:e1:18:fa:a6:50:9f:a9:
ad:96:51:39:9b:fb:93:8d:fb:ad:d8:16:27:ae:40:
b3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:05:6D:CA:E5:A1:9E:14:04:02:04:FF:85:76:8D:A3:09:B7:49:B2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/twVtyuWhnhQEAgT_hXaNowm3SbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.93.0/24
Signature Algorithm: sha256WithRSAEncryption
44:ef:6e:2a:1b:9e:74:f0:52:63:ad:cf:4b:72:32:a5:45:8c:
15:69:d3:62:77:70:c6:3b:10:0c:42:b0:08:b5:a6:b7:26:8a:
63:68:d5:af:a3:c7:f3:c5:fb:0e:77:b2:f3:9c:3e:37:41:6d:
52:ba:55:ec:e2:ba:86:68:cf:96:53:ee:a0:e3:7c:5f:c0:43:
c3:41:b8:c1:ed:45:ee:a2:d8:05:21:01:ff:b7:65:e0:1e:cd:
57:4c:35:02:ab:30:44:d5:0b:85:cb:29:d1:ac:cb:a9:f7:e6:
59:c2:03:87:c3:2d:a1:a8:1c:c6:10:a9:38:50:2e:68:3d:e0:
d4:90:45:77:9f:a6:35:bb:1a:60:56:fe:79:f6:6b:2b:5e:68:
06:10:5d:fd:2b:90:67:23:4f:e5:67:16:32:a1:40:d1:61:ee:
cb:80:ff:15:1d:18:a5:7a:dd:81:db:61:e2:48:0d:c6:8f:f9:
96:35:fd:07:33:b5:3e:b7:04:73:de:d3:8f:40:64:28:6c:32:
56:22:95:e5:48:2b:b1:e2:34:0a:ab:de:15:31:18:d3:5e:fb:
3d:a6:82:b5:87:b8:32:58:03:58:d6:03:05:56:7e:2c:8d:5c:
1b:0c:2a:9a:8c:e1:c6:7e:e8:19:7e:a7:94:e7:ed:e8:19:c2:
d7:60:6a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:49 2024 by rpki-client on console-ams.rpki-client.org