Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/x5GDum-wtT9YYeWXnT_94nHeN80.roa
File: x5GDum-wtT9YYeWXnT_94nHeN80.roa (raw, json)
Hash identifier: ELtprcuZaHjhr0sOyGEpHjb4PgBqrosQ1i9zMn98ZJ8=
Subject key identifier: C7:91:83:BA:6F:B0:B5:3F:58:61:E5:97:9D:3F:FD:E2:71:DE:37:CD
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A73F0239B99871A590B644C185842
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/x5GDum-wtT9YYeWXnT_94nHeN80.roa
Signing time: Tue 02 Jan 2024 12:33:48 +0000
ROA not before: Tue 02 Jan 2024 12:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41798
IP address blocks: 193.124.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 16:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:73:f0:23:9b:99:87:1a:59:0b:64:4c:18:58:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c79183ba6fb0b53f5861e5979d3ffde271de37cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:29:f7:0b:7c:d8:d8:c6:56:e9:eb:30:f8:
cc:08:f2:d2:c0:9a:46:ce:30:6f:23:a9:32:6b:6c:
ef:eb:4c:7e:40:b0:7e:27:9f:9a:67:94:5e:92:31:
54:e4:ee:70:a8:cc:6c:74:57:56:2d:80:f2:e1:1a:
ca:c2:d2:bc:11:90:09:ab:17:da:e2:70:32:dd:e8:
16:8c:52:06:bf:aa:88:d3:57:07:4b:d9:f4:08:a4:
63:c4:c2:6f:8a:40:3b:26:91:41:44:73:5b:83:8d:
a0:f1:bd:fe:b1:6e:0b:35:db:b3:16:ab:ce:b4:3d:
7d:60:c8:a7:8b:bf:de:3b:f2:9f:f6:ab:8c:af:5d:
b9:0e:39:8a:f8:83:3e:12:7e:be:b3:86:97:be:aa:
aa:31:3a:6b:b9:dd:5d:8d:65:6f:c1:ef:b3:a3:c3:
d8:0a:fc:a5:51:54:b3:cd:2d:ce:cb:58:93:2e:95:
d3:6b:1e:9d:46:ed:76:60:61:0f:f3:80:a2:f1:c4:
5f:ff:4b:59:99:d4:ce:79:91:d7:d6:cb:dc:dd:b3:
99:e5:da:b1:28:45:d6:3b:db:b5:78:0d:a8:84:91:
c8:c6:e5:c5:85:ba:a5:13:f4:16:9a:8a:47:47:fb:
63:1f:47:1b:f1:b8:1a:47:b5:b6:4b:24:4b:f4:83:
1f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:91:83:BA:6F:B0:B5:3F:58:61:E5:97:9D:3F:FD:E2:71:DE:37:CD
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/x5GDum-wtT9YYeWXnT_94nHeN80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.93.0/24
Signature Algorithm: sha256WithRSAEncryption
99:c8:0b:36:7f:e2:8b:90:8b:cb:21:4b:1d:9a:39:56:88:23:
18:6a:bf:22:65:b3:e7:5f:8e:67:05:8b:e6:3e:0d:5c:90:80:
45:10:ae:2a:a5:72:85:a2:21:03:c8:47:81:6d:28:eb:bd:22:
db:21:10:df:62:9d:ee:10:ce:2d:df:77:5a:d9:a3:04:f4:77:
bd:91:de:70:f0:a2:67:16:35:ce:f6:d8:46:15:75:01:9d:4d:
04:b6:04:cf:ec:ed:cc:8c:87:e3:02:af:a9:e4:13:dd:c2:68:
17:98:60:33:af:3d:a1:3f:58:20:ed:1a:67:2a:56:f6:fa:bc:
af:7c:c9:1f:12:80:cc:ca:6c:70:78:20:04:dd:6b:51:f6:d2:
43:06:e0:8f:8a:ae:57:38:55:32:c5:3c:f9:a8:cb:68:64:36:
31:27:21:cd:40:9f:92:29:5f:aa:3f:47:28:09:49:a4:81:90:
d0:92:9b:75:37:41:24:2b:72:a7:bc:89:4c:c8:71:29:a6:3c:
cf:9f:5e:90:ff:38:8c:06:c8:71:1d:00:14:1b:13:91:ef:5f:
78:89:d7:54:24:cc:74:dc:29:f5:f7:20:38:d6:63:4c:57:6f:
87:b3:54:a7:b1:71:ad:e2:4e:89:4d:0f:51:6e:a5:05:80:9a:
f4:c4:34:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 20:24:00 2024 by rpki-client on console-fra.rpki-client.org