Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zjkBnMnOtkWK3eOW7zqNwmVfZbQ.roa
File: zjkBnMnOtkWK3eOW7zqNwmVfZbQ.roa (raw, json)
Hash identifier: GbPxraD+vxu9exL6Sh/gagdO4mRiDol9FxlDuSSy3BM=
Subject key identifier: CE:39:01:9C:C9:CE:B6:45:8A:DD:E3:96:EF:3A:8D:C2:65:5F:65:B4
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0190EDFE4E4402C5CFC34DE9FA97B3EA43B3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zjkBnMnOtkWK3eOW7zqNwmVfZbQ.roa
Signing time: Fri 26 Jul 2024 07:43:04 +0000
ROA not before: Fri 26 Jul 2024 07:43:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 139482
IP address blocks: 193.124.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Aug 2024 13:57:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ed:fe:4e:44:02:c5:cf:c3:4d:e9:fa:97:b3:ea:43:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 26 07:43:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce39019cc9ceb6458adde396ef3a8dc2655f65b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f3:bc:49:69:5b:2f:a5:ba:a6:e8:31:1b:76:
05:66:5a:b5:a8:fa:78:2b:6e:15:41:7e:f7:92:5b:
3d:ad:ba:ae:fa:64:68:22:79:20:ac:6c:94:7e:e1:
b2:da:2b:e2:e6:d3:f4:b3:b6:6d:70:3e:9e:88:e3:
cd:d2:51:12:bb:2f:6b:d5:a4:7e:40:15:49:0b:5a:
78:94:17:bd:37:8c:3a:6d:0f:23:04:be:99:ef:10:
e2:8c:19:e8:b3:68:b4:a2:19:61:1c:40:70:a1:65:
64:bb:10:c6:ea:ea:85:50:ad:f6:c5:9c:34:dc:29:
cb:4a:a0:6f:92:f5:1c:00:be:67:de:c7:92:ad:14:
d5:b4:f8:45:27:9a:d8:fd:60:c2:03:e5:12:14:1b:
07:99:6e:df:df:34:bb:ef:72:f7:4a:69:f9:94:a3:
96:16:00:7f:97:e3:e2:46:a2:c3:5e:aa:58:90:8a:
e9:c7:af:1d:c2:26:1a:6d:31:69:29:8b:8e:6a:e6:
d4:d0:09:5a:a5:52:bd:f6:12:4f:fd:39:2c:6e:b2:
2c:94:07:fd:c9:7c:8f:b4:e4:fa:53:77:af:15:e7:
43:c2:1a:e2:5b:fd:42:25:dc:b7:8f:26:1d:86:c8:
c4:ab:de:b4:b9:82:48:3c:7a:98:bc:a4:8c:ad:61:
b4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:39:01:9C:C9:CE:B6:45:8A:DD:E3:96:EF:3A:8D:C2:65:5F:65:B4
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zjkBnMnOtkWK3eOW7zqNwmVfZbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.47.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:8d:c7:89:d1:79:17:63:ce:ef:f1:bc:a0:c2:4c:90:1a:a9:
68:21:9c:f8:94:ed:c3:c4:ba:dd:94:ae:cf:f8:6b:8e:3d:d8:
61:83:fa:82:0c:91:de:78:c6:3e:b0:a5:d3:ed:07:1a:43:9b:
7e:b1:78:bf:9b:3a:8d:97:e3:3c:fd:b4:a9:94:06:88:86:24:
38:8e:18:bf:97:e0:6e:15:49:30:5b:9b:be:87:e1:78:76:01:
e9:0e:00:95:db:31:c6:43:77:18:65:27:43:9e:3e:d3:8c:c4:
df:d6:94:8d:70:57:05:0d:54:89:bb:b4:22:9c:7f:f2:23:a9:
18:fa:5f:f9:eb:35:20:08:10:ff:bb:31:79:0f:4e:b2:75:79:
77:fd:27:d6:4e:2b:b6:9d:38:c0:bd:56:6e:ba:d0:cf:6d:78:
3f:d2:5b:96:00:7a:9b:b9:6f:5b:7b:79:3f:34:87:87:80:4a:
04:a9:83:1f:cd:83:07:ae:38:d3:80:da:68:5a:3f:08:bc:41:
ab:23:78:23:a8:78:28:47:61:73:88:0e:fe:e8:4d:bd:f6:b3:
6e:47:dc:c3:df:a4:3d:1d:5e:6e:3f:3a:53:32:17:63:0f:8a:
89:92:f6:d7:67:11:10:51:c4:99:69:01:81:18:cc:eb:96:c0:
22:fd:1d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 17:13:54 2024 by rpki-client on console-fra.rpki-client.org