Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/n_ELYWW-KFugqqHRu663CG5VAAM.roa
File: n_ELYWW-KFugqqHRu663CG5VAAM.roa (raw, json)
Hash identifier: THE2Dh8ijXRtRKG/Ij9xkU0M3ShhoQbzAYS6h9yYIFE=
Subject key identifier: 9F:F1:0B:61:65:BE:28:5B:A0:AA:A1:D1:BB:AE:B7:08:6E:55:00:03
Certificate issuer: /CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Certificate serial: 018572DECDD1144611284E8109A0069C0455
Authority key identifier: 77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/n_ELYWW-KFugqqHRu663CG5VAAM.roa
Signing time: Mon 02 Jan 2023 14:24:42 +0000
ROA not before: Mon 02 Jan 2023 14:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 193.138.90.0/24 maxlen: 24
193.110.146.0/24 maxlen: 24
194.165.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:de:cd:d1:14:46:11:28:4e:81:09:a0:06:9c:04:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Validity
Not Before: Jan 2 14:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ff10b6165be285ba0aaa1d1bbaeb7086e550003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:dc:2b:f6:9e:ee:bc:f8:82:85:40:1c:48:
54:d5:82:13:47:58:b6:9f:cd:61:69:b1:2e:98:ca:
ba:f2:26:f8:00:c7:9a:1d:5f:b2:93:2d:7d:7c:c2:
47:ef:d9:0a:a3:67:6e:3f:1a:e3:bd:9d:d6:21:64:
b1:de:4c:8a:78:b2:4d:01:c2:64:50:5b:4b:4d:a6:
98:54:c6:84:72:9a:e8:55:f0:60:e9:ca:c4:bc:84:
d3:dd:c0:1b:61:fd:95:2b:c5:c0:d3:db:03:18:91:
30:11:6d:ca:80:aa:83:26:6d:fd:20:d8:2f:b9:5b:
c8:e9:cd:63:f6:ee:1f:ed:af:89:9b:29:d3:c2:9a:
06:87:06:8a:11:95:dd:e2:17:76:cb:aa:b0:bd:b6:
01:37:69:3a:34:ad:47:90:85:3c:34:83:75:e6:3f:
51:d7:f6:52:e3:2e:71:2c:f4:fa:b2:ec:82:16:fe:
20:96:77:89:52:2d:bc:7b:7f:79:61:2c:da:1b:75:
66:00:1a:72:1f:0b:ef:de:0b:ea:bb:46:85:33:15:
ba:bf:64:64:cb:b5:79:dd:3b:e7:9e:9a:d9:4c:6a:
89:9c:2d:ec:49:6f:cd:9d:a5:1c:0f:44:a9:29:33:
4c:29:e0:05:96:a2:41:ea:93:c6:48:8d:b2:40:80:
02:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F1:0B:61:65:BE:28:5B:A0:AA:A1:D1:BB:AE:B7:08:6E:55:00:03
X509v3 Authority Key Identifier:
keyid:77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/n_ELYWW-KFugqqHRu663CG5VAAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.146.0/24
193.138.90.0/24
194.165.43.0/24
Signature Algorithm: sha256WithRSAEncryption
40:62:ed:21:32:be:21:2a:0e:22:6a:11:d5:d2:e9:19:0c:77:
17:0f:d8:d4:d9:48:4f:ee:d9:64:ad:07:d5:ed:13:32:52:48:
1f:4f:31:ae:b5:57:f6:e4:a5:ea:a7:e4:83:f2:12:30:b5:fa:
33:ec:df:73:3c:18:c4:5c:1f:25:fa:52:df:53:67:2f:fc:e4:
1d:a6:6d:3c:57:f5:b8:66:30:ec:9e:69:1a:01:2a:25:76:ac:
51:e0:47:be:79:3c:ab:8c:5c:de:ff:10:60:14:58:6e:6a:50:
e1:90:c5:97:9d:b0:2c:c5:d1:a3:e2:37:02:34:c2:fb:19:2a:
2e:79:f5:24:05:22:4b:4c:e3:f7:7a:9d:f9:93:8b:08:0b:48:
5d:3e:da:db:48:ec:11:4a:30:87:32:86:57:26:92:b1:1f:e7:
c1:f4:ca:3a:90:da:f8:84:b0:0b:82:04:2e:fb:0f:a4:50:9b:
43:72:cd:7d:9b:e1:21:a2:bd:e3:ad:e0:ae:0f:a0:ad:cd:83:
98:34:37:bf:da:8b:38:3d:0c:02:cd:10:78:7b:d2:63:cc:31:
e2:fe:48:2b:68:d2:5b:e1:01:58:8a:c6:33:82:61:bc:ed:e1:
8f:cc:42:32:cc:db:26:79:3f:78:a9:88:00:05:bd:64:d0:3e:
01:a2:bd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:03 2024 by rpki-client on console-ams.rpki-client.org