Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/5ImhHe214hcMCtFqkDLmFH4dVbU.roa
File: 5ImhHe214hcMCtFqkDLmFH4dVbU.roa (raw, json)
Hash identifier: ebCYJ2y4dGjNK3c+aHR/8Wccy5KgVA9aaLq/3BjHrCw=
Subject key identifier: E4:89:A1:1D:ED:B5:E2:17:0C:0A:D1:6A:90:32:E6:14:7E:1D:55:B5
Certificate issuer: /CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Certificate serial: 018D897754792A5ECDB32089E66ABE5E4AAB
Authority key identifier: C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/5ImhHe214hcMCtFqkDLmFH4dVbU.roa
Signing time: Thu 08 Feb 2024 16:05:15 +0000
ROA not before: Thu 08 Feb 2024 16:05:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207858
IP address blocks: 193.29.4.0/24 maxlen: 24
193.29.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 16:11:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:89:77:54:79:2a:5e:cd:b3:20:89:e6:6a:be:5e:4a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Validity
Not Before: Feb 8 16:05:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e489a11dedb5e2170c0ad16a9032e6147e1d55b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:42:0a:76:b3:21:23:10:ea:83:d0:3e:3a:77:
f3:35:e4:3a:bc:75:5f:ef:c4:2a:7d:9b:03:0f:a0:
a1:b6:20:7a:c0:c0:ae:bd:04:96:d0:14:39:cd:bf:
c6:d4:85:56:c1:fa:16:6b:13:92:cf:ec:17:d2:4a:
0c:b0:1f:1c:be:49:d6:8a:12:19:76:af:61:12:de:
78:ea:4f:40:a8:bb:96:a2:5f:55:ed:96:0d:b7:19:
83:d2:f8:7f:44:8a:31:aa:34:3f:c0:61:ee:91:8d:
bf:e7:db:19:af:76:c5:0c:13:25:dc:71:5a:9b:3c:
20:31:ca:18:8a:ec:d4:96:99:2e:39:41:4d:d7:29:
63:e1:63:63:96:34:cb:2f:d7:04:c7:86:16:8b:86:
af:86:97:ca:8e:30:2c:fa:72:5b:73:aa:61:9c:ab:
c3:ed:80:e8:f0:be:30:f6:99:d7:06:88:c0:18:62:
c0:70:1c:34:fe:6d:39:d9:66:ab:1c:d9:ce:df:d2:
b8:32:c1:b6:f7:c7:08:2e:2b:4c:e8:d1:da:45:be:
48:10:6b:f3:24:64:07:a3:51:dc:17:79:bd:d8:18:
7c:be:d0:1b:ea:53:4f:7c:f1:17:33:7c:e4:c9:47:
b5:b8:a3:7e:64:df:d5:4c:32:a5:30:2a:97:82:11:
bc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:89:A1:1D:ED:B5:E2:17:0C:0A:D1:6A:90:32:E6:14:7E:1D:55:B5
X509v3 Authority Key Identifier:
keyid:C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/5ImhHe214hcMCtFqkDLmFH4dVbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.4.0/24
193.29.8.0/24
Signature Algorithm: sha256WithRSAEncryption
21:3d:cc:8c:be:cc:1c:4c:df:75:80:f4:83:6d:36:f4:27:ad:
f6:b5:86:c6:30:a6:f6:9a:cd:d3:07:45:bf:60:f2:c3:84:8c:
93:e1:ee:ee:b7:10:b0:e3:23:f8:1a:93:fd:24:ca:8f:e8:5c:
0c:f4:82:c8:9e:02:55:16:96:c7:c3:23:61:c4:4e:95:f6:1a:
b8:94:5a:e8:20:22:66:2a:33:47:71:e4:80:21:32:8e:a4:6e:
ef:b1:57:fd:c6:9d:85:a9:a3:f7:76:b2:c7:7f:56:34:11:de:
07:51:ec:0d:bc:2f:92:27:9c:fc:9a:22:57:b0:7c:ac:a1:29:
79:7a:8a:78:0a:24:90:d8:c6:c2:1b:ae:b9:fd:7c:5f:ac:e3:
7a:52:6f:c5:eb:8a:3a:47:99:ef:d4:50:94:86:8f:9b:ed:4b:
ac:e5:ba:ff:e8:1c:26:a4:76:bc:ac:ce:66:4e:6b:a5:32:da:
54:24:6f:7e:e6:a0:ed:06:a3:aa:cd:7f:8d:f2:07:64:8e:a7:
d6:65:c3:35:a3:cd:1e:37:b5:ce:1d:50:23:ee:0f:d9:3a:90:
ad:5e:53:8c:84:95:8c:3e:f6:30:eb:41:7b:b2:7b:4d:ca:cf:
14:9f:48:3e:83:fe:9e:c8:fd:88:3e:d9:3b:9d:e4:10:bc:7f:
fa:45:f3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:52 2024 by rpki-client on console-fra.rpki-client.org