Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5qyxn8WXoFtMiyjrStH5RREA390.roa
File: 5qyxn8WXoFtMiyjrStH5RREA390.roa (raw, json)
Hash identifier: Ti5QoDcLVL7tC1SEIEpPdPxqYFsjsrnVCIRxQ+fqaEw=
Subject key identifier: E6:AC:B1:9F:C5:97:A0:5B:4C:8B:28:EB:4A:D1:F9:45:11:00:DF:DD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019084830AF7D4579A33D8267E98F711E23A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5qyxn8WXoFtMiyjrStH5RREA390.roa
Signing time: Fri 05 Jul 2024 20:08:18 +0000
ROA not before: Fri 05 Jul 2024 20:08:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205220
IP address blocks: 193.25.218.0/24 maxlen: 24
194.180.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Oct 2024 16:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:84:83:0a:f7:d4:57:9a:33:d8:26:7e:98:f7:11:e2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 5 20:08:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6acb19fc597a05b4c8b28eb4ad1f9451100dfdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:e5:f3:af:49:26:ad:eb:ec:fe:4b:4e:7f:
eb:a1:6d:2c:3b:37:26:ca:f1:39:bf:1b:32:a5:6f:
3a:6b:6b:16:fc:c2:0d:1e:07:a8:5c:28:6e:7d:c5:
89:64:ac:12:5f:b2:c6:61:8b:c9:47:92:f7:e3:39:
08:79:cb:d9:32:da:e6:0c:83:56:73:6d:38:23:80:
fd:bc:44:63:67:cf:a5:0e:a3:c8:9f:c1:7f:6a:6d:
ee:27:0c:c4:90:b9:d7:5e:e7:37:a9:b3:fb:55:a1:
99:e8:45:f2:6c:74:6e:99:e9:7f:1c:1f:24:c2:68:
a9:e6:f2:f3:8f:d8:60:74:3c:bf:40:59:fe:c5:f9:
e5:66:d6:8b:4e:5a:a0:7e:78:cc:de:4d:6a:26:f9:
37:55:a7:de:7a:b5:e0:20:99:4a:ae:1d:eb:e3:be:
ce:87:49:43:40:28:13:f2:19:a5:4b:52:51:e2:39:
56:df:48:de:8a:e7:da:85:3a:74:3a:71:a7:24:46:
49:d6:2e:cd:23:2e:c5:6b:bf:6c:09:3b:7f:b8:be:
c5:60:60:23:74:b4:1d:4a:a8:78:c4:03:70:83:37:
92:09:d5:5e:93:53:5b:1a:56:81:d0:bd:34:ed:d0:
01:25:18:2c:af:78:92:35:44:d3:23:5d:ed:99:a2:
77:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AC:B1:9F:C5:97:A0:5B:4C:8B:28:EB:4A:D1:F9:45:11:00:DF:DD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5qyxn8WXoFtMiyjrStH5RREA390.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.218.0/24
194.180.37.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:77:bc:61:40:ee:13:03:aa:27:11:8e:d1:17:aa:bc:ae:3f:
62:9f:e0:10:67:81:82:f6:91:ff:68:01:7c:d4:e5:05:3c:0a:
ea:33:36:cf:15:30:c2:cf:8d:13:e5:cf:aa:35:1c:d4:74:20:
3f:7a:d4:c5:f7:6a:a5:16:d6:d1:bf:79:ca:83:27:d1:7e:68:
d4:9f:9c:e5:cb:b6:42:7a:50:ea:1b:9e:49:af:8f:ed:56:27:
18:8a:d1:e4:5a:0f:7a:15:cc:5c:6d:84:4a:3a:70:26:d7:05:
82:b5:db:0a:fe:73:1d:c3:b3:14:85:a9:ff:9a:28:31:cc:f6:
d5:78:31:ef:b3:2c:a1:0e:ed:a9:65:42:83:37:d9:e0:c8:02:
a0:dc:61:62:02:d9:af:06:ec:b8:44:61:60:ad:50:f7:da:b2:
69:05:69:d4:6e:dd:6c:c5:6d:ed:14:dd:30:02:c9:a2:90:d8:
ba:88:66:fd:c0:8d:59:31:57:d0:86:ac:dd:ac:dd:e2:0e:3d:
13:06:66:65:01:b2:ce:4b:39:83:0e:af:e7:b9:7b:9e:7e:9c:
20:2c:59:be:1d:b2:75:d7:61:6f:8e:ba:0d:fd:0c:ef:b9:07:
37:88:26:fc:65:b6:36:ce:82:05:e1:79:f2:a5:0a:4e:d0:64:
fe:5f:87:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 20:15:43 2024 by rpki-client on console-fra.rpki-client.org