Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/xGtnk1BfVejyBgWGK--LfgN8rc8.roa
File: xGtnk1BfVejyBgWGK--LfgN8rc8.roa (raw, json)
Hash identifier: Jr7ZQzRQVm8EYhHbz2LcRcAOpESG2Ky5CKHoDHg+yvo=
Subject key identifier: C4:6B:67:93:50:5F:55:E8:F2:06:05:86:2B:EF:8B:7E:03:7C:AD:CF
Certificate issuer: /CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Certificate serial: 01910FA2AC44A9DD04C5751111116782AFFC
Authority key identifier: D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/xGtnk1BfVejyBgWGK--LfgN8rc8.roa
Signing time: Thu 01 Aug 2024 20:30:04 +0000
ROA not before: Thu 01 Aug 2024 20:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215176
IP address blocks: 193.200.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Sep 2024 04:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0f:a2:ac:44:a9:dd:04:c5:75:11:11:11:67:82:af:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Validity
Not Before: Aug 1 20:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c46b6793505f55e8f20605862bef8b7e037cadcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:69:91:aa:3c:a2:fb:eb:74:de:72:5a:d3:84:
17:a4:20:0c:b4:63:6d:29:ea:30:53:28:71:01:26:
05:22:0b:b3:75:a1:3b:d4:46:f9:9c:38:ad:06:06:
02:ea:b6:24:f6:27:a2:73:c8:d1:8a:8c:23:4d:85:
6c:61:39:6b:0a:dd:af:e1:b3:b5:0e:3e:02:3c:5f:
3e:96:61:70:97:2b:75:5a:94:3d:93:05:de:47:41:
83:af:0c:76:46:40:79:5c:30:04:6e:f0:73:a9:6c:
8c:e5:42:08:a2:3d:09:f8:0f:e0:88:72:cd:e8:f5:
44:db:c7:4e:45:00:f7:93:fc:84:8f:00:d3:b6:d0:
b7:7c:1b:3c:7f:7c:65:8f:80:a7:d0:68:ee:cf:9f:
57:19:9a:8f:50:f9:24:f0:ae:5b:20:96:72:49:7b:
f0:97:a5:46:97:af:0f:6f:f3:49:08:68:97:8a:49:
67:52:5a:1d:2a:27:55:76:ab:08:46:70:39:56:ad:
f3:1c:58:ed:5f:49:2a:ba:9e:6a:27:28:6a:5c:19:
57:72:d0:8d:9f:7e:61:b6:2e:59:e5:6d:09:47:52:
18:3a:4d:c4:2a:dc:d6:5b:41:23:82:b9:c1:23:95:
1c:68:05:6c:42:2e:9a:cb:5d:79:e1:7b:06:2f:46:
3d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6B:67:93:50:5F:55:E8:F2:06:05:86:2B:EF:8B:7E:03:7C:AD:CF
X509v3 Authority Key Identifier:
keyid:D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/xGtnk1BfVejyBgWGK--LfgN8rc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.78.0/24
Signature Algorithm: sha256WithRSAEncryption
66:03:90:55:d9:04:cd:04:58:c0:90:d3:5f:1e:19:1e:33:47:
fd:71:25:c0:4f:2c:31:b8:52:64:9e:86:61:4b:bf:9f:88:c6:
5e:0a:6e:e1:b8:32:38:59:9c:d3:8e:d1:63:9a:c4:66:8c:3b:
59:83:db:24:24:27:2e:d8:11:15:48:dc:db:ba:32:4f:58:08:
ba:4f:fa:4c:4b:23:81:bc:b4:e1:a3:e3:54:e4:4c:aa:aa:27:
91:8b:7e:9e:c3:6c:44:a6:01:95:90:12:ff:65:20:61:0e:91:
c4:19:1b:dd:4b:cd:c2:23:b3:0d:12:64:cd:10:24:e6:2f:d1:
34:80:b1:c7:86:56:5e:23:54:dd:48:5a:1c:99:c7:57:36:1f:
97:9c:6d:99:ce:b4:e2:82:54:6e:d4:ff:7b:c8:69:75:8d:ce:
9f:5d:3a:a2:aa:f7:02:4a:e9:c0:a0:df:ce:7d:ab:ec:c2:75:
07:cb:c3:e1:7c:95:07:0d:7d:b2:33:0f:93:05:a7:7b:e1:61:
55:26:17:15:8f:4a:31:47:15:a2:e1:8b:a3:2f:21:d2:93:05:
67:a5:b9:a2:7a:9f:1b:81:da:4a:0e:ee:9c:d1:72:2a:81:b7:
a2:dc:a6:f9:cb:72:98:0d:fb:6b:33:f9:4f:9f:d3:de:ae:b3:
d7:93:45:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 05:36:25 2024 by rpki-client on console-fra.rpki-client.org