Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/J9hK1oZ5tr2YIa_bSilPPWeoNos.roa
File: J9hK1oZ5tr2YIa_bSilPPWeoNos.roa (raw, json)
Hash identifier: j6OYM+bxVdN0+LkX/gPbxyk6KAjZgjMxyfjuzNEnJYY=
Subject key identifier: 27:D8:4A:D6:86:79:B6:BD:98:21:AF:DB:4A:29:4F:3D:67:A8:36:8B
Certificate issuer: /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial: 0190B78DBB6C37F5D20BB4D1479E345A3448
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/J9hK1oZ5tr2YIa_bSilPPWeoNos.roa
Signing time: Mon 15 Jul 2024 18:00:37 +0000
ROA not before: Mon 15 Jul 2024 18:00:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208964
IP address blocks: 193.28.243.0/24 maxlen: 24
194.124.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jul 2024 16:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b7:8d:bb:6c:37:f5:d2:0b:b4:d1:47:9e:34:5a:34:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Validity
Not Before: Jul 15 18:00:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27d84ad68679b6bd9821afdb4a294f3d67a8368b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c4:2d:dc:93:c2:a8:94:fa:fb:5f:66:48:01:
bb:e5:e2:ea:58:b1:38:22:91:f7:b1:cd:57:b0:26:
b7:dd:3b:de:46:5f:75:6d:05:54:6b:2c:6c:d2:7b:
02:a8:65:74:dd:69:06:68:9f:91:92:1b:54:47:ea:
b9:b2:3e:cc:1f:f8:93:b0:46:7a:21:c5:bd:62:4b:
18:6d:62:80:09:4d:36:d3:9b:cd:9a:2c:72:a7:c5:
01:de:36:42:68:32:c1:98:86:c1:f5:4f:c6:b8:80:
34:77:18:ce:f0:a3:0e:4b:a9:fb:ce:6e:02:2a:22:
3d:07:d7:f1:32:04:14:77:8a:a2:1b:82:4c:68:cd:
63:34:d9:dc:e2:9d:67:75:d9:12:19:eb:40:89:e8:
94:98:c5:ab:4a:58:ce:fd:74:94:7c:90:aa:02:08:
a7:38:07:7f:31:cf:37:62:bb:4b:49:1e:12:8e:ae:
89:92:3f:d1:20:7c:6a:78:26:8d:2e:89:b4:68:be:
11:96:39:f8:5e:8d:ce:81:59:6f:b3:b4:d8:c5:cc:
0f:c8:04:e2:00:b4:b0:17:27:70:c4:dd:37:42:08:
2f:27:25:d3:35:6d:d6:1d:58:28:dd:ea:00:98:05:
a8:cd:d0:7d:53:45:1d:ce:f5:c1:57:e0:b6:2f:60:
8c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D8:4A:D6:86:79:B6:BD:98:21:AF:DB:4A:29:4F:3D:67:A8:36:8B
X509v3 Authority Key Identifier:
keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/J9hK1oZ5tr2YIa_bSilPPWeoNos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.243.0/24
194.124.62.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:af:d8:63:ea:59:d0:c6:e3:63:c9:4d:7f:6f:c7:ca:9d:29:
8b:8e:28:a1:b9:fb:01:45:05:39:cb:a7:66:f9:79:a1:85:36:
2e:10:24:19:18:6d:4d:8e:b8:75:f9:e1:06:70:85:60:ae:83:
4b:9e:13:9d:64:9c:99:30:f9:5e:39:7b:ea:a9:8f:0a:81:7a:
48:d9:60:b0:dc:d1:99:8a:dd:9b:15:88:0c:c5:9b:a2:9b:b9:
80:a2:c3:c6:57:b8:72:fa:96:55:3f:d2:2b:47:67:58:ea:7d:
77:21:9e:02:5a:48:1e:15:e1:82:e9:18:13:7e:8f:0d:23:11:
ab:a0:e3:64:08:a7:13:96:c2:c8:52:ec:db:7a:64:23:ef:a0:
2a:93:29:3e:3b:62:cf:16:d1:dd:bf:a1:94:9c:fc:cf:f4:2a:
b0:62:77:7c:f1:48:ad:7a:d4:9b:85:e2:17:a1:89:78:09:19:
fc:e5:e7:59:5f:6c:79:ee:d3:96:77:94:3d:3c:11:78:f1:5c:
48:07:c6:9c:ba:3e:ea:fb:b2:cd:cf:e8:ec:09:3b:fa:22:ad:
ac:76:70:06:08:ad:ba:82:cf:1e:d5:e3:97:f7:9a:39:26:c9:
00:05:d1:5f:67:9e:af:2c:7e:d6:1e:83:5e:d2:2f:22:f8:bd:
9d:f3:dd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 20:13:37 2024 by rpki-client on console-fra.rpki-client.org