Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/5VNFvMpWmI17rzflna7dghrI8qc.roa
File: 5VNFvMpWmI17rzflna7dghrI8qc.roa (raw, json)
Hash identifier: Tf+w4JpYhKqEYWSA7iJcaeXKgv3rekgKKuruY588ZCw=
Subject key identifier: E5:53:45:BC:CA:56:98:8D:7B:AF:37:E5:9D:AE:DD:82:1A:C8:F2:A7
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0192D9665DA080501FD8A7271105A8009DA5
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/5VNFvMpWmI17rzflna7dghrI8qc.roa
Signing time: Tue 29 Oct 2024 17:50:17 +0000
ROA not before: Tue 29 Oct 2024 17:50:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 194.38.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 07:32:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d9:66:5d:a0:80:50:1f:d8:a7:27:11:05:a8:00:9d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Oct 29 17:50:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e55345bcca56988d7baf37e59daedd821ac8f2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ab:c1:9c:1d:ea:9f:ca:53:59:ef:e8:2a:c9:
7e:9c:41:b0:f0:db:97:65:7d:03:20:18:10:58:fe:
1a:30:fb:b5:3b:54:d8:cc:cf:fd:45:06:62:b4:01:
c3:02:ca:c3:9f:5c:2d:cc:d9:87:d5:d1:39:00:29:
6e:52:58:ee:f8:01:9a:60:36:d8:f8:9c:de:11:e2:
9c:db:0d:82:41:27:07:65:94:30:21:1c:f6:93:50:
fe:5f:0a:e3:8b:4c:7a:dd:1f:4d:f3:e3:4b:22:90:
d2:28:db:b4:1a:e7:ed:38:48:f9:b1:5f:d4:96:b7:
5a:9f:47:de:02:c1:68:49:bd:84:8b:8d:b1:0b:a6:
dc:9f:d0:f4:a1:6c:9f:19:25:09:a7:5f:fb:61:71:
8d:4c:bf:ea:23:8a:f8:0f:f6:8e:e7:fd:cf:d9:16:
e2:94:e2:30:28:7f:4e:a3:61:15:34:1f:35:0c:5c:
5a:35:24:17:63:9a:30:2a:e3:0c:f3:31:b1:4e:c2:
87:48:cd:45:d8:5b:c5:d2:8a:7c:fb:9a:ff:f1:09:
07:75:0f:26:17:32:f7:a0:3a:09:96:91:a0:f4:4f:
94:da:4d:3e:73:c1:b9:7c:59:9e:ff:a3:fd:bf:a8:
9c:c6:5f:86:18:cf:4f:3e:3a:31:e8:ef:91:1b:61:
dd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:53:45:BC:CA:56:98:8D:7B:AF:37:E5:9D:AE:DD:82:1A:C8:F2:A7
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/5VNFvMpWmI17rzflna7dghrI8qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.49.0/24
Signature Algorithm: sha256WithRSAEncryption
60:98:24:24:df:72:67:c6:9f:c0:e9:56:a4:3c:20:d4:56:e4:
25:1b:91:e6:e8:49:13:51:7f:21:9b:e5:44:6c:37:07:93:e1:
56:cf:2b:42:dd:c4:7f:55:b3:1e:25:af:bf:74:32:ee:df:e1:
ea:30:be:52:7c:65:6d:be:58:83:54:7c:5e:c2:55:b7:ee:40:
21:7b:bd:25:ec:71:72:0d:40:57:9b:62:ca:96:19:d6:63:c8:
0b:d5:70:e9:e5:17:e5:3e:d6:e0:af:66:cf:8c:90:46:4d:0a:
31:34:36:fa:22:eb:f9:c1:75:d4:8b:db:a5:65:f3:d4:bc:b7:
63:e6:00:61:e5:ea:aa:97:8c:8e:f1:e5:4d:a3:86:d7:49:f8:
f9:33:91:45:aa:2a:83:aa:9e:f9:af:bf:b3:97:35:f0:59:a5:
2f:b7:33:e7:b3:09:c9:60:c8:6f:93:7e:8a:1c:bb:fb:e6:55:
38:e8:9f:15:73:6a:82:8b:ff:df:a5:9a:fe:8f:78:4a:6e:4d:
be:f6:3c:06:52:4a:d0:d5:ab:ad:02:90:9e:9b:c4:e6:af:db:
23:fa:03:3a:da:75:75:be:0f:2d:bf:ac:a2:fb:ae:22:b9:4e:
18:c8:4e:3d:48:93:c6:29:08:e3:ac:7a:6b:12:c6:b1:26:a9:
33:60:0e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 10:12:03 2024 by rpki-client on console-fra.rpki-client.org