Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/9GLuJaG9yHRC8yKtWJWudcVxb6c.roa
File: 9GLuJaG9yHRC8yKtWJWudcVxb6c.roa (raw, json)
Hash identifier: QlsxyC6YtCedHWEQjRYRrxXoFiMEzaLmZ2+tVNfAue4=
Subject key identifier: F4:62:EE:25:A1:BD:C8:74:42:F3:22:AD:58:95:AE:75:C5:71:6F:A7
Certificate issuer: /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial: 0191F62114D9C124687D154075C432E1AEC4
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/9GLuJaG9yHRC8yKtWJWudcVxb6c.roa
Signing time: Sun 15 Sep 2024 14:40:48 +0000
ROA not before: Sun 15 Sep 2024 14:40:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212368
IP address blocks: 193.135.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Sep 2024 14:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f6:21:14:d9:c1:24:68:7d:15:40:75:c4:32:e1:ae:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Validity
Not Before: Sep 15 14:40:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f462ee25a1bdc87442f322ad5895ae75c5716fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b5:13:f0:4b:7a:1d:32:17:df:60:bd:de:fd:
bf:46:ac:e6:95:04:29:65:2a:09:53:22:fe:98:3f:
a5:26:a0:06:2d:44:83:9b:a2:15:36:a2:41:6a:2b:
bf:07:a1:dc:a8:69:bc:11:cd:b7:72:f8:4f:e5:af:
26:82:6e:a9:39:55:d3:c4:ca:66:a6:b5:d0:65:36:
59:6d:fb:a4:6c:b4:94:ae:16:fa:1e:5a:9c:73:40:
93:17:10:ca:64:db:dd:db:72:a2:b9:3c:4a:7d:6f:
34:48:9c:9d:ec:ac:c7:a7:79:92:24:82:63:1f:b3:
10:cc:f1:f2:45:91:30:c9:9e:4e:cc:fe:47:8c:45:
16:6b:d3:dc:8d:ab:b3:49:fa:12:84:4c:32:74:4f:
04:ff:02:c4:b1:d1:47:b7:66:6a:d1:f9:68:3b:c5:
0a:ac:82:8f:29:56:76:e5:37:89:c7:f9:a0:10:5b:
1b:93:2d:a7:4b:71:d1:06:65:18:9b:c1:ef:a9:39:
fb:82:70:af:a7:b8:dc:a9:4e:40:79:d3:52:0a:99:
e0:68:2a:d1:9c:bf:64:90:f5:e4:1c:b1:d4:4d:01:
db:a8:92:9e:dc:fe:1d:a0:a1:6e:bd:15:a6:2a:b5:
f0:9e:21:e1:45:80:e0:18:42:60:35:8c:53:a2:15:
66:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:62:EE:25:A1:BD:C8:74:42:F3:22:AD:58:95:AE:75:C5:71:6F:A7
X509v3 Authority Key Identifier:
keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/9GLuJaG9yHRC8yKtWJWudcVxb6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.101.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:7f:b1:e6:76:85:2d:6b:41:af:3e:0c:0c:3b:f2:20:57:66:
6d:8b:0f:40:87:34:f3:91:dd:21:c4:92:84:94:e0:e6:c9:f4:
17:3c:a2:09:a5:f6:9f:7b:34:f2:57:30:89:50:b3:3e:2f:a0:
ec:9b:63:8b:4b:7b:80:d7:7a:1c:74:4e:dd:84:2b:4c:af:f7:
af:69:40:21:d0:f8:a5:fa:09:23:ba:c7:17:ca:8e:f6:3b:96:
0a:01:26:39:f9:39:b1:fe:17:cb:ad:5c:16:bb:7c:b2:7c:69:
d2:a2:3d:f8:51:42:25:8d:33:b3:fa:12:d4:2c:ca:dd:f8:c3:
d5:3f:db:49:8d:89:77:d0:23:77:ee:2b:35:fa:f8:39:d4:3c:
7b:c8:b9:2d:bb:bb:9e:8e:3a:ea:f6:34:52:26:e4:f5:e8:be:
a8:b7:6d:36:d5:ad:23:f1:28:bd:81:2d:b2:02:19:1f:5b:c9:
39:d8:92:15:7c:31:25:fe:db:72:7f:03:d3:63:3f:e8:5d:9c:
b2:34:96:15:ca:6c:be:d4:30:f8:49:5e:74:78:3b:87:3b:a9:
43:3d:cc:23:0f:04:87:98:ac:4d:c9:60:37:8a:83:0e:08:0b:
bd:1d:bf:d2:66:1f:5c:34:8f:9e:90:c3:12:e6:f6:83:d6:f4:
0d:dc:41:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 20:26:04 2024 by rpki-client on console-fra.rpki-client.org