Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/x5dqrCu7139MI3VP6vPEYku22mg.roa
File: x5dqrCu7139MI3VP6vPEYku22mg.roa (raw, json)
Hash identifier: pLuRyDeU/LgzbsyzKUIik6arbSAKPY45n48ZJzym9ZY=
Subject key identifier: C7:97:6A:AC:2B:BB:D7:7F:4C:23:75:4F:EA:F3:C4:62:4B:B6:DA:68
Certificate issuer: /CN=fe5dbc41b11e77bc44bd2c735554b5b4258d0c33
Certificate serial: 0185719E5FC466408C7F9C4668D9C5C6E435
Authority key identifier: FE:5D:BC:41:B1:1E:77:BC:44:BD:2C:73:55:54:B5:B4:25:8D:0C:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/x5dqrCu7139MI3VP6vPEYku22mg.roa
Signing time: Mon 02 Jan 2023 08:34:42 +0000
ROA not before: Mon 02 Jan 2023 08:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48933
IP address blocks: 193.36.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:5f:c4:66:40:8c:7f:9c:46:68:d9:c5:c6:e4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5dbc41b11e77bc44bd2c735554b5b4258d0c33
Validity
Not Before: Jan 2 08:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7976aac2bbbd77f4c23754feaf3c4624bb6da68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:88:97:c0:70:23:c5:8e:3d:42:e2:21:e0:46:
e4:98:b6:0d:7b:d1:4c:47:11:4b:d4:53:99:6d:8f:
67:39:8b:62:d1:96:ee:cd:2f:0d:97:25:56:77:47:
44:b3:a3:21:58:ab:85:4f:54:0c:58:17:e7:4c:7d:
00:de:11:65:8f:d7:3b:a7:fc:52:6f:c4:1f:ac:de:
fe:26:05:b1:fe:cf:a2:a0:0c:ed:ee:3d:bf:a5:15:
2d:7f:fd:9d:61:bd:ee:51:b8:0e:b1:ab:8a:01:a9:
d0:04:65:4a:6e:c7:af:5c:58:a6:a3:63:b1:5b:b5:
d0:0c:26:68:e1:7f:1e:19:2f:e0:12:85:e8:fa:e5:
0e:dc:9d:45:10:b3:04:53:84:7d:e7:9b:9b:d0:07:
cc:7d:3b:cc:c8:d7:f7:a1:c0:57:b3:8d:0f:e4:6b:
8f:8b:79:01:bf:bb:b4:8a:13:d1:e2:ee:55:6a:8d:
78:d5:fa:cb:e3:c4:ec:53:07:3a:97:b1:44:f3:ac:
8a:47:33:40:18:aa:21:04:63:1c:ba:9d:75:6b:05:
0f:54:be:cc:e2:b7:98:11:84:35:bf:67:39:b6:2c:
b6:e7:b2:3a:f5:d2:43:3c:12:e4:fd:5d:05:e4:ba:
13:2a:89:97:13:f5:7f:ce:84:a3:04:36:d4:9a:0d:
7e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:97:6A:AC:2B:BB:D7:7F:4C:23:75:4F:EA:F3:C4:62:4B:B6:DA:68
X509v3 Authority Key Identifier:
keyid:FE:5D:BC:41:B1:1E:77:BC:44:BD:2C:73:55:54:B5:B4:25:8D:0C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/x5dqrCu7139MI3VP6vPEYku22mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.35.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ca:8d:4c:60:81:56:42:c9:6e:7d:9e:89:19:46:00:7e:58:
5c:eb:91:bd:b3:2a:45:4c:9c:44:13:ea:bd:8b:13:15:20:f0:
ae:99:79:52:25:b8:2a:69:2b:27:c3:23:dc:9b:95:2b:cc:25:
4d:a3:fe:5b:7e:a6:66:7b:73:ba:35:03:d4:e6:c9:6e:57:ca:
8a:c7:77:6d:18:fc:ae:b8:ec:15:91:79:6d:ad:68:25:ac:d3:
1a:f9:b2:cb:08:ca:ea:ea:1c:be:84:37:8d:1f:54:52:60:ce:
08:7d:e5:6f:d8:ee:5f:99:a9:e6:4f:6b:08:87:e4:4b:85:17:
49:99:60:e1:67:36:14:ad:ef:75:2f:32:0a:e5:f6:3e:54:22:
10:12:fe:ac:aa:55:59:1e:03:eb:bb:1b:de:c9:64:9b:5e:95:
10:30:78:cd:23:90:8e:e7:3b:31:ee:ba:c0:98:56:9f:6e:59:
de:35:56:d1:c3:79:d4:8a:ad:a2:d1:7d:e2:c5:de:d2:c4:a5:
a5:b3:ff:98:b6:0c:fa:2f:79:28:33:93:05:82:96:fe:9e:a8:
47:2c:de:97:df:72:54:9a:72:c6:9b:4e:d6:39:d9:88:8e:a1:
87:72:49:9e:c2:f5:6e:86:37:2c:66:8c:01:7f:f7:0f:0e:9d:
2e:50:21:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:30 2024 by rpki-client on console-ams.rpki-client.org