Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/SVaIzyrKezZCpe2IbYWrpFazpcg.roa
File: SVaIzyrKezZCpe2IbYWrpFazpcg.roa (raw, json)
Hash identifier: iJ4+LLphVfr/EGk3VS7sxLc8B/i7Yj7LBFPLSrcaJA8=
Subject key identifier: 49:56:88:CF:2A:CA:7B:36:42:A5:ED:88:6D:85:AB:A4:56:B3:A5:C8
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01888C816C6E9C0DB2F5E1765D9271816BE4
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/SVaIzyrKezZCpe2IbYWrpFazpcg.roa
Signing time: Mon 05 Jun 2023 17:01:12 +0000
ROA not before: Mon 05 Jun 2023 17:01:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 194.146.92.0/24 maxlen: 24
79.98.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Jun 2023 22:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8c:81:6c:6e:9c:0d:b2:f5:e1:76:5d:92:71:81:6b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jun 5 17:01:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=495688cf2aca7b3642a5ed886d85aba456b3a5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3e:c1:08:73:42:03:9e:4e:15:87:1c:bf:85:
e5:65:37:b4:4b:bc:43:63:42:d8:f2:e4:d6:72:ad:
ca:c0:76:f4:b8:7f:70:3f:cb:78:aa:c7:02:ed:c6:
a0:0d:1a:27:3e:b8:d8:4e:63:23:cf:4d:96:86:4b:
3d:c6:22:65:fb:83:d8:a8:a9:92:4d:78:14:21:74:
b6:13:d2:79:82:4d:d9:6d:93:de:66:50:51:f5:8c:
ae:02:a9:f9:3c:da:ad:87:b4:c6:a9:35:c3:99:18:
52:cb:24:eb:b9:82:d7:04:ab:b9:1e:68:8a:ac:a7:
22:e7:44:aa:f6:37:4e:6b:25:58:9f:f7:9c:9f:2e:
6e:56:c0:4e:62:a7:9a:92:86:23:e9:8e:ab:23:02:
b5:db:1f:5e:10:22:4b:11:6a:12:47:d1:71:ec:37:
6c:d9:2e:2d:e7:92:ed:be:f5:dd:15:72:4b:dd:84:
05:55:85:8f:48:a8:d9:1e:40:c9:3c:2b:11:8f:9c:
cf:23:bc:34:14:1f:99:86:94:53:c0:52:2e:b1:33:
48:b7:6d:1e:9f:19:73:02:da:86:ef:15:e4:67:f0:
f5:23:e5:03:00:69:5b:f7:7a:ba:13:bc:49:c0:6a:
b7:17:5e:0f:be:ea:01:15:5c:79:90:7c:86:59:46:
3d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:56:88:CF:2A:CA:7B:36:42:A5:ED:88:6D:85:AB:A4:56:B3:A5:C8
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/SVaIzyrKezZCpe2IbYWrpFazpcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.247.0/24
194.146.92.0/24
Signature Algorithm: sha256WithRSAEncryption
50:cb:c2:12:a7:c1:fe:2e:80:21:7a:72:6d:cf:de:7e:42:aa:
e1:77:4b:46:26:97:41:05:9c:3e:b4:7e:14:a0:ae:d0:fb:7c:
86:a7:80:71:8d:bb:4d:54:6c:4c:07:e3:ab:94:7f:50:10:8c:
4b:12:bc:7f:96:06:ae:14:8d:8f:d5:d2:a4:40:7b:56:dc:94:
a1:c8:f6:fc:28:bd:95:a0:b2:5f:a0:81:29:28:e7:d0:47:c3:
f1:56:53:f5:05:4b:db:d1:0f:ed:f6:a0:1f:33:d3:cc:b5:fd:
12:f9:45:34:d0:44:9e:c4:db:50:6d:30:17:50:35:6a:5a:60:
33:6c:28:2d:02:ab:2b:9f:8d:6a:2e:f4:00:b5:7c:70:33:28:
d6:5f:87:e1:c3:29:f0:2b:f3:35:25:be:51:5c:df:50:03:c7:
9a:26:d7:25:15:07:f1:3c:77:54:fe:60:6b:b6:bb:de:3d:42:
33:85:e0:e4:2f:9c:3d:e5:55:f9:5a:ee:70:8b:e8:2d:ec:ef:
b8:33:4b:13:4c:40:10:b4:e6:48:a7:4f:d1:7a:04:7a:a2:f6:
66:a6:7f:aa:97:0f:04:db:50:e3:12:be:b0:88:7c:b6:2a:6c:
04:74:50:38:6e:ff:71:45:82:2d:d1:0b:0c:08:24:14:51:44:
3f:78:5b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org