Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/X259gKaYXMRF-cGQ6USnyJu1QGc.roa
File: X259gKaYXMRF-cGQ6USnyJu1QGc.roa (raw, json)
Hash identifier: gYDCN+JkA3UoYXt8Lvbob4NHrouKUmzQ/8ntBY70N2c=
Subject key identifier: 5F:6E:7D:80:A6:98:5C:C4:45:F9:C1:90:E9:44:A7:C8:9B:B5:40:67
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0188016F456BA2DAF2390675F34A40CB3EA1
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/X259gKaYXMRF-cGQ6USnyJu1QGc.roa
Signing time: Tue 09 May 2023 16:54:09 +0000
ROA not before: Tue 09 May 2023 16:54:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 194.146.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 May 2023 08:04:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:01:6f:45:6b:a2:da:f2:39:06:75:f3:4a:40:cb:3e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: May 9 16:54:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f6e7d80a6985cc445f9c190e944a7c89bb54067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e9:b9:5d:d3:98:3e:84:1a:8b:d1:33:b1:9d:
2f:f9:b0:89:1d:87:12:9a:92:31:96:7f:86:37:c9:
c4:ae:d3:b0:ee:9a:9d:d2:74:9f:20:a4:d2:e6:b1:
5f:b5:eb:17:63:e8:48:b4:96:d2:82:67:f3:8a:da:
31:61:b9:71:71:b7:c2:cc:92:a9:3b:f0:c4:ae:d6:
6b:fc:eb:69:1d:d1:f3:91:fc:3e:be:cb:18:c7:70:
2a:69:f6:ce:01:46:46:2d:e6:79:93:6f:59:03:d7:
78:d4:38:ea:d0:35:4a:ce:47:3b:4e:9f:4b:69:6e:
fc:0a:e1:d3:aa:39:30:2d:65:a0:31:6f:84:41:6b:
e5:57:5c:f9:73:00:dd:08:bd:b5:2a:b3:e3:a0:34:
8f:3c:be:01:86:a8:08:a4:c7:f8:31:1f:96:27:b3:
54:1e:4f:a0:7e:8b:8b:fc:71:65:3e:8f:5e:9d:22:
04:51:5f:fa:be:b3:6c:b0:05:f3:f9:24:17:4f:55:
d3:cb:97:73:c7:6c:1c:a6:1a:e7:bd:27:b4:92:4f:
34:c2:39:78:6a:54:47:62:e9:a7:5b:39:90:9f:65:
4c:61:63:77:6c:b7:c7:8f:2a:d3:c8:1d:0d:3e:b8:
5e:c7:7a:b9:3c:40:7b:37:c0:1b:e4:af:23:08:bf:
ab:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6E:7D:80:A6:98:5C:C4:45:F9:C1:90:E9:44:A7:C8:9B:B5:40:67
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/X259gKaYXMRF-cGQ6USnyJu1QGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.93.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:09:06:6e:ad:f3:1e:6e:f6:09:ce:9f:57:34:27:15:f5:fc:
59:e0:fd:78:5f:f7:e2:0e:d2:99:a5:85:bf:b2:d4:3e:f7:a1:
6a:c8:0f:60:ee:1c:2a:e9:9d:da:23:de:b2:ce:b4:d9:cf:0d:
18:9a:cd:37:d5:11:2a:83:3d:92:23:b6:62:34:96:ae:cd:d6:
4c:a5:0d:bf:5f:14:61:ce:d0:08:24:c2:71:6f:27:14:f4:f6:
bc:3d:62:ed:eb:cf:31:9a:dd:ed:fb:78:8e:cd:bc:9b:a7:98:
c3:a2:f9:93:1b:21:1a:df:87:0d:26:eb:73:29:af:a9:4c:67:
b0:47:b6:dd:ca:0c:5d:4d:89:fd:f2:30:d2:ae:94:5e:76:02:
89:f4:e1:9a:97:f8:a1:1c:dd:f0:6d:74:f1:d4:d1:7b:0a:e9:
8d:e8:d2:7f:95:ce:8c:a5:9b:9b:90:1f:e9:8b:a6:ab:28:bc:
92:e7:49:8a:4a:7e:80:e0:79:cd:de:15:7b:1c:c0:08:4e:b0:
81:9b:da:e9:1a:89:3a:2c:22:bb:47:0e:ac:93:dc:7f:83:b2:
d0:e0:d6:80:79:08:b0:b1:fc:05:f7:2a:cf:d1:1a:f7:8f:4c:
33:90:b4:4d:80:c7:7c:d4:96:97:17:4e:22:d3:7c:2d:98:be:
6d:90:c5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org