Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/x0jNCPLHTIfc_y79HqrfKsM9o6w.roa
File: x0jNCPLHTIfc_y79HqrfKsM9o6w.roa (raw, json)
Hash identifier: 1FMH7UogsGahA4rTByPewwNusIG7AMW/evuRIUqwQU0=
Subject key identifier: C7:48:CD:08:F2:C7:4C:87:DC:FF:2E:FD:1E:AA:DF:2A:C3:3D:A3:AC
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018D84C455EBA9DB532641310E2AB500940B
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/x0jNCPLHTIfc_y79HqrfKsM9o6w.roa
Signing time: Wed 07 Feb 2024 18:11:16 +0000
ROA not before: Wed 07 Feb 2024 18:11:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 27176
IP address blocks: 193.142.242.0/24 maxlen: 24
193.142.249.0/24 maxlen: 24
193.192.1.0/24 maxlen: 24
193.192.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 17:09:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:c4:55:eb:a9:db:53:26:41:31:0e:2a:b5:00:94:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 7 18:11:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c748cd08f2c74c87dcff2efd1eaadf2ac33da3ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ee:ed:e7:0d:70:69:04:81:9b:3d:ac:9a:63:
9c:49:5a:61:98:37:d7:a3:61:3a:97:2b:9e:46:08:
66:4a:93:19:38:b1:b8:3e:8c:0d:fa:a8:33:e1:e6:
8e:2e:e2:45:52:b3:a4:ee:f1:14:56:a3:f5:ce:ce:
6e:30:cd:b9:ce:8e:da:d3:43:53:c5:3d:47:f6:9d:
4b:b4:42:5c:b5:1f:e1:17:cb:5a:5c:f6:c7:5d:06:
09:3b:dc:5b:b5:1c:a6:86:5e:8c:e9:d5:4c:cd:30:
fe:53:21:8a:01:cc:14:91:51:f6:d8:47:5a:ab:d9:
a2:ad:7b:1b:55:c5:18:0e:74:be:7c:04:16:a9:12:
4b:08:9d:fd:d4:24:65:42:63:23:09:97:81:e5:6b:
c7:4c:d3:6d:61:75:70:04:e3:25:de:06:97:be:e9:
86:47:c0:05:01:c9:39:76:8f:4c:95:0e:c8:5f:51:
83:af:8d:11:0e:ae:a9:6a:c3:e8:2a:98:ad:de:14:
09:fa:5c:8c:bd:20:74:d6:ce:f3:f1:96:68:21:d7:
9c:ff:84:45:8d:d8:07:4f:3c:e3:b0:ce:4a:46:2e:
c4:8a:31:8b:55:29:45:e9:63:96:70:77:de:9c:9e:
ff:c1:bb:39:c3:a6:3d:b8:05:b2:45:9c:16:54:5a:
94:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:48:CD:08:F2:C7:4C:87:DC:FF:2E:FD:1E:AA:DF:2A:C3:3D:A3:AC
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/x0jNCPLHTIfc_y79HqrfKsM9o6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.242.0/24
193.142.249.0/24
193.192.1.0/24
193.192.15.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a2:a3:d5:2a:ad:43:82:d7:2a:36:a7:02:58:ff:26:bd:b8:
41:71:0f:5e:43:86:7a:a3:64:42:50:ad:4e:e7:23:6a:a7:1f:
14:ad:09:10:28:65:1e:be:8f:e1:a7:56:3f:02:69:58:fd:b2:
5e:8d:ab:38:82:a9:e8:3b:a7:27:69:cd:9f:0e:d7:d7:ba:2b:
c2:02:93:71:20:20:b8:6d:ba:4b:90:cd:92:20:5c:ac:cf:b2:
f4:c7:d7:be:b9:32:d4:4b:e1:22:69:9a:0d:4f:9e:c3:8f:1f:
6d:ba:ef:e6:d2:7d:71:33:01:a4:87:93:eb:17:5d:8b:dc:e7:
fb:54:71:c2:e7:44:89:4d:d2:6a:86:47:63:51:5c:ce:d7:b0:
18:24:c3:e1:89:63:c3:e2:c3:0d:3d:71:ed:f8:a9:e4:b8:d2:
b9:66:a3:69:e7:b0:36:d8:00:b3:90:c0:09:3a:f7:1d:05:b9:
9f:a6:fe:20:56:c7:c8:3a:f4:4a:39:36:62:cc:a3:62:70:1a:
e3:e4:de:20:e8:3a:8b:6a:23:a8:e4:21:45:b2:7c:c4:c4:3a:
a2:64:9a:29:74:75:56:e9:30:13:63:6a:6f:47:5d:24:7a:67:
72:8e:1e:3c:6e:d5:8a:b2:f2:f9:c3:0e:e2:a9:37:5f:9a:8b:
c5:cf:f2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:23 2024 by rpki-client on console-fra.rpki-client.org