Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/_pCDEMnE-U93PBNDmiNGNLr4dWg.roa
File: _pCDEMnE-U93PBNDmiNGNLr4dWg.roa (raw, json)
Hash identifier: kjBgMucceSX6mCfJ1zg/nN/EwPm4XjKlQxUYe6zC64U=
Subject key identifier: FE:90:83:10:C9:C4:F9:4F:77:3C:13:43:9A:23:46:34:BA:F8:75:68
Certificate issuer: /CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
Certificate serial: 0188B2EDBB771C549D4462C09CED03C5C7E0
Authority key identifier: 1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/_pCDEMnE-U93PBNDmiNGNLr4dWg.roa
Signing time: Tue 13 Jun 2023 04:05:04 +0000
ROA not before: Tue 13 Jun 2023 04:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399587
IP address blocks: 193.135.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b2:ed:bb:77:1c:54:9d:44:62:c0:9c:ed:03:c5:c7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
Validity
Not Before: Jun 13 04:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe908310c9c4f94f773c13439a234634baf87568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:08:6b:a1:c6:44:2e:07:a6:3c:0e:39:e3:b9:
8c:ab:ac:4d:81:fa:fb:ff:8d:c3:89:e2:fb:be:f8:
c4:f6:d5:6f:09:60:c0:90:7c:ee:2e:4b:ae:bf:46:
2c:16:c5:9d:4d:02:62:77:d7:ab:3c:5f:e2:7c:74:
c6:a6:4d:7b:24:4f:44:9e:0f:23:96:21:d2:a0:40:
ad:19:0d:ea:c6:e1:ab:7b:b0:80:71:53:d6:bd:b3:
95:b4:9e:b6:4f:f4:ba:a8:75:04:01:e1:ab:90:90:
64:6c:2e:c5:d6:0d:93:9b:98:53:ff:41:cc:ed:64:
f1:ec:d6:a4:7a:02:02:86:e5:f7:c4:77:08:e1:a1:
f2:a3:2b:2c:b5:a6:79:39:82:d6:17:05:58:4c:f5:
1b:81:04:2b:11:1d:07:7b:fe:fc:bb:ae:51:2e:2c:
fb:f6:20:d4:27:ca:81:6d:22:57:1a:f9:9f:ae:f1:
39:90:0b:f5:75:38:12:32:78:38:c4:ac:d7:da:3e:
61:65:ca:8b:94:6c:56:1a:1e:82:9b:f0:0e:fb:f4:
93:db:59:7a:eb:28:bf:82:91:6f:42:aa:a6:66:fc:
24:04:e1:4d:11:ec:ba:ec:b0:a3:a4:41:29:74:08:
6e:55:32:d2:4d:22:3c:a6:6e:b6:1f:96:84:21:1c:
12:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:90:83:10:C9:C4:F9:4F:77:3C:13:43:9A:23:46:34:BA:F8:75:68
X509v3 Authority Key Identifier:
keyid:1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/_pCDEMnE-U93PBNDmiNGNLr4dWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.119.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:56:cd:6a:09:0c:ab:98:05:d9:ec:0a:60:21:49:36:8c:26:
71:92:96:33:48:cc:7f:64:07:2f:f3:32:f3:d2:c3:14:c3:33:
4a:f3:39:32:d8:7f:91:ba:18:d6:f0:bb:9e:7e:04:68:f7:43:
63:20:7f:1c:93:ab:47:02:1d:de:dc:30:24:75:00:c1:53:5a:
c9:c3:4d:a1:cb:d8:85:32:a3:4a:29:d4:ad:d2:e8:89:f9:27:
54:ce:7a:98:23:4e:4b:e1:63:d6:57:70:74:1b:bf:61:41:d3:
8a:d3:60:51:aa:d3:3a:aa:53:58:e7:20:d9:13:a6:02:29:78:
9b:01:5c:6c:39:b4:3c:ce:c5:f3:f1:8b:a3:66:2b:cc:db:83:
06:23:d2:86:da:2f:8a:60:4f:d9:e7:77:04:74:ea:ca:8c:9b:
84:9d:9a:93:4d:58:27:36:7a:8c:32:b0:f9:83:e5:e9:f8:de:
9d:bd:be:ec:af:03:76:de:43:5d:0a:b0:01:59:2e:be:a7:f1:
34:eb:5b:6a:b6:11:de:37:09:66:5e:16:f5:bb:bd:d2:ae:58:
32:ba:69:e5:9c:1f:e1:65:d2:01:69:c9:a8:fa:22:f4:38:bb:
9a:ab:8f:2e:8c:94:15:33:3f:41:3d:0b:31:81:e3:ef:0e:51:
69:7b:b8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:46 2024 by rpki-client on console-fra.rpki-client.org