Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/m9eR1X6c-1R1UV5ybDZr5R780NQ.roa
File: m9eR1X6c-1R1UV5ybDZr5R780NQ.roa (raw, json)
Hash identifier: OafvV8ns9TaMRb6PZvpfuvqbCCNfarfDCOEjBv0WaIk=
Subject key identifier: 9B:D7:91:D5:7E:9C:FB:54:75:51:5E:72:6C:36:6B:E5:1E:FC:D0:D4
Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial: 01900BE375432EC0732928CDF0CF7B47BF4A
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/m9eR1X6c-1R1UV5ybDZr5R780NQ.roa
Signing time: Wed 12 Jun 2024 09:59:34 +0000
ROA not before: Wed 12 Jun 2024 09:59:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215064
IP address blocks: 193.28.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jul 2024 08:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0b:e3:75:43:2e:c0:73:29:28:cd:f0:cf:7b:47:bf:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Validity
Not Before: Jun 12 09:59:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bd791d57e9cfb5475515e726c366be51efcd0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:60:c4:6b:9b:f9:82:58:36:ba:03:ef:76:8d:
51:95:de:f9:12:06:4a:d2:d8:97:e8:f6:77:62:8e:
2d:4a:88:f1:aa:8b:0d:7c:1e:2f:1c:42:0c:4c:96:
6d:7f:95:8b:9a:62:be:5d:68:07:31:b9:17:6e:ee:
13:3e:8a:53:2b:8a:98:d2:f0:40:e5:ba:4d:d7:c3:
6d:c5:3c:77:08:e8:a0:8b:da:e4:fb:4e:a1:2f:08:
0c:5f:d1:76:15:0a:53:f2:86:ac:88:d7:3b:30:7d:
f3:77:66:55:9e:83:02:d1:29:f0:e4:d6:16:b2:f3:
32:64:27:0f:8e:71:1b:ee:f6:a4:be:ae:62:f6:6d:
f3:7d:9d:7c:7b:33:99:d1:8a:34:a8:ec:5c:92:7c:
4c:ef:34:f0:03:63:2c:38:fc:f4:58:5d:27:ff:c7:
ae:bc:19:90:f4:bc:c3:39:72:48:fb:7a:ed:c0:c5:
41:38:aa:82:6a:83:fa:04:d7:f0:fa:f8:6e:17:d0:
51:be:5a:60:e5:c0:14:70:9d:7e:f0:74:64:b5:47:
1e:60:d1:fd:83:b6:bf:fe:ad:f8:b2:56:c8:34:8a:
51:bd:d5:6b:8e:41:47:fb:90:ff:63:ff:89:01:33:
6a:b7:6e:0b:e0:92:24:df:c9:80:80:0a:3e:59:2e:
6f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D7:91:D5:7E:9C:FB:54:75:51:5E:72:6C:36:6B:E5:1E:FC:D0:D4
X509v3 Authority Key Identifier:
keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/m9eR1X6c-1R1UV5ybDZr5R780NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.68.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:86:cc:7a:9a:49:a1:de:aa:4a:a6:ee:7c:19:00:e1:46:6e:
39:a5:60:36:64:71:2a:03:e8:f2:49:f6:df:46:ac:7b:76:bc:
23:af:75:23:f5:e1:73:b9:56:de:96:03:ca:42:23:79:69:02:
29:4d:b1:e4:b7:89:6c:90:b0:3f:05:5e:70:d9:77:51:77:fa:
39:e0:5e:63:75:46:dc:cc:a5:5a:f0:31:c4:52:e2:7a:6c:0c:
36:e1:a9:d2:ec:dc:6e:e6:4c:05:65:28:a2:b1:a4:a5:27:fe:
a7:d5:d0:25:67:ee:55:8b:64:ba:99:1c:55:8c:30:a9:b3:84:
ed:7d:da:cd:00:61:db:fc:b6:11:d8:34:08:b9:59:cf:1d:a9:
59:b4:0d:b0:b5:ba:01:9e:15:78:85:ff:65:d7:8e:7c:f7:56:
41:17:86:34:af:dd:00:0c:df:8a:fe:51:c0:12:8b:74:e0:bc:
03:3b:c6:1c:ab:72:64:87:4d:80:fc:00:c1:56:e5:63:e1:75:
93:78:9b:6a:c3:e2:21:c8:0c:4d:17:c1:ac:0f:1f:b5:b8:a6:
04:d1:03:74:01:91:e8:ab:52:83:e5:19:9c:03:d8:7b:88:9d:
c2:19:9f:16:61:9c:1e:96:d8:11:6b:70:88:24:90:e5:58:3f:
f4:64:ed:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 10:02:27 2024 by rpki-client on console-fra.rpki-client.org