Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/76aiemkL5VYc2vIg7is2cgRam7c.roa
File: 76aiemkL5VYc2vIg7is2cgRam7c.roa (raw, json)
Hash identifier: GDsSE2L6Fhwmj62jN06PfodzIzO6R9/JTSeQLCmJRlI=
Subject key identifier: EF:A6:A2:7A:69:0B:E5:56:1C:DA:F2:20:EE:2B:36:72:04:5A:9B:B7
Certificate issuer: /CN=0d026a518947dd5bd3981ed0669c11c5621d0475
Certificate serial: 01890266C9B3CB4027680F4557FD6D9DB68B
Authority key identifier: 0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/76aiemkL5VYc2vIg7is2cgRam7c.roa
Signing time: Wed 28 Jun 2023 14:27:17 +0000
ROA not before: Wed 28 Jun 2023 14:27:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5089
IP address blocks: 193.39.4.0/24 maxlen: 24
193.39.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:02:66:c9:b3:cb:40:27:68:0f:45:57:fd:6d:9d:b6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d026a518947dd5bd3981ed0669c11c5621d0475
Validity
Not Before: Jun 28 14:27:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efa6a27a690be5561cdaf220ee2b3672045a9bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:e2:59:a6:1e:72:fa:e3:05:95:1c:16:2f:
e4:97:1e:e5:bb:a2:97:e1:59:6a:8f:85:60:b6:31:
de:5d:a3:7e:80:4d:6d:51:0f:08:b9:19:f8:7e:94:
be:d4:2b:5a:37:1f:8d:c6:8e:22:bb:71:ec:27:07:
be:19:4a:1a:b9:2c:97:96:58:ca:d6:35:f3:dd:72:
2b:1b:9b:f8:55:45:94:81:53:b5:52:9a:e9:74:a9:
28:ad:77:65:19:61:02:a6:e6:b9:60:78:8e:e7:bb:
d4:9e:35:a8:e6:ff:09:13:e0:6e:1a:50:c7:78:d0:
3c:a2:ea:47:4d:00:3e:36:54:8c:7f:fa:a2:97:11:
b7:e4:db:8a:87:d7:46:82:7b:9a:97:c1:c3:4e:11:
5b:8a:de:a2:dd:27:a4:6e:65:c0:3d:b8:50:a1:51:
c0:63:0c:46:a8:a2:03:de:52:75:d7:c8:ed:0e:6d:
36:39:a5:0a:70:03:cb:3f:2c:f5:f6:6c:9e:2b:4a:
1f:8d:ca:52:97:48:9d:80:78:62:ad:6d:c4:8f:71:
dd:ea:05:38:82:59:cd:3a:3a:19:ae:29:f0:9c:5d:
28:15:1d:e4:4c:e7:f9:7f:4a:c2:9d:a7:36:ff:48:
fc:71:71:75:1d:32:b3:df:83:87:d0:1b:44:79:d0:
89:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A6:A2:7A:69:0B:E5:56:1C:DA:F2:20:EE:2B:36:72:04:5A:9B:B7
X509v3 Authority Key Identifier:
keyid:0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/76aiemkL5VYc2vIg7is2cgRam7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.4.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:7c:3b:b0:8d:7b:dc:c5:18:b6:d1:8f:14:af:50:1d:5b:c6:
55:3c:67:23:26:21:91:81:42:ea:12:e8:ae:6f:dd:35:54:27:
0f:50:5d:24:55:ee:f8:b7:cb:e6:0a:26:24:b4:04:74:4f:f0:
35:10:8c:5e:9a:f7:de:d6:a2:f0:26:61:c0:e3:c4:19:9f:46:
91:9e:af:5e:a0:1b:c1:41:5a:60:49:83:ad:24:2c:d5:05:91:
54:54:74:20:50:fc:5b:96:49:e9:23:de:43:15:92:86:8d:bc:
63:47:d8:03:23:5a:96:82:68:a6:cc:58:8d:db:cf:d0:42:ce:
2d:05:6c:5b:87:d8:88:bf:23:fd:e0:2f:b0:35:91:66:98:08:
54:0e:53:94:fe:57:d4:b8:77:62:3d:e7:85:16:5d:2e:bf:3a:
4a:94:61:9f:d4:31:c0:7b:be:8d:4a:df:02:46:be:0f:df:88:
15:8b:75:9a:04:ae:f2:5b:d7:18:65:14:0e:bf:db:b1:26:40:
c9:48:0d:eb:b5:61:b3:4c:65:88:51:ad:12:2a:43:e5:d9:7e:
60:9d:38:0f:ad:bd:b6:34:8a:5c:6b:c0:f9:a8:d7:65:15:a6:
97:06:02:54:db:19:4c:71:dc:e8:9d:6d:ed:ae:4e:fa:93:bd:
69:99:f5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:36 2024 by rpki-client on console-ams.rpki-client.org