Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/SW4uaiGucnrJoboz5tdMbD-js4k.roa
File: SW4uaiGucnrJoboz5tdMbD-js4k.roa (raw, json)
Hash identifier: 9xvQ44jj0Zlonrolhklsht06qN1nS8xuiZ2XZk04wIk=
Subject key identifier: 49:6E:2E:6A:21:AE:72:7A:C9:A1:BA:33:E6:D7:4C:6C:3F:A3:B3:89
Certificate issuer: /CN=0d026a518947dd5bd3981ed0669c11c5621d0475
Certificate serial: 018CC726909AA6F9A66481424A556C31E571
Authority key identifier: 0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/SW4uaiGucnrJoboz5tdMbD-js4k.roa
Signing time: Mon 01 Jan 2024 22:30:42 +0000
ROA not before: Mon 01 Jan 2024 22:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5089
IP address blocks: 193.39.4.0/24 maxlen: 24
193.39.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 10:32:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:90:9a:a6:f9:a6:64:81:42:4a:55:6c:31:e5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d026a518947dd5bd3981ed0669c11c5621d0475
Validity
Not Before: Jan 1 22:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=496e2e6a21ae727ac9a1ba33e6d74c6c3fa3b389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7a:3d:13:2d:b4:0d:94:c0:53:bf:06:2b:02:
65:0c:4e:de:4f:e0:40:55:8e:92:fd:aa:a6:ef:79:
29:0e:93:16:57:a5:c5:29:73:c1:c4:c3:b7:f1:8e:
53:cd:cb:ee:ad:d7:8f:f5:68:fc:28:09:40:c1:d4:
2a:ef:17:9c:28:02:0d:43:23:5d:45:9c:ae:55:cc:
a6:19:a0:c4:c4:52:18:b2:33:88:f6:a4:9e:44:46:
b1:46:b6:a3:00:e0:b5:30:a3:2f:e0:da:0b:4d:0b:
c1:bc:3a:f6:4f:0e:e7:7d:45:e4:84:6c:e0:00:a9:
ee:6e:bf:5d:e0:00:ca:bf:a5:22:c4:a5:d1:b5:76:
7f:c0:88:36:ba:9d:d6:af:4e:b8:e8:61:09:fb:7a:
97:4e:5f:08:43:ee:b7:7d:59:e5:87:8c:5b:9d:74:
bc:c6:7d:4d:9b:ee:18:9f:02:cd:1a:a6:4b:5f:60:
fe:2b:ee:ac:dd:62:ff:ac:7b:5f:b7:ba:30:1e:43:
36:ec:b3:2d:72:33:e9:41:fe:57:51:02:79:15:4b:
9d:b3:b7:9d:d1:12:bb:51:e4:0c:b4:8d:db:c7:7a:
70:05:32:28:03:f2:fc:bc:23:22:ba:8f:1d:e6:76:
4c:28:f3:8f:71:23:75:1b:97:1d:b8:ea:83:76:8c:
80:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6E:2E:6A:21:AE:72:7A:C9:A1:BA:33:E6:D7:4C:6C:3F:A3:B3:89
X509v3 Authority Key Identifier:
keyid:0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/SW4uaiGucnrJoboz5tdMbD-js4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.4.0/23
Signature Algorithm: sha256WithRSAEncryption
56:4f:76:31:40:01:e2:45:f8:af:3b:fe:0b:e2:e3:9d:56:13:
0d:78:77:6b:6c:5f:93:3f:00:05:26:8a:80:47:2a:f7:1d:6b:
94:bd:32:a5:d5:9b:2c:8d:cc:12:35:98:01:e2:40:ce:39:e1:
77:fc:6f:b0:97:4d:4b:02:ec:2f:b8:04:96:a8:90:36:5a:32:
8c:09:53:f7:85:d7:8b:28:7f:34:f2:53:86:cc:93:05:2b:94:
03:0a:d0:2c:54:21:36:3c:2d:5f:4c:7a:aa:94:3b:99:a6:f5:
67:c8:49:22:97:a3:4f:d6:dc:73:58:12:1b:54:78:92:52:fe:
0f:65:1a:a7:ed:21:0a:20:43:e4:4d:58:c8:e3:f0:3f:f8:f0:
ba:5b:31:ae:b6:c2:9e:dc:d8:ba:09:b7:74:a7:0a:6c:2c:4d:
59:35:d3:17:d1:66:50:b8:85:03:87:95:86:cf:20:fb:58:3d:
7f:2f:86:13:9e:d7:3c:6a:d6:10:ad:5e:ee:a1:bf:7f:94:93:
57:07:65:02:80:34:ff:b1:40:03:5b:fc:25:c0:94:75:be:d7:
94:9d:0e:bd:af:13:4b:e7:ba:71:8a:5f:02:fb:bf:58:9c:93:
a2:9b:0c:b3:a3:1b:af:0f:a2:46:7a:51:b3:66:9e:ba:5a:6b:
42:28:0e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:36 2024 by rpki-client on console-ams.rpki-client.org