Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/kEkSU55GK4fIOVW_lezimcbCyuI.roa
File: kEkSU55GK4fIOVW_lezimcbCyuI.roa (raw, json)
Hash identifier: +YFP9vUTqsb8XP2di14X7MSR41HwjFwBQhlM2R53DUM=
Subject key identifier: 90:49:12:53:9E:46:2B:87:C8:39:55:BF:95:EC:E2:99:C6:C2:CA:E2
Certificate issuer: /CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
Certificate serial: 018AADCEDEAC3EADBF84886D5F21E523F8A9
Authority key identifier: C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/kEkSU55GK4fIOVW_lezimcbCyuI.roa
Signing time: Tue 19 Sep 2023 14:18:50 +0000
ROA not before: Tue 19 Sep 2023 14:18:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49699
IP address blocks: 193.68.112.0/24 maxlen: 24
193.68.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:ce:de:ac:3e:ad:bf:84:88:6d:5f:21:e5:23:f8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
Validity
Not Before: Sep 19 14:18:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=904912539e462b87c83955bf95ece299c6c2cae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:91:75:a1:92:df:56:49:78:ce:5e:58:3c:d9:
43:0b:c7:45:bd:5a:16:f5:90:b8:c7:c8:a3:6f:0d:
37:45:db:9f:0c:73:fe:ae:9e:75:93:fb:32:3c:be:
12:31:0b:f2:3c:2c:6c:7a:de:97:ba:37:37:33:33:
dc:04:6c:e7:87:39:10:11:d6:05:5e:a2:24:17:75:
f1:cf:ef:d3:b5:dc:bc:9d:0f:f8:33:fb:88:0b:46:
54:c9:0f:e4:04:70:29:74:06:ed:cb:c1:a3:2e:77:
da:88:d5:79:70:2f:71:8b:e2:73:fe:e1:ce:6e:ad:
8b:e8:4e:9c:d1:71:60:e4:dc:96:c8:b7:0f:aa:50:
19:00:02:e7:9c:ed:54:bd:10:41:a0:7e:d8:fa:69:
94:0b:17:64:75:87:8f:76:ef:f1:6e:c6:eb:47:7b:
fc:3a:1b:17:ba:41:a0:fd:40:83:fb:48:18:d1:ef:
c9:b2:5e:d5:9d:a3:e5:9f:2f:11:9b:12:63:b0:d3:
64:de:fd:5b:5e:4d:dc:de:f5:7b:92:1a:d6:e7:10:
9f:09:55:4b:ea:5c:b2:25:dc:c2:55:21:a4:0d:33:
25:ef:00:dc:a3:4b:77:05:1b:a6:4b:41:b1:e0:06:
15:17:87:ed:e1:35:39:15:1f:b9:0d:d1:34:f0:86:
5b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:49:12:53:9E:46:2B:87:C8:39:55:BF:95:EC:E2:99:C6:C2:CA:E2
X509v3 Authority Key Identifier:
keyid:C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/kEkSU55GK4fIOVW_lezimcbCyuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.68.112.0/23
Signature Algorithm: sha256WithRSAEncryption
57:90:b0:91:24:72:f3:eb:98:a7:2e:4f:0d:6a:57:7a:fc:72:
53:c2:4e:42:78:10:7d:2a:20:11:f3:a3:d5:42:a7:b0:7a:30:
fa:42:42:c5:f0:e4:94:93:a2:46:13:71:56:f4:fd:be:60:7f:
ce:e9:18:88:47:ba:ab:47:57:aa:b9:62:03:55:32:9b:64:a8:
76:e9:71:57:c7:09:8d:76:fc:c2:7a:07:29:3b:3a:ed:fa:ab:
ff:96:28:b7:63:1c:a1:9f:a1:c2:c1:60:fc:f7:cf:a7:43:12:
1a:e6:70:7d:48:4b:8f:d6:47:9d:7b:fe:90:7a:d7:5d:f1:8d:
64:39:de:4f:d2:6e:e8:7f:96:4d:ee:b5:94:5a:af:f4:a7:1d:
9d:bb:62:d3:0a:01:24:35:fc:e1:ac:78:57:73:3f:3f:74:45:
0d:99:66:08:c1:17:54:4c:33:87:cf:f8:36:f6:7c:dc:81:bb:
fa:81:64:55:77:ea:b7:63:12:54:05:1b:0f:f7:cc:eb:13:1a:
a6:22:33:9d:fa:58:b1:e2:7b:2d:68:15:ce:0c:f4:a0:93:72:
0b:05:b9:f1:75:60:c2:b0:c8:49:97:14:e8:d1:19:91:87:5c:
2b:67:ce:1e:97:e1:0b:0b:b1:bb:74:cd:ae:2e:61:21:fa:62:
e6:ca:f4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:34 2024 by rpki-client on console-fra.rpki-client.org