Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d28e01-ad19-48e2-9689-e659d1af68fe/1/68BNZcTTUFtUpMUA5XEhoPdrmxI.roa
File: 68BNZcTTUFtUpMUA5XEhoPdrmxI.roa (raw, json)
Hash identifier: J7Os9tUJgwo4JE6OCnX1C35Dazq0SDISPr39HpKCN8o=
Subject key identifier: EB:C0:4D:65:C4:D3:50:5B:54:A4:C5:00:E5:71:21:A0:F7:6B:9B:12
Certificate issuer: /CN=4568316500ba6538420a9d55c65d9c88dd32a99e
Certificate serial: 018EE63D4BA69C622789B352F9DBE86292E3
Authority key identifier: 45:68:31:65:00:BA:65:38:42:0A:9D:55:C6:5D:9C:88:DD:32:A9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWgxZQC6ZThCCp1Vxl2ciN0yqZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/d28e01-ad19-48e2-9689-e659d1af68fe/1/68BNZcTTUFtUpMUA5XEhoPdrmxI.roa
Signing time: Tue 16 Apr 2024 09:29:20 +0000
ROA not before: Tue 16 Apr 2024 09:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12325
IP address blocks: 194.32.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 May 2024 06:56:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:3d:4b:a6:9c:62:27:89:b3:52:f9:db:e8:62:92:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4568316500ba6538420a9d55c65d9c88dd32a99e
Validity
Not Before: Apr 16 09:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebc04d65c4d3505b54a4c500e57121a0f76b9b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fa:28:e0:9e:97:fe:6c:62:e9:6a:ae:bf:1d:
b9:13:89:45:ff:24:58:7c:36:7a:af:5a:29:66:6e:
27:07:8a:15:78:b3:e5:36:7c:66:c9:1b:d8:ef:10:
ad:b9:94:03:ba:d8:81:e6:7c:94:cd:80:a5:fe:ae:
4a:34:47:e9:a4:33:5c:c9:a3:d6:3c:c5:91:5b:f1:
06:a0:5c:2f:5d:ab:e2:45:18:9a:d8:98:ad:bc:1a:
6d:17:fd:b5:03:65:7f:c3:ad:48:e8:54:6c:38:48:
e4:a9:4c:95:86:4c:bf:e1:c4:ec:ea:85:10:29:a5:
bc:d6:0c:44:5b:d5:9e:f8:ed:17:4d:52:02:ed:d0:
63:98:3f:ff:33:c1:41:47:f1:21:14:db:5f:f0:43:
96:ff:11:05:f7:5b:54:02:84:f8:22:08:b4:d9:5f:
42:40:7e:a3:70:e7:e7:8a:86:c5:88:d0:ac:96:01:
46:19:ed:9a:7f:40:52:86:d4:ef:51:e4:ab:b4:6e:
84:c4:4c:a2:d3:00:a4:24:0b:c4:26:d7:a0:f8:12:
72:cc:f9:5a:cf:57:63:97:19:fc:84:48:11:9d:e2:
7d:e7:a6:15:62:79:86:c3:3e:c9:02:5a:4d:8b:d2:
e5:9f:8d:6a:01:27:1e:84:8d:c9:e6:4d:bd:2b:8b:
8a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C0:4D:65:C4:D3:50:5B:54:A4:C5:00:E5:71:21:A0:F7:6B:9B:12
X509v3 Authority Key Identifier:
keyid:45:68:31:65:00:BA:65:38:42:0A:9D:55:C6:5D:9C:88:DD:32:A9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWgxZQC6ZThCCp1Vxl2ciN0yqZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d28e01-ad19-48e2-9689-e659d1af68fe/1/68BNZcTTUFtUpMUA5XEhoPdrmxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d28e01-ad19-48e2-9689-e659d1af68fe/1/RWgxZQC6ZThCCp1Vxl2ciN0yqZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.82.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:32:ef:54:f3:f6:47:5f:fc:81:18:de:1f:73:d4:17:15:32:
b1:57:17:bf:44:73:83:79:22:6d:9f:c6:7c:be:da:d1:8f:41:
a7:20:c2:c2:49:91:1d:0e:d9:e6:51:8c:68:57:b7:02:83:44:
0d:0b:b1:68:84:c1:95:1e:81:28:0c:d9:8b:cc:54:7e:50:fd:
dd:ec:af:f3:57:ad:05:e3:26:69:2c:fe:55:af:68:b2:25:95:
09:42:7d:81:9a:43:2c:50:39:70:c1:3a:96:44:40:c7:e7:07:
e2:f9:74:e6:22:34:27:6c:1a:45:31:ce:11:31:e8:9d:47:56:
af:b0:f2:56:96:03:43:f3:81:89:2f:bc:2d:96:19:90:98:c6:
38:e3:45:19:5a:d2:9e:f7:c4:2a:4d:a7:cb:f3:1f:b8:ca:5b:
e3:ff:11:65:cd:7a:c2:73:32:85:29:0f:2b:81:14:6e:3f:9c:
f5:b3:84:be:78:fa:02:ff:ef:37:33:54:f6:a6:fb:18:3c:2d:
41:8d:25:6f:81:42:68:bb:43:67:ca:11:5b:6c:1a:2d:3c:97:
20:71:94:19:0a:30:d7:22:b5:48:30:11:20:79:80:2b:4c:2c:
19:1c:51:64:b9:97:32:4f:c6:4b:7e:76:d6:91:25:e2:9b:e6:
45:93:aa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:53 2024 by rpki-client on console-ams.rpki-client.org