Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/dJs0pzSp32E4nJczmNZdyU-O9II.roa
File: dJs0pzSp32E4nJczmNZdyU-O9II.roa (raw, json)
Hash identifier: Z1htDAj+n1MesfC2KyYfbUvBCd65g7GOceYguO5KjX0=
Subject key identifier: 74:9B:34:A7:34:A9:DF:61:38:9C:97:33:98:D6:5D:C9:4F:8E:F4:82
Certificate issuer: /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Certificate serial: 018CC4932E2184EA5E15C154637CF9F5BE80
Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/dJs0pzSp32E4nJczmNZdyU-O9II.roa
Signing time: Mon 01 Jan 2024 10:30:29 +0000
ROA not before: Mon 01 Jan 2024 10:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209114
IP address blocks: 193.33.120.0/24 maxlen: 24
212.56.58.0/23 maxlen: 24
194.31.130.0/24 maxlen: 24
2a12:6e40::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 07 Mar 2024 10:24:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:2e:21:84:ea:5e:15:c1:54:63:7c:f9:f5:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Validity
Not Before: Jan 1 10:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=749b34a734a9df61389c973398d65dc94f8ef482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ee:b9:e0:3c:6b:7f:bf:7b:cf:56:82:45:55:
47:4d:61:43:24:73:c6:d9:94:f6:49:e6:30:8a:cb:
ba:9a:3d:18:08:60:28:47:1e:f2:60:f2:5a:61:fb:
c6:02:37:3f:12:fe:1a:55:98:9a:f0:2e:41:48:ce:
27:d9:14:cc:32:78:9b:07:c2:4f:18:e9:db:c8:f8:
1a:1f:a4:4f:f3:ab:10:dd:bd:b4:a8:6f:44:a4:85:
8f:71:20:59:2c:ca:66:ac:ce:e1:b4:8e:59:3d:02:
ba:32:45:cb:cd:f8:57:91:a7:16:4c:8f:84:af:a6:
7c:24:da:6e:fc:36:1b:e4:b8:a8:26:af:30:f5:70:
29:f5:96:23:67:70:9f:48:e7:12:c3:67:ac:c9:15:
fc:ec:8d:eb:53:f2:e4:7f:41:dc:98:88:41:3b:a8:
4b:de:4c:22:8f:1f:e4:f7:b8:8f:a0:d9:1a:b4:1d:
e0:f4:63:00:39:f6:a6:eb:2a:f4:e4:c3:8e:32:67:
f9:81:cc:d5:15:2e:0a:28:90:ad:a9:d2:7b:8a:94:
cf:3e:78:56:ef:8d:c5:e5:e2:3b:8e:c1:b3:eb:72:
f1:bc:83:27:34:c1:26:e0:b9:1f:e1:30:27:66:6e:
a5:5d:73:10:ff:9c:13:db:b4:26:28:19:a6:2c:c1:
23:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9B:34:A7:34:A9:DF:61:38:9C:97:33:98:D6:5D:C9:4F:8E:F4:82
X509v3 Authority Key Identifier:
keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/dJs0pzSp32E4nJczmNZdyU-O9II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.120.0/24
194.31.130.0/24
212.56.58.0/23
IPv6:
2a12:6e40::/29
Signature Algorithm: sha256WithRSAEncryption
a9:f1:b6:45:be:6b:02:79:21:2c:95:fe:11:7f:e7:55:67:e0:
82:dc:c8:76:a9:ca:3f:ce:f2:7f:09:6a:a8:4b:40:16:b6:dd:
e8:a9:fb:f8:af:95:d0:41:7d:39:bd:ff:df:03:37:ba:93:98:
76:35:0a:c0:29:92:bd:39:d8:ce:57:86:91:0a:3a:92:ca:eb:
7f:9b:cd:27:5b:da:73:f3:25:ae:5c:c4:e8:6b:b9:fd:51:62:
85:3e:9f:25:9e:17:9a:1b:0f:60:02:da:06:f8:a2:64:b9:21:
d8:72:70:57:75:1a:af:d0:35:45:cc:5d:75:60:b6:c0:2c:52:
df:86:6c:de:c6:f8:b3:62:af:da:20:69:18:22:2b:11:11:22:
7f:e7:b3:41:37:2b:7c:20:0d:12:ef:6a:08:a2:66:2a:0a:13:
07:68:fc:2b:74:c0:64:01:ef:15:f6:99:c8:5f:c3:cf:f9:7e:
0c:04:1b:7d:57:e8:ff:99:39:1a:6e:68:d3:0f:af:10:04:c7:
d9:95:b9:e6:61:de:7b:c8:be:25:24:ae:be:ba:2b:a4:ad:db:
f7:19:f2:30:a5:b2:57:03:e6:07:9f:46:f8:1a:74:e9:3a:7a:
56:47:a4:dd:69:2b:5b:a5:fb:db:25:be:51:66:be:95:a9:1f:
6d:5a:f9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:36 2024 by rpki-client on console-fra.rpki-client.org