Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/00dqWW6mwntwEIF4RFOZEFWk2GY.roa
File: 00dqWW6mwntwEIF4RFOZEFWk2GY.roa (raw, json)
Hash identifier: 34JbC8+jOolBdmGEtDvk6g7GnX6OLkCiSiME41msN+g=
Subject key identifier: D3:47:6A:59:6E:A6:C2:7B:70:10:81:78:44:53:99:10:55:A4:D8:66
Certificate issuer: /CN=269dcdcae3583110e326c5ec18e9dd578febacaf
Certificate serial: 0192DE32C1EC03B2A386F87B488ABD9ABA2B
Authority key identifier: 26:9D:CD:CA:E3:58:31:10:E3:26:C5:EC:18:E9:DD:57:8F:EB:AC:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jp3NyuNYMRDjJsXsGOndV4_rrK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/00dqWW6mwntwEIF4RFOZEFWk2GY.roa
Signing time: Wed 30 Oct 2024 16:12:01 +0000
ROA not before: Wed 30 Oct 2024 16:12:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215057
IP address blocks: 193.24.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:de:32:c1:ec:03:b2:a3:86:f8:7b:48:8a:bd:9a:ba:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269dcdcae3583110e326c5ec18e9dd578febacaf
Validity
Not Before: Oct 30 16:12:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3476a596ea6c27b701081784453991055a4d866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e5:c8:4b:d4:a6:61:c2:ad:31:4a:ce:e0:cd:
21:12:b3:28:b6:37:a7:67:a1:f4:ab:6c:0b:b0:e1:
8d:6b:23:3c:2b:18:07:19:95:18:d1:b7:a3:51:a5:
cc:31:41:f1:ec:84:56:ff:d2:0b:17:27:e4:85:e3:
83:be:41:d8:a0:74:9e:d9:bf:e3:fe:29:df:62:6a:
96:71:b0:57:90:f8:5e:1e:99:56:86:45:37:95:44:
7f:1e:15:f6:e8:82:66:ea:f0:65:bc:44:63:0e:37:
be:15:23:4f:be:fb:49:a1:01:4d:e6:e1:a9:6d:f2:
05:b4:67:d4:fc:33:dc:73:2b:6d:c4:b4:60:c5:59:
9f:00:67:7c:bf:b9:1d:b9:1e:b5:54:e1:f5:7e:2b:
e3:d4:a0:74:d8:f6:01:4c:b5:45:4d:5e:f5:ec:f0:
c1:9d:0f:93:5b:f9:65:38:50:f3:e1:ad:b6:c5:77:
ce:4b:09:83:5e:bf:6f:c1:c7:5b:cf:f6:f0:5f:63:
4d:fd:2c:67:56:cc:6f:25:c5:0d:21:59:c1:0e:3f:
7b:57:00:94:36:3d:b6:4e:4c:b4:49:16:f2:e9:34:
30:8c:ef:8d:de:88:59:d5:ba:37:70:08:71:f4:d0:
a4:38:e8:2a:28:e6:3b:35:69:94:87:68:1b:4b:36:
1b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:47:6A:59:6E:A6:C2:7B:70:10:81:78:44:53:99:10:55:A4:D8:66
X509v3 Authority Key Identifier:
keyid:26:9D:CD:CA:E3:58:31:10:E3:26:C5:EC:18:E9:DD:57:8F:EB:AC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jp3NyuNYMRDjJsXsGOndV4_rrK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/00dqWW6mwntwEIF4RFOZEFWk2GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/Jp3NyuNYMRDjJsXsGOndV4_rrK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.124.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:1b:b6:e8:48:27:88:d6:61:e4:db:6a:20:ef:8d:32:5a:9b:
7c:10:1b:6d:3b:06:a3:8a:28:10:9d:2a:a1:5d:99:5f:a5:9c:
9e:10:8b:6f:de:30:97:37:56:d5:d5:90:27:75:9b:80:01:e7:
22:d2:d2:14:06:42:e4:32:e6:b5:b4:b5:28:75:94:f6:7f:8f:
0f:dc:ba:4d:72:1f:86:bb:64:99:4d:e0:4c:c0:c3:e1:20:ac:
0f:98:78:9e:c8:45:11:47:8f:65:28:78:d4:8a:6a:7e:14:53:
fd:5f:06:8a:c6:62:ff:28:0c:e6:bc:74:26:c8:df:45:66:3b:
d2:12:8c:65:cf:69:d7:18:59:0a:01:4d:67:04:e1:bf:7d:df:
3e:86:1c:44:56:e3:5f:c1:52:e4:dd:1f:95:04:0f:09:08:52:
8c:6f:2d:48:49:1a:d3:f1:2d:c5:09:57:b4:ec:45:f2:c9:16:
50:bb:09:2a:c1:8d:cc:bc:26:31:2b:66:ae:42:bd:24:f9:80:
f7:c0:66:f8:06:2e:ad:4b:61:7b:4e:60:73:47:ab:77:b6:10:
da:ca:93:5c:8f:79:8f:08:0b:63:0d:e5:7c:28:79:22:07:38:
44:de:7b:ca:44:77:9b:b5:66:8e:f0:e7:4d:cf:29:2a:6b:b6:
8f:44:91:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:04 2025 by rpki-client