Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/1j5Ed3ZxD11IzSdRV7ZGY5TQ6yU.roa
File: 1j5Ed3ZxD11IzSdRV7ZGY5TQ6yU.roa (raw, json)
Hash identifier: AJC+tp0KdAqTL6RlSPVaZfoyoESZhvjCeXcnIY//gQg=
Subject key identifier: D6:3E:44:77:76:71:0F:5D:48:CD:27:51:57:B6:46:63:94:D0:EB:25
Certificate issuer: /CN=29187f811597dd03513be42f43155bc15a3a0b3f
Certificate serial: 018623C4DC4BC10DD69ED4DE5535D7D7A192
Authority key identifier: 29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/1j5Ed3ZxD11IzSdRV7ZGY5TQ6yU.roa
Signing time: Sun 05 Feb 2023 22:49:09 +0000
ROA not before: Sun 05 Feb 2023 22:49:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49239
IP address blocks: 193.17.179.0/24 maxlen: 24
193.17.70.0/24 maxlen: 24
193.17.193.0/24 maxlen: 24
193.17.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 Feb 2023 22:59:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:23:c4:dc:4b:c1:0d:d6:9e:d4:de:55:35:d7:d7:a1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29187f811597dd03513be42f43155bc15a3a0b3f
Validity
Not Before: Feb 5 22:49:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d63e447776710f5d48cd275157b6466394d0eb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d7:14:ec:27:4c:95:4e:74:f0:36:84:21:da:
7e:be:b2:6a:04:59:62:2a:ac:ed:87:f9:45:6e:fe:
a0:18:87:ea:59:a9:15:12:fc:61:80:b8:19:3e:f8:
b8:22:51:fa:4e:a6:5c:bb:5e:63:ba:32:a1:14:55:
c6:08:cf:0b:dc:db:0e:73:39:5f:77:f2:dc:81:72:
45:43:7e:b8:82:b3:91:ef:61:bb:53:88:17:4e:49:
bd:be:c2:18:29:7f:19:63:d8:0d:d9:5f:c4:78:8f:
25:b4:a1:7d:f5:75:1c:72:81:ea:48:ad:47:6d:e3:
19:13:a8:bf:82:13:89:d2:ee:0e:34:2d:34:d5:91:
bf:bb:c0:9c:9d:0e:d7:83:c5:e0:ec:50:8d:43:7b:
a1:46:a9:45:67:41:3f:ed:16:60:09:a8:9b:42:32:
94:a2:0b:f9:bb:0f:c6:14:4f:6e:23:b0:ca:80:75:
04:9f:f3:d3:52:ea:c3:f5:70:40:b2:f9:9b:6b:b7:
e6:40:59:4d:39:1f:91:e1:9e:c5:03:c9:f6:04:b5:
ed:cf:77:1c:96:bf:3f:81:a6:6e:8a:5b:18:3a:ff:
ef:25:95:e9:a5:9a:e3:7f:84:49:8d:dc:46:ce:9e:
70:2f:c4:a2:35:19:98:4e:f2:60:22:db:03:b5:e7:
ca:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3E:44:77:76:71:0F:5D:48:CD:27:51:57:B6:46:63:94:D0:EB:25
X509v3 Authority Key Identifier:
keyid:29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/1j5Ed3ZxD11IzSdRV7ZGY5TQ6yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.70.0/24
193.17.179.0/24
193.17.193.0/24
193.17.220.0/24
Signature Algorithm: sha256WithRSAEncryption
88:b8:7b:4a:8d:9d:e7:01:6e:f7:d5:73:73:27:f2:85:9f:5d:
87:f2:00:e8:15:23:05:3e:8c:ef:99:7e:c4:44:00:0d:f9:d2:
cc:65:15:2a:54:59:0e:bb:2e:7f:4a:39:82:1a:f5:47:31:dd:
9d:74:ed:72:a2:a2:c0:5e:51:c1:ef:5b:10:03:db:a8:8f:e1:
a6:67:d1:62:0b:c6:9e:41:b9:72:c2:14:46:2a:35:66:cf:76:
4c:10:08:b9:b8:10:af:01:c7:9d:29:85:40:9f:20:30:0d:50:
0b:71:db:d1:be:02:90:0b:3b:3e:04:e3:0e:19:09:91:d5:60:
44:8b:38:9c:84:11:53:ce:80:35:99:e9:84:0b:f9:77:51:f7:
c5:63:c5:5d:38:56:c7:a0:b3:21:06:25:d8:e7:cd:c6:8c:51:
d8:28:47:0e:13:bb:ca:84:4d:8f:34:8e:f0:24:64:da:22:61:
f2:e8:7d:f4:7e:3e:d7:a5:22:f2:81:d6:05:e9:f0:40:ae:a9:
80:98:73:07:13:f1:db:bf:ec:09:68:17:10:c3:fd:b5:9d:3d:
37:57:be:58:86:c8:f6:81:82:c8:75:e6:b0:95:bb:5c:d3:28:
70:ad:e0:3e:a5:bb:68:1a:cc:c0:36:e1:11:27:2b:85:14:74:
1e:3d:ea:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:29 2024 by rpki-client on console-fra.rpki-client.org