Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/n5V6BPeCn4OZwW6VFBaI4NDgxcQ.roa
File: n5V6BPeCn4OZwW6VFBaI4NDgxcQ.roa (raw, json)
Hash identifier: iRtLFQvhExyao08rW36EHKLmrYbugBaCsnr6f5geiCs=
Subject key identifier: 9F:95:7A:04:F7:82:9F:83:99:C1:6E:95:14:16:88:E0:D0:E0:C5:C4
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802F7A9C3053881FE062FFB3DAF8357
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/n5V6BPeCn4OZwW6VFBaI4NDgxcQ.roa
Signing time: Tue 02 Jan 2024 02:31:26 +0000
ROA not before: Tue 02 Jan 2024 02:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60068
IP address blocks: 193.181.192.0/24 maxlen: 24
193.181.193.0/24 maxlen: 24
193.235.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 15:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:f7:a9:c3:05:38:81:fe:06:2f:fb:3d:af:83:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f957a04f7829f8399c16e95141688e0d0e0c5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:81:1d:e7:f2:2c:ef:67:69:58:61:f9:ae:72:
fb:c3:71:2b:40:1c:68:ef:99:3b:e4:ad:c6:4a:ce:
ca:30:d8:d8:95:db:51:b8:83:ca:16:71:f0:b1:52:
c6:b8:a6:76:b0:f9:75:38:bc:ec:4f:d3:a2:1d:20:
ab:50:1c:a2:8e:71:09:4b:e9:d8:e9:97:df:6c:7d:
89:c4:be:15:37:2c:ee:38:96:8c:b9:93:29:10:93:
e7:e2:7c:bc:01:85:93:9d:64:8f:a7:4b:6f:37:06:
b1:91:55:f4:8a:20:5b:8f:3c:3b:81:94:17:c2:c6:
08:b3:0e:ca:31:d8:74:e8:6a:d4:4c:b5:07:d3:dc:
a5:d6:ac:7c:a3:62:84:95:83:fd:85:8a:57:f6:37:
b9:08:e0:ee:4a:ca:38:07:d6:68:6f:6f:46:69:9b:
24:f5:95:68:14:26:5e:ad:f8:83:60:02:e9:f5:c7:
8d:df:61:d2:e6:75:70:b2:44:15:0c:25:7a:6f:d8:
3a:51:2a:41:38:6f:45:b8:d4:f1:12:bc:ec:7f:df:
c7:33:9a:26:a7:f7:90:30:1c:46:9a:89:22:18:7e:
1a:d4:c4:17:09:18:54:6b:b7:59:f2:70:3f:64:61:
56:a1:b2:e4:f6:b9:cb:07:5c:74:75:a2:33:ca:13:
6b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:95:7A:04:F7:82:9F:83:99:C1:6E:95:14:16:88:E0:D0:E0:C5:C4
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/n5V6BPeCn4OZwW6VFBaI4NDgxcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.192.0/23
193.235.32.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:e4:31:82:bd:fb:d8:2f:b3:46:ef:29:d8:54:9b:bf:9e:12:
80:b5:25:97:c5:17:5f:72:b1:6a:e4:b8:1f:db:3f:ec:fa:5e:
45:c7:65:f3:c8:63:b5:3b:f6:6f:4e:97:ae:df:c3:5c:d7:89:
b3:1f:ae:2d:7a:db:88:48:8f:f8:54:e1:65:2d:08:e2:6c:f9:
90:e6:bc:14:45:a2:ef:13:a4:4c:74:89:5f:d8:92:07:d8:98:
ac:de:67:04:4f:fe:c6:8c:c0:70:d2:a8:2c:b1:e7:a6:06:02:
09:4c:04:9c:5e:0e:b5:29:76:96:02:55:b2:c2:57:43:cf:c0:
70:c8:13:5a:15:22:8a:5b:b9:e9:8d:84:49:86:82:79:99:49:
22:bd:58:64:d7:11:25:28:43:fc:f4:f1:ff:e3:0a:db:52:d8:
ce:85:8d:51:73:c3:39:d8:87:84:3d:7c:f4:5b:9d:85:f5:5e:
b5:69:2b:df:de:22:6f:aa:77:df:cd:d7:bc:f4:d8:b5:6c:0f:
84:c1:69:35:2a:72:97:a5:16:77:5b:fc:a5:84:4b:7f:b7:d0:
d1:22:a8:6c:39:50:88:42:82:32:23:b9:98:33:b1:c2:82:b0:
4e:fd:22:9b:2d:1f:62:35:29:7e:1f:8d:ea:c1:35:bf:f8:c1:
e1:5a:1e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 18:16:57 2024 by rpki-client on console-fra.rpki-client.org