Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/o5syu4Js5J3ao9R5iY5DQdidgzg.roa
File: o5syu4Js5J3ao9R5iY5DQdidgzg.roa (raw, json)
Hash identifier: P41h0k9z+fllp5QETWasSMNBdr0fFK4lvcZDp+vs0Sc=
Subject key identifier: A3:9B:32:BB:82:6C:E4:9D:DA:A3:D4:79:89:8E:43:41:D8:9D:83:38
Certificate issuer: /CN=11e6f77193f2764ba894285dd2f64f1226fd9126
Certificate serial: 01856F26C719946E63111FB4CA77A7B74AC9
Authority key identifier: 11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/o5syu4Js5J3ao9R5iY5DQdidgzg.roa
Signing time: Sun 01 Jan 2023 21:04:50 +0000
ROA not before: Sun 01 Jan 2023 21:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50357
IP address blocks: 193.106.124.0/22 maxlen: 22
193.106.124.0/23 maxlen: 23
193.106.126.0/24 maxlen: 24
193.106.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:c7:19:94:6e:63:11:1f:b4:ca:77:a7:b7:4a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e6f77193f2764ba894285dd2f64f1226fd9126
Validity
Not Before: Jan 1 21:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a39b32bb826ce49ddaa3d479898e4341d89d8338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:09:3e:fc:f3:03:cd:28:a7:c2:a9:b8:b6:34:
aa:1a:59:d7:05:c5:1c:dc:ed:db:8e:12:c1:ec:93:
90:7d:01:8a:f5:90:77:58:a2:09:97:a7:96:08:ea:
22:e2:9e:14:1a:7c:4f:d3:81:39:51:03:3b:63:3f:
99:8d:89:f7:6b:f7:14:2f:e7:d0:e1:c9:6f:63:0a:
d4:c6:70:d1:bb:eb:3b:c7:8a:f7:98:da:c9:20:db:
0b:2c:89:7f:9c:a9:0b:a3:be:0d:07:dd:da:c4:da:
c0:2e:1a:cc:6f:3b:91:a4:df:d3:20:4a:cb:7e:3d:
bc:a1:af:4b:f9:ab:66:8d:20:7e:46:10:e3:7c:f4:
9e:43:29:4a:76:55:5a:bc:d1:c8:d5:9e:38:76:c9:
37:2c:ef:18:eb:59:bf:60:b1:cd:b0:3d:1c:15:51:
71:a9:94:ed:9f:86:b9:b7:e3:f7:90:2a:93:2c:97:
b5:73:b7:2d:31:52:3f:0e:41:37:b7:ab:9d:57:c3:
5b:bb:b7:2e:c6:8b:25:21:7d:6a:5c:50:15:2d:10:
75:9d:64:b7:3f:87:a8:57:4e:be:2e:14:d6:18:aa:
c1:7c:bb:0e:de:ec:bf:5f:1a:9d:b5:cc:83:bd:ba:
9c:0b:8a:9e:6b:df:e1:a3:49:97:42:6f:9b:73:19:
a4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9B:32:BB:82:6C:E4:9D:DA:A3:D4:79:89:8E:43:41:D8:9D:83:38
X509v3 Authority Key Identifier:
keyid:11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/o5syu4Js5J3ao9R5iY5DQdidgzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.124.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:38:61:da:42:74:6f:f7:bc:e3:5f:60:42:27:52:38:84:af:
93:40:d2:0f:73:9f:16:47:92:15:5d:d3:22:0c:27:ee:20:56:
86:24:2a:19:14:92:e5:b4:08:7f:7a:6c:5d:12:d1:6d:a5:95:
6a:11:91:62:45:54:a4:49:ec:f7:fc:e9:6f:de:e9:fe:81:bf:
ba:28:8f:ba:3d:ac:68:78:d9:34:b9:23:af:83:b7:75:26:63:
6d:0f:32:6c:55:6c:e6:1c:73:6b:25:d7:be:25:40:ea:1f:54:
bc:13:94:4b:ca:a7:df:95:94:d3:70:c8:93:91:f6:2d:6c:7a:
80:c1:0a:57:03:b2:12:5d:f2:f6:e7:82:51:bd:fa:7e:d8:35:
2f:96:fa:fb:5c:89:ac:2a:3f:18:50:82:f7:a3:ad:86:f0:a0:
75:c5:42:4c:76:b9:f6:6b:9e:e0:ca:1d:e3:fd:da:79:c5:59:
29:c2:29:9b:f6:9d:ce:be:dc:04:ed:95:1f:da:5a:90:47:2d:
5c:01:bf:0e:91:94:65:d5:87:22:9a:6b:5b:c6:4d:0d:f4:b4:
1a:20:66:15:78:02:e1:ac:83:ce:5b:e0:29:77:16:9d:11:54:
a9:64:58:5d:2a:df:76:8f:ed:6b:63:0c:65:37:ff:79:37:c2:
50:9b:9b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:19 2024 by rpki-client on console-fra.rpki-client.org