Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/j0MiLko3weqgkXrFr3EzmO_sR_4.roa
File: j0MiLko3weqgkXrFr3EzmO_sR_4.roa (raw, json)
Hash identifier: mtG3EtsgmseXPnrLPs7tfQDAhs01llqlVb8Ca/2dUnw=
Subject key identifier: 8F:43:22:2E:4A:37:C1:EA:A0:91:7A:C5:AF:71:33:98:EF:EC:47:FE
Certificate issuer: /CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Certificate serial: 018F97D53A03E199F9122848FA19A3372390
Authority key identifier: 3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/j0MiLko3weqgkXrFr3EzmO_sR_4.roa
Signing time: Mon 20 May 2024 21:08:04 +0000
ROA not before: Mon 20 May 2024 21:08:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 93.115.36.0/24 maxlen: 24
93.119.193.0/24 maxlen: 24
176.126.204.0/24 maxlen: 24
188.241.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 May 2024 13:19:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:97:d5:3a:03:e1:99:f9:12:28:48:fa:19:a3:37:23:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Validity
Not Before: May 20 21:08:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f43222e4a37c1eaa0917ac5af713398efec47fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:2a:d6:d7:ff:9f:27:51:42:af:5e:52:73:
2a:a5:1a:01:1a:5c:e0:14:76:34:6c:22:4f:a8:01:
55:81:44:28:69:85:47:d6:84:b2:37:46:61:41:91:
ef:a5:ed:7b:01:c2:a4:d2:3a:93:45:f7:6c:d2:28:
af:dc:2a:9f:b6:90:a8:8e:a1:3a:7a:36:fc:41:f4:
06:3c:dc:78:0a:7a:8f:ac:34:7c:90:12:d7:37:9b:
cd:d0:37:5c:f2:f8:3e:65:dc:70:66:a7:6a:30:62:
be:37:44:2d:de:ee:6f:1e:a0:86:92:9a:ce:58:db:
40:25:e6:03:aa:64:1b:83:e3:d9:31:d3:38:e6:f5:
fb:7a:fc:89:f9:39:99:80:57:f6:ce:0a:e0:85:4e:
bf:cf:b4:e1:c1:4b:f8:9d:6c:68:29:3e:bc:44:58:
73:75:2a:f8:af:de:b4:61:b9:e5:a5:4a:cf:85:7b:
7e:23:8b:d7:39:48:d4:d9:24:4d:b0:a9:3c:d8:42:
4f:64:f6:b4:21:22:0f:fc:65:40:4e:c3:25:ae:5a:
e6:6d:23:17:d1:f2:2c:eb:cf:2e:8b:73:24:20:86:
d7:50:72:33:de:b2:ce:19:e5:d6:68:1b:f0:02:c5:
c9:39:e3:54:3e:fb:05:09:18:86:59:c8:5d:b8:f8:
e0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:43:22:2E:4A:37:C1:EA:A0:91:7A:C5:AF:71:33:98:EF:EC:47:FE
X509v3 Authority Key Identifier:
keyid:3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/j0MiLko3weqgkXrFr3EzmO_sR_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.36.0/24
93.119.193.0/24
176.126.204.0/24
188.241.192.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:ee:e5:68:ba:fd:43:ee:89:7b:d0:62:7f:b0:42:aa:75:5f:
bf:0c:94:02:fa:19:a0:c1:31:ef:fa:20:4c:cd:84:5f:a3:44:
2d:22:b4:b0:aa:2e:8d:08:61:62:58:9c:6d:f1:cf:c4:ef:76:
9a:51:7b:99:3c:31:3e:bd:97:3e:e8:f5:f5:21:e5:0e:f1:a4:
a3:15:ac:34:11:9c:03:9e:e5:f1:a3:12:c0:06:c3:6a:70:b8:
4a:bd:2c:46:23:89:2f:04:77:40:4b:3e:9c:75:13:00:a2:b8:
27:bb:f0:97:e2:3f:71:36:2f:42:95:1a:3e:d4:08:12:e2:d6:
be:34:06:6d:8b:de:7d:cf:6c:e1:64:79:c9:1b:77:00:57:b6:
c7:75:6f:cd:58:8b:7c:1d:2b:ab:2a:f9:3d:56:46:69:34:d1:
71:19:53:c8:9d:fa:db:3a:8b:2a:8f:e5:de:9d:ab:83:7f:5a:
dd:ad:aa:1c:9c:32:74:db:7e:66:18:bf:d0:b5:d4:e2:0e:9b:
ca:b9:c7:48:00:19:54:0d:18:fa:bb:10:16:18:22:72:0c:de:
75:54:c6:db:90:a9:87:0a:ee:b3:40:a1:79:f4:f9:c9:1f:88:
68:2f:2e:47:8a:1a:60:65:11:b5:34:e2:3d:ef:e9:a4:8b:ef:
fa:10:c7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:05 2024 by rpki-client on console-ams.rpki-client.org