Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/_5RtKzW4pf0nCoTi8n1LOH6zIgU.roa
File: _5RtKzW4pf0nCoTi8n1LOH6zIgU.roa (raw, json)
Hash identifier: ifto0VtPbJNonDYHfvXO2dS8IAXx6lqZ6zdZ5M95fOo=
Subject key identifier: FF:94:6D:2B:35:B8:A5:FD:27:0A:84:E2:F2:7D:4B:38:7E:B3:22:05
Certificate issuer: /CN=379cd67c0c18959239358553229e91f543cc5a5f
Certificate serial: 01856BEEB532FD6437C86D01702DD8744F2C
Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/_5RtKzW4pf0nCoTi8n1LOH6zIgU.roa
Signing time: Sun 01 Jan 2023 06:04:44 +0000
ROA not before: Sun 01 Jan 2023 06:04:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6453
IP address blocks: 193.142.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:b5:32:fd:64:37:c8:6d:01:70:2d:d8:74:4f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f
Validity
Not Before: Jan 1 06:04:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff946d2b35b8a5fd270a84e2f27d4b387eb32205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d0:53:ca:2b:3d:38:99:4a:bb:25:77:de:1f:
b6:fe:b1:ab:d5:88:ce:72:21:08:5a:7b:53:75:f7:
b4:1b:d6:fe:e0:af:8b:08:c9:7a:ab:c6:1d:ee:82:
77:f2:f8:c1:3f:7f:9f:50:b2:f5:db:34:ad:2a:bb:
1a:e9:43:d9:9b:7c:71:55:c1:9e:e8:c7:f5:fd:e3:
e8:21:40:cb:30:f7:4c:c3:a8:9f:0e:e4:4e:3b:b6:
d6:12:6e:a3:eb:84:6e:d6:b7:c5:7e:e4:62:2a:69:
64:77:b6:d3:f6:41:0d:a7:bb:74:10:20:a3:c0:71:
cf:d6:86:45:c1:af:c0:53:e4:68:8a:67:18:f8:5f:
ea:12:03:e9:2c:3b:61:26:f8:1a:1e:1c:6e:e4:50:
9b:08:aa:29:ae:bb:2c:1e:ee:86:b1:38:ab:34:66:
f8:e1:2c:0e:b4:34:00:84:da:95:f7:8e:3f:cb:48:
65:48:e3:0a:03:55:ef:27:c1:86:15:a0:13:9c:56:
9c:d8:29:32:72:4d:fb:0c:d3:94:1d:84:4e:b9:b0:
1b:31:6a:b0:1b:7c:bf:0a:4d:f2:8e:ae:47:60:90:
a9:25:f5:40:98:67:dc:83:4e:43:c9:35:ec:e0:34:
43:6c:3c:b5:e8:3b:7f:90:ad:5d:dd:e7:bc:12:15:
07:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:94:6D:2B:35:B8:A5:FD:27:0A:84:E2:F2:7D:4B:38:7E:B3:22:05
X509v3 Authority Key Identifier:
keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/_5RtKzW4pf0nCoTi8n1LOH6zIgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.125.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:05:c8:83:cd:d0:1c:cb:85:f1:fb:be:ba:bf:44:4a:31:1d:
a7:0f:dc:36:46:eb:b0:9a:1b:e2:55:7b:01:c7:30:37:67:05:
3e:e2:2f:61:b1:cd:88:33:e8:77:48:57:43:af:6b:b9:e8:61:
15:7f:6f:a8:e9:2f:1f:2b:d5:96:9f:98:a5:b6:83:b9:1e:3a:
6e:16:36:7d:7f:de:ca:80:c3:b8:c2:8b:ba:fc:bf:81:ea:f0:
f8:83:bd:0b:01:e1:40:60:48:6b:fa:d5:3c:f4:f6:3d:bf:a2:
09:80:fd:78:e0:5f:38:32:b1:05:9b:46:61:c1:76:3d:55:8d:
35:99:e8:61:86:80:71:15:b4:bf:67:17:ce:24:91:a6:4b:c2:
97:8d:b5:ff:2a:43:93:77:94:a1:75:0d:83:ed:c0:f1:65:9f:
4d:9f:08:66:b2:e6:4b:9c:32:75:d8:4c:1a:f2:00:74:5e:ac:
c1:c7:b3:10:9e:ac:5f:cc:c3:0b:cb:07:fc:05:28:7a:c4:b8:
e5:d7:b5:0a:68:d4:6e:b6:cf:12:34:c7:44:a4:78:35:f4:e4:
f6:66:b3:84:84:8a:eb:69:50:34:c3:d4:31:d7:6e:2a:f6:2e:
5b:d2:a9:79:1f:2b:ae:2b:ee:f3:31:d0:1c:bc:da:44:45:52:
01:32:1a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:51 2024 by rpki-client on console-ams.rpki-client.org