Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/k71bNkj1uuRjnJS6PwKdJCGsOWI.roa
File: k71bNkj1uuRjnJS6PwKdJCGsOWI.roa (raw, json)
Hash identifier: ir4ju6dICKY/z7FSlqkFPWuk79/75TJT6lOEFREtRPg=
Subject key identifier: 93:BD:5B:36:48:F5:BA:E4:63:9C:94:BA:3F:02:9D:24:21:AC:39:62
Certificate issuer: /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial: 018CC6B7A70CD1836E6D6CC32188FF7D534B
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/k71bNkj1uuRjnJS6PwKdJCGsOWI.roa
Signing time: Mon 01 Jan 2024 20:29:33 +0000
ROA not before: Mon 01 Jan 2024 20:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 265919
IP address blocks: 192.35.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 May 2024 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a7:0c:d1:83:6e:6d:6c:c3:21:88:ff:7d:53:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Validity
Not Before: Jan 1 20:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93bd5b3648f5bae4639c94ba3f029d2421ac3962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bc:da:af:18:9c:3d:d0:a9:2b:42:f5:00:cf:
43:85:f0:16:fb:0e:d3:0d:21:06:c6:a8:a1:cc:3e:
0e:06:5f:e3:35:35:b0:86:64:6e:90:11:a2:d7:42:
ce:36:af:1d:64:69:98:59:44:46:3a:7d:f1:9c:bf:
30:fb:88:03:49:dc:a9:80:8b:37:35:c6:80:7e:a3:
0c:d9:d8:2d:7d:46:da:50:75:60:00:c7:78:62:0d:
4d:6a:86:43:a3:57:69:34:59:30:0d:2e:22:d5:15:
69:aa:28:96:ac:2e:41:41:5c:6d:d9:27:3f:fb:2f:
d3:73:f5:14:df:9f:9c:34:b3:6d:f5:91:0f:50:30:
61:83:69:a9:26:0d:c1:35:36:a6:86:af:6a:34:ca:
fd:55:32:da:03:12:f1:c9:46:e8:51:f7:cc:69:64:
16:d1:76:69:fe:3e:77:72:d5:a0:22:15:35:f4:f0:
1e:78:02:12:b3:6f:29:f2:b2:aa:92:38:48:8a:4e:
33:74:37:74:57:be:fe:c5:57:ec:57:09:ec:ac:35:
b8:6f:d2:00:99:90:2a:8c:81:ed:ed:e9:4c:a7:52:
6a:e5:79:80:65:32:51:57:f7:93:75:d4:66:64:c6:
85:0a:8d:7c:cd:42:20:39:33:20:4b:95:f7:ed:9c:
c6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BD:5B:36:48:F5:BA:E4:63:9C:94:BA:3F:02:9D:24:21:AC:39:62
X509v3 Authority Key Identifier:
keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/k71bNkj1uuRjnJS6PwKdJCGsOWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.35.206.0/24
Signature Algorithm: sha256WithRSAEncryption
81:fc:3c:ad:da:33:20:1a:7f:65:f4:11:ef:9b:08:6f:63:1a:
e7:d5:5f:e5:27:15:11:4d:d6:3a:de:b4:76:cb:d5:9f:fe:7a:
4c:5b:27:c9:8c:b4:56:87:b5:e3:67:9b:a7:57:a4:d5:7e:30:
77:2d:3e:96:30:ab:3f:69:41:18:8f:a9:28:81:58:84:64:06:
d8:4f:f2:01:89:f2:c2:34:ba:93:5b:53:14:35:e1:23:74:ab:
62:1c:6a:f1:e4:50:b3:86:68:0d:86:f4:25:c2:07:be:67:2f:
da:12:49:b3:3e:f0:89:57:27:a1:cd:8b:10:3c:34:b1:86:c1:
d1:06:c2:13:35:8e:79:04:95:17:05:16:f6:0b:ce:13:56:a9:
7a:73:65:e9:8c:a7:98:a5:52:4c:12:ec:18:f2:fc:6c:98:a9:
f1:d3:0f:46:f7:2d:bd:87:09:15:b3:b0:0f:a9:e1:f6:74:7e:
f2:49:51:7c:0f:74:f7:c9:dc:fe:7a:b9:b5:2d:df:c7:67:c1:
36:df:af:c2:34:1a:a7:97:bd:2f:ad:05:78:e5:97:5e:2c:5d:
d3:a6:4c:ef:0d:24:4e:0b:15:ad:7f:00:80:f4:d3:cb:b6:26:
32:c0:67:92:5c:f6:13:dd:20:b7:c3:e8:2f:ae:d2:36:5b:95:
48:04:44:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:37 2024 by rpki-client on console-fra.rpki-client.org