Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/20dEB8ZhaCoC45TdYdABMKGvYGc.roa
File: 20dEB8ZhaCoC45TdYdABMKGvYGc.roa (raw, json)
Hash identifier: YJDvkjsIc2BNK7LMD3A7O/Tnl5OFDd+UnG7/hZcJ9vU=
Subject key identifier: DB:47:44:07:C6:61:68:2A:02:E3:94:DD:61:D0:01:30:A1:AF:60:67
Certificate issuer: /CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Certificate serial: 018CC8DEA3DC701E2ED1DFBE97ED012DE925
Authority key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/20dEB8ZhaCoC45TdYdABMKGvYGc.roa
Signing time: Tue 02 Jan 2024 06:31:23 +0000
ROA not before: Tue 02 Jan 2024 06:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24763
IP address blocks: 193.56.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 17:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:a3:dc:70:1e:2e:d1:df:be:97:ed:01:2d:e9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Validity
Not Before: Jan 2 06:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db474407c661682a02e394dd61d00130a1af6067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4b:53:57:3c:d7:68:7f:1b:3a:bd:97:36:c0:
55:6e:da:ec:70:c4:0a:92:02:40:bc:1c:5a:45:c4:
4c:76:90:56:1b:e0:9e:cc:c1:80:7a:3b:4c:3a:d2:
bd:a6:e9:ac:9b:4d:76:31:52:de:e4:0a:44:5c:d4:
79:3a:e6:93:b0:51:9f:e0:27:06:e4:d6:b0:ab:47:
10:5b:03:02:4c:4a:63:13:5b:0b:1f:75:39:75:76:
9f:b5:a6:cc:31:36:1a:9a:a9:f8:6c:ca:e5:c4:13:
ab:f3:b3:13:e0:63:6d:cb:a8:e2:27:72:ec:73:cd:
0d:2f:ed:db:06:c2:64:89:1e:3c:84:b0:89:a6:ec:
e8:8f:b4:1e:72:fe:a5:20:f7:aa:cc:38:1f:33:2c:
ff:8f:23:b1:6d:45:59:d5:78:65:03:1f:0d:88:64:
3a:eb:08:7f:e8:f8:0d:12:fa:da:c8:20:8b:ce:82:
34:e2:66:a7:cf:85:e8:4e:d3:ba:09:b7:29:1b:d8:
7c:7b:d2:f5:19:68:79:ce:ca:0c:7b:bb:f3:99:5f:
38:82:a6:88:09:46:c8:e7:31:1c:f2:02:5f:03:d0:
43:57:fa:dd:51:b2:a3:ac:fc:15:61:53:5e:0a:9e:
a3:0c:b1:40:8e:34:d5:35:4e:17:0e:28:0b:82:e5:
cf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:47:44:07:C6:61:68:2A:02:E3:94:DD:61:D0:01:30:A1:AF:60:67
X509v3 Authority Key Identifier:
keyid:AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/20dEB8ZhaCoC45TdYdABMKGvYGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.124.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ff:42:44:4c:3c:a3:3a:b3:c7:56:9d:5b:ea:41:c8:dc:5a:
5e:85:ee:1f:39:29:5b:29:22:7f:4f:17:f6:6c:a4:65:b6:fe:
1d:b6:77:cd:7c:af:39:7f:db:bc:0a:a7:e7:e6:6b:a4:fc:6f:
82:ff:89:c3:18:36:27:7e:b8:73:bd:69:ee:b4:02:46:50:5a:
37:5c:ad:74:0b:4b:4a:a3:23:ec:4a:32:0a:17:87:7d:24:65:
aa:80:98:a4:1b:44:e2:b2:b0:3f:46:a3:52:9d:b1:9e:54:1d:
51:3d:3b:9a:e5:c8:6e:bb:58:c1:39:68:5d:70:1d:41:f7:cb:
38:3e:b6:34:60:4e:3b:13:1d:7b:91:58:8f:a9:6c:4f:7b:0a:
48:12:e7:38:ad:02:aa:fd:7c:03:b0:33:71:3a:9d:ed:c9:78:
5e:dc:5e:b1:cd:85:51:e5:ea:55:38:cb:fa:84:ad:d2:89:ce:
24:03:b5:78:29:0b:bc:91:2c:09:7d:59:62:e6:a3:90:41:9e:
e3:f4:ae:c2:23:d5:07:58:57:8a:7e:00:8c:f2:f8:3a:e2:72:
6f:64:19:13:52:b7:78:83:65:3c:c2:8e:9c:62:a5:4b:33:7b:
f1:af:e1:55:64:bd:cf:33:36:9d:67:f7:2e:8c:2c:19:8a:31:
43:3a:3e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:11 2024 by rpki-client on console.sobornost.net