Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/Err3OirYW6dYaXnvijrSDlUk1GM.roa
File: Err3OirYW6dYaXnvijrSDlUk1GM.roa (raw, json)
Hash identifier: JXJ2utoGja/A5IoEfaBFsIJCjT8MhGM8miF6hpivv3s=
Subject key identifier: 12:BA:F7:3A:2A:D8:5B:A7:58:69:79:EF:8A:3A:D2:0E:55:24:D4:63
Certificate issuer: /CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Certificate serial: 01857321E7643BB3F55F4EC28632A74D15F5
Authority key identifier: E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/Err3OirYW6dYaXnvijrSDlUk1GM.roa
Signing time: Mon 02 Jan 2023 15:37:59 +0000
ROA not before: Mon 02 Jan 2023 15:37:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133199
IP address blocks: 194.41.36.0/24 maxlen: 24
194.41.37.0/24 maxlen: 24
194.41.58.0/24 maxlen: 24
194.41.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:21:e7:64:3b:b3:f5:5f:4e:c2:86:32:a7:4d:15:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Validity
Not Before: Jan 2 15:37:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12baf73a2ad85ba7586979ef8a3ad20e5524d463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:48:e4:10:3c:e6:d5:ac:7b:b4:5e:d2:b3:81:
ae:4f:c1:8b:fb:5f:f5:eb:c7:dd:d3:ee:0d:8e:23:
36:90:38:b8:ad:9e:7a:e0:41:cf:88:49:f7:60:8a:
34:79:a4:1e:02:fe:65:b0:bf:67:0f:55:2a:79:16:
4c:3c:da:a8:db:23:b2:84:e1:9f:6a:b2:3d:fd:09:
74:b7:0e:9b:88:87:4e:6b:35:08:37:2a:58:57:33:
d7:96:5d:3c:60:c1:75:b9:9d:d0:77:81:d4:8f:68:
18:a9:66:60:06:d9:87:2f:75:a4:f4:3c:60:94:ed:
f8:10:b4:d2:28:60:86:96:38:24:43:4f:02:1f:d9:
9f:5b:57:98:a5:53:2f:1e:1a:22:f6:40:36:6b:05:
15:42:c4:fe:37:09:13:65:aa:8a:cd:c0:de:05:08:
a6:aa:81:9f:fb:b4:76:f8:83:23:52:3c:81:dc:57:
5e:05:e3:16:c9:a3:d3:c9:f3:5b:15:b1:b7:26:ec:
d5:f7:37:8f:76:b9:8b:cf:5e:c1:73:43:98:7b:61:
2e:e6:30:c6:d7:e9:ad:01:50:8e:8b:82:1e:37:fe:
95:94:37:78:21:5e:26:6e:b9:c8:80:d2:35:31:a3:
f1:ea:b7:e6:d9:7f:4e:5d:44:6d:2e:54:93:17:7b:
45:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BA:F7:3A:2A:D8:5B:A7:58:69:79:EF:8A:3A:D2:0E:55:24:D4:63
X509v3 Authority Key Identifier:
keyid:E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/Err3OirYW6dYaXnvijrSDlUk1GM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.41.36.0/23
194.41.58.0/23
Signature Algorithm: sha256WithRSAEncryption
96:1d:05:6c:11:85:74:5b:26:f8:bd:b5:3b:13:40:3f:37:38:
28:cb:21:75:fe:da:80:e6:ea:13:ec:36:c9:ab:40:43:d0:79:
ea:20:18:03:90:4f:4d:19:97:00:25:da:b7:66:34:a5:21:6f:
46:a4:e5:0a:d2:73:3e:2e:cb:50:6c:72:f6:66:cc:9a:4b:58:
2e:cb:07:14:0a:de:a9:84:c9:be:5b:6d:d0:8a:3a:95:51:43:
57:8e:57:46:e5:70:b2:5b:1a:4f:73:b9:8a:ee:79:3f:14:83:
2d:92:b1:6d:b5:90:43:7b:3d:e5:77:54:89:a9:c2:ad:49:45:
18:98:2d:1b:97:15:b2:fb:54:72:fa:75:de:99:6c:ec:c6:7a:
59:3f:a8:b5:a8:d4:00:0c:5a:d2:df:59:55:ce:37:0f:56:47:
1b:9e:6b:d8:5f:e2:bb:fe:43:04:2c:d2:38:8b:ba:22:71:b9:
69:a8:31:dd:e5:41:18:82:8b:c5:e1:49:c3:39:a9:74:51:c4:
93:14:0e:dc:dc:a9:76:b4:90:46:9e:cd:7d:34:1e:b9:39:42:
7c:8e:5d:69:68:16:b8:17:42:92:39:6c:d9:ac:7c:2a:44:d4:
bc:ad:30:37:68:f2:8c:8d:64:d7:83:b7:4a:d9:e5:ca:bf:85:
31:d6:68:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:37 2024 by rpki-client on console-ams.rpki-client.org