Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/3dHkLmyfwFhJxTric0UgHo6pXFU.roa
File: 3dHkLmyfwFhJxTric0UgHo6pXFU.roa (raw, json)
Hash identifier: DNwpUrmXmNoRWK+m86Bn7wZHEvc350HqoBHUScKoMkY=
Subject key identifier: DD:D1:E4:2E:6C:9F:C0:58:49:C5:3A:E2:73:45:20:1E:8E:A9:5C:55
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 0189FE143775A78EF2D57772CA3E7A880FFE
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/3dHkLmyfwFhJxTric0UgHo6pXFU.roa
Signing time: Wed 16 Aug 2023 11:21:25 +0000
ROA not before: Wed 16 Aug 2023 11:21:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 194.110.173.0/24 maxlen: 24
85.117.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fe:14:37:75:a7:8e:f2:d5:77:72:ca:3e:7a:88:0f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Aug 16 11:21:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddd1e42e6c9fc05849c53ae27345201e8ea95c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a2:55:4b:8d:2f:14:64:ff:fb:26:33:0e:bb:
fb:53:3a:5a:6d:ab:60:f0:9c:e5:4d:75:a2:1a:73:
53:e3:0e:9d:f3:27:e2:13:91:fa:36:53:61:2e:94:
19:69:ef:fd:b5:95:ad:03:a7:75:a0:36:09:c8:11:
91:38:62:f2:43:45:ae:7e:34:a0:14:8b:16:92:21:
29:2a:56:f9:52:5d:c3:9d:8d:55:bb:21:ba:3a:8d:
e5:eb:0d:0a:67:fc:f5:0b:ac:1a:33:28:ea:47:f4:
69:82:fb:40:85:c7:4f:28:62:65:6f:e2:b1:89:72:
4c:a3:35:30:10:8d:aa:66:a4:ea:cc:93:64:36:a9:
45:24:0d:55:bc:f2:f6:34:3f:dc:e3:4d:82:00:cc:
bf:99:08:15:ab:92:4b:7d:4d:15:6d:e3:ea:f5:91:
ab:3d:64:6e:7c:fc:47:61:18:63:4e:4c:3b:8b:15:
92:0f:89:ad:85:61:09:35:6a:c4:dd:c9:0f:70:59:
3f:05:6d:8a:09:dd:af:a3:ef:9d:59:b1:8f:b5:d0:
1d:ee:be:d5:62:1b:20:af:6d:69:c4:5a:42:86:0d:
79:28:1b:7d:ff:83:aa:ad:f7:73:c2:d5:7f:75:a0:
fa:ad:4e:27:71:2b:6c:54:69:a4:7e:c7:7f:07:9f:
e6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D1:E4:2E:6C:9F:C0:58:49:C5:3A:E2:73:45:20:1E:8E:A9:5C:55
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/3dHkLmyfwFhJxTric0UgHo6pXFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.242.0/24
194.110.173.0/24
Signature Algorithm: sha256WithRSAEncryption
51:5c:44:62:8a:a7:01:70:bc:ed:ac:10:3a:a4:9a:e8:f0:3d:
03:93:8b:82:e8:15:4a:f9:7f:e4:28:01:43:43:cb:54:9d:cc:
59:e8:ac:42:92:64:45:58:81:9d:0b:15:a7:ed:54:6c:73:d1:
f3:e7:74:08:7d:d0:18:30:b3:e2:69:3e:0b:d1:e7:3f:69:4e:
6c:59:be:c7:dd:6c:df:d9:06:22:22:5e:13:c0:31:71:83:c8:
0a:19:6a:26:63:73:3f:81:b9:8e:fb:28:03:00:1c:b3:2b:ba:
87:a0:59:56:c7:93:84:33:0c:bc:a4:3a:d0:7b:1b:e3:59:3f:
f7:ba:ca:05:8b:2a:76:68:91:7c:ba:b1:29:73:04:db:28:1f:
7f:e8:ad:a9:a3:4e:3f:d2:02:1f:4d:e7:fc:7c:9e:e4:fa:4b:
e1:a5:16:4c:be:f7:0c:68:64:53:b4:11:c7:74:34:7d:e8:b6:
d2:5f:bf:4c:38:56:15:65:32:5c:4e:35:4f:e0:38:0e:de:31:
bb:63:52:b0:29:fc:05:b3:bd:c2:57:8a:5e:1b:7a:31:01:6a:
eb:d9:4a:31:b0:d0:4e:a7:66:e7:c8:9a:60:03:74:23:a9:d2:
de:e1:be:e6:72:f8:61:20:97:8e:d1:b0:b9:fe:fb:df:eb:29:
d7:82:7e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 16:14:48 2023 by rpki-client on console-fra.rpki-client.org