Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/E23z-XvyyumYNprd4apNQIGsR9E.roa
File: E23z-XvyyumYNprd4apNQIGsR9E.roa (raw, json)
Hash identifier: BBK9cLDXeuGhvH3nmR+w2VDiDRMqqixnmQZ6qpXS6bw=
Subject key identifier: 13:6D:F3:F9:7B:F2:CA:E9:98:36:9A:DD:E1:AA:4D:40:81:AC:47:D1
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018932A3E8FCAF6AA0EAFA7C090152BEC467
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/E23z-XvyyumYNprd4apNQIGsR9E.roa
Signing time: Fri 07 Jul 2023 23:15:50 +0000
ROA not before: Fri 07 Jul 2023 23:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213360
IP address blocks: 193.38.251.0/24 maxlen: 24
185.255.112.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:32:a3:e8:fc:af:6a:a0:ea:fa:7c:09:01:52:be:c4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jul 7 23:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=136df3f97bf2cae998369adde1aa4d4081ac47d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:99:73:6a:7a:af:35:2f:92:93:d7:aa:4a:26:
0a:eb:39:f9:83:87:29:8f:d2:98:d8:ba:58:9c:ef:
c5:0b:f6:93:85:6a:9b:12:06:69:56:10:ef:a4:3e:
9a:5c:af:e7:cd:27:ec:71:00:52:cb:00:f5:38:79:
c4:b9:21:e3:8e:f3:24:26:4b:0b:dc:68:64:67:d5:
a6:61:d0:80:aa:87:ac:8a:2f:82:b0:d3:7a:40:ef:
7d:80:f3:37:e0:98:12:78:e0:a4:d2:e9:a8:0d:7f:
a6:3e:5a:67:8d:02:a9:8c:78:c4:d0:d2:ad:92:66:
2d:75:1c:a4:dc:58:38:03:cf:c8:b0:8a:32:5e:38:
08:52:31:25:77:2c:36:6d:c5:d1:31:2f:18:43:16:
b0:7c:4c:0f:95:5e:b9:10:99:b3:de:6f:78:9f:c8:
4f:ce:08:c5:dd:51:ad:80:89:3e:1a:4f:4b:e5:6d:
db:b3:52:31:5e:45:c5:74:8b:09:7d:56:97:06:3c:
27:dc:2c:8b:d2:2c:b1:60:e1:4b:da:5e:19:1b:a9:
06:64:d1:ec:f8:21:26:02:b5:c3:e2:32:08:53:cb:
02:a4:4b:52:91:75:f0:ab:85:6d:6b:24:02:15:89:
b5:b6:07:c3:7e:ac:4a:2b:f7:9a:dc:b8:2b:4a:5f:
6f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6D:F3:F9:7B:F2:CA:E9:98:36:9A:DD:E1:AA:4D:40:81:AC:47:D1
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/E23z-XvyyumYNprd4apNQIGsR9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.112.0/24
193.38.251.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:98:68:41:02:8c:b8:74:9b:63:09:8f:4e:f8:c8:ea:7f:37:
de:7d:23:ac:34:fc:d8:77:34:dc:6e:b6:77:66:7f:24:7e:5d:
bf:ab:99:12:a1:65:03:ed:3c:84:19:20:f3:ad:67:14:0c:78:
df:3d:40:fa:83:b3:39:eb:7b:64:b6:0b:85:5a:16:00:6e:19:
8f:de:a5:58:e6:a7:03:bd:dc:a5:02:4d:d3:d4:20:f0:2a:3d:
d2:1b:ea:1b:c9:3f:b4:b5:dd:ea:07:21:86:89:96:50:d3:7d:
5f:53:49:d6:e8:e8:6e:4c:fe:62:a0:35:ff:d7:4b:bd:ee:e6:
2e:49:27:77:52:f0:b2:a7:d7:56:d1:fc:67:59:99:63:d7:04:
70:3c:db:ba:1c:79:ba:94:47:09:a0:17:32:5b:7f:24:e9:8e:
a6:0f:f8:e7:66:90:34:68:48:08:02:bb:9d:d6:28:82:ea:a3:
82:3f:1c:8b:d2:a5:57:12:35:57:24:71:d7:6f:5d:5e:f1:05:
11:84:ff:0c:59:66:fd:40:0d:1c:d5:51:ca:69:bb:4f:7d:9b:
08:62:07:e8:a8:33:5d:86:8d:99:3f:77:a6:50:0f:89:81:29:
9f:b9:ae:49:94:69:ef:53:ba:fc:e8:c5:c8:12:2b:92:6f:d2:
ca:34:06:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 20:31:13 2023 by rpki-client on console-fra.rpki-client.org