Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/9rKWSSXM2SuEdJ0D9vbQDurDevo.roa
File: 9rKWSSXM2SuEdJ0D9vbQDurDevo.roa (raw, json)
Hash identifier: F2MLOslvsM6daS7VRhPvpZQFs9+WR228osUyQxb/JHM=
Subject key identifier: F6:B2:96:49:25:CC:D9:2B:84:74:9D:03:F6:F6:D0:0E:EA:C3:7A:FA
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 01856F0B5EBD7DCFD72C47038059AD56B38A
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/9rKWSSXM2SuEdJ0D9vbQDurDevo.roa
Signing time: Sun 01 Jan 2023 20:34:53 +0000
ROA not before: Sun 01 Jan 2023 20:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13165
IP address blocks: 213.128.192.0/20 maxlen: 20
193.43.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:5e:bd:7d:cf:d7:2c:47:03:80:59:ad:56:b3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Jan 1 20:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6b2964925ccd92b84749d03f6f6d00eeac37afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0a:1c:ae:0c:b5:26:da:d1:88:60:32:41:b6:
c7:96:9a:25:0f:6f:a5:00:f4:19:8c:d6:33:3d:4d:
db:15:75:9b:52:4c:e1:da:bb:34:9b:6d:2d:15:95:
f7:38:f5:f4:14:31:30:ca:61:73:a5:9a:c6:6f:dd:
63:ad:fb:db:90:ce:7c:c1:62:47:b4:18:9e:69:1e:
4e:6d:a0:7a:d3:eb:5f:a3:65:aa:56:32:fb:29:9b:
ce:ed:36:5b:e5:e7:a9:22:c6:26:bb:a8:39:ed:10:
01:ee:5c:0e:2f:48:f6:d6:63:74:07:0f:7d:ee:08:
3e:e2:1c:61:6c:37:47:c2:a3:f9:b6:fc:a2:80:fb:
10:ba:32:56:96:7c:69:10:0d:81:80:5e:cd:f8:57:
5c:0a:bb:8c:81:c0:44:6f:42:78:f1:9c:87:13:5f:
d1:27:56:11:4b:bd:e7:a4:b9:af:2b:11:89:43:3f:
97:36:9b:52:e3:81:48:9d:a3:01:fd:47:90:dd:4b:
cf:44:01:aa:e4:28:d3:df:74:0f:b2:04:03:5d:c5:
31:64:a8:f6:4d:8b:93:46:62:c7:79:a8:9b:4a:cc:
fb:60:f1:54:c4:b0:b9:37:c8:aa:4e:d3:ea:a7:5d:
c1:23:95:0f:2f:3c:ba:79:38:d3:db:30:58:a7:c2:
1b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B2:96:49:25:CC:D9:2B:84:74:9D:03:F6:F6:D0:0E:EA:C3:7A:FA
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/9rKWSSXM2SuEdJ0D9vbQDurDevo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.182.0/24
213.128.192.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:63:99:3b:8e:e7:1a:fd:84:cd:62:10:f9:c3:00:c7:b3:65:
b1:eb:a9:08:0f:e5:58:6b:98:a6:79:7b:18:85:ff:19:f3:72:
2e:61:ce:ee:15:75:c7:14:df:8a:4d:8c:fe:48:20:b9:28:79:
6a:df:6b:e4:79:9f:83:24:6f:80:5c:17:15:ee:7a:81:7b:aa:
90:2a:51:a9:17:56:ff:73:9d:9c:e4:ee:16:19:27:7d:ae:21:
4e:69:47:fd:32:f2:7d:93:95:fa:a0:d3:c9:04:2c:b7:47:ee:
fa:f8:20:cc:76:6d:fc:5c:76:a2:70:c2:db:86:8d:b0:91:b6:
54:56:89:43:58:13:18:f3:79:aa:c5:9b:f8:cc:8f:22:f6:9c:
1b:af:df:2c:a8:0d:61:c6:39:85:d8:73:db:f3:87:d0:3d:30:
ee:de:41:d6:96:de:2b:04:f8:cb:06:97:7c:91:48:07:80:51:
fb:b8:61:e1:07:cb:23:da:45:40:e8:a8:3c:a2:6f:2d:01:5d:
6a:9e:13:78:df:3b:68:ea:1c:3e:fc:58:65:47:d0:72:ea:d3:
77:3b:37:2a:64:3d:2c:de:77:ba:dc:bc:1d:41:14:d5:43:75:
80:ca:4b:35:c1:24:16:f4:4c:c2:93:5a:4c:5e:72:3d:3f:1c:
8f:06:9b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:54 2024 by rpki-client on console-fra.rpki-client.org