Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/vIDH8ECmKvrYgY81soQbNcdb-TA.roa
File: vIDH8ECmKvrYgY81soQbNcdb-TA.roa (raw, json)
Hash identifier: tKCZbnm03AQ+/oyq4VwcORd4uNmccx5G6UZHHIbMTUE=
Subject key identifier: BC:80:C7:F0:40:A6:2A:FA:D8:81:8F:35:B2:84:1B:35:C7:5B:F9:30
Certificate issuer: /CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
Certificate serial: 01856E38D4827D9CC79313CD148E51F5904C
Authority key identifier: 11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/vIDH8ECmKvrYgY81soQbNcdb-TA.roa
Signing time: Sun 01 Jan 2023 16:44:56 +0000
ROA not before: Sun 01 Jan 2023 16:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 193.32.92.0/24 maxlen: 24
2a13:1000::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:d4:82:7d:9c:c7:93:13:cd:14:8e:51:f5:90:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
Validity
Not Before: Jan 1 16:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc80c7f040a62afad8818f35b2841b35c75bf930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fa:ac:cd:4c:ab:23:6f:90:35:14:85:ef:37:
bc:9a:56:69:d1:e8:f8:28:95:89:e8:e6:ea:05:5f:
4f:02:fb:b5:1b:f3:65:52:a3:a2:26:68:c5:3a:b4:
0b:40:1a:79:90:34:db:45:60:d9:b9:b9:89:c7:ea:
1d:6c:34:92:2f:39:b3:c3:39:fe:59:1f:89:cc:4b:
ca:04:be:e3:aa:aa:a4:ad:e5:05:25:38:26:c3:ec:
6b:56:7a:90:61:e6:c9:f6:fd:ae:b7:27:95:25:eb:
ea:cd:1a:53:30:7b:9a:dd:06:0c:f3:aa:1f:5a:18:
3c:41:92:be:b8:cd:64:97:50:a1:70:70:20:46:73:
cf:b0:b2:fd:08:cd:c1:44:c8:59:ad:14:a0:13:61:
4a:6e:9f:96:5d:a9:98:c8:54:7a:94:60:cb:c5:e9:
c2:d5:92:53:3b:f1:93:1f:60:58:8b:20:ad:e9:c2:
8a:d8:df:94:7e:98:d5:06:cd:4a:2b:8b:23:cd:ff:
af:2e:75:44:16:b8:b2:2c:7d:3f:d9:6e:55:36:2e:
3f:65:8e:fd:60:7a:b5:d7:41:a0:ed:63:75:fe:f8:
1f:fe:b7:b5:28:7c:de:83:06:11:2e:64:6e:03:21:
52:c9:3e:58:f0:18:f2:a1:fd:99:cd:17:42:79:c3:
30:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:80:C7:F0:40:A6:2A:FA:D8:81:8F:35:B2:84:1B:35:C7:5B:F9:30
X509v3 Authority Key Identifier:
keyid:11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/vIDH8ECmKvrYgY81soQbNcdb-TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.92.0/24
IPv6:
2a13:1000::/29
Signature Algorithm: sha256WithRSAEncryption
af:1f:0b:6e:3f:21:6b:46:65:51:55:89:40:70:e8:1c:a4:30:
86:e9:3a:d5:5f:5b:44:00:ac:d2:8a:41:3b:04:64:38:1e:5d:
a7:a9:4a:09:ea:55:cd:40:dc:29:82:4d:8f:a2:10:44:c9:85:
7b:7c:81:46:48:c9:f2:75:5b:23:60:a2:b1:c6:61:c2:ce:ca:
27:f5:65:b9:66:f5:5a:3e:1a:69:e1:87:71:46:4b:23:49:d6:
7c:66:cc:4f:9d:93:91:5d:1a:6e:fe:42:70:93:cf:98:68:cb:
48:3d:07:0a:25:cd:60:11:fa:cb:7a:5f:1f:e5:9b:6e:3e:5c:
0a:b5:5e:4e:3e:a3:1e:92:86:2f:32:56:af:e2:c2:7b:e3:84:
86:89:7b:71:79:3c:fd:96:de:60:d4:32:f3:1f:5c:b1:41:e6:
72:cc:12:e2:3d:e9:80:db:16:0c:af:4e:35:df:d0:3b:ad:d1:
63:c0:ca:85:90:67:41:fc:7b:b6:ff:45:31:a5:5b:57:22:e1:
5f:41:14:1c:1a:2b:d3:dd:8c:84:2a:10:4e:ad:7c:0d:fd:4f:
a6:dd:8a:d7:7c:1d:f4:ae:90:a3:b3:d1:5b:23:00:d2:83:f0:
55:1e:64:6e:8e:ce:4d:be:b5:fa:2c:3c:e5:9d:a8:8a:bc:57:
fa:82:48:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:13 2024 by rpki-client on console-fra.rpki-client.org