Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/tMdAbqMSnv5A29VZzPCpdFsEcsI.roa
File: tMdAbqMSnv5A29VZzPCpdFsEcsI.roa (raw, json)
Hash identifier: mnULc5Ow7sQ1QB9biUTNIH2N6qmTQilhYj21lCduLxY=
Subject key identifier: B4:C7:40:6E:A3:12:9E:FE:40:DB:D5:59:CC:F0:A9:74:5B:04:72:C2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F671A051B6E2861239A571B05F6F5CD
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/tMdAbqMSnv5A29VZzPCpdFsEcsI.roa
Signing time: Sun 01 Jan 2023 22:15:05 +0000
ROA not before: Sun 01 Jan 2023 22:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212871
IP address blocks: 193.124.49.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
194.87.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:1a:05:1b:6e:28:61:23:9a:57:1b:05:f6:f5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4c7406ea3129efe40dbd559ccf0a9745b0472c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:6f:ed:f0:ea:5d:67:a4:22:2a:f2:a4:e8:
fc:0d:29:41:a1:77:05:01:b3:bd:46:42:d5:f4:23:
05:f0:5b:34:54:a4:61:33:df:76:9b:f1:7d:3a:cc:
4e:d2:63:21:ac:37:a2:20:51:64:ee:63:97:92:dc:
3a:cc:fe:c4:99:83:7c:6a:9d:b6:df:b0:42:d0:5d:
05:1e:85:d2:44:d1:35:d1:a6:99:2c:2d:37:aa:69:
39:04:fd:78:5a:2e:f3:db:70:9e:83:2b:bb:8f:14:
b5:c9:94:03:90:85:2f:f0:43:ab:4f:05:2e:bb:e8:
00:dc:41:d2:5f:7c:99:cb:2b:bd:77:30:2a:41:67:
47:fb:c4:9b:d2:aa:ea:fb:66:14:05:e2:2a:83:ec:
95:45:d9:13:75:d5:99:ec:aa:34:66:53:c9:f6:3a:
83:98:a2:22:a0:a7:03:c6:41:56:10:45:74:33:0e:
9c:e1:5d:49:5c:67:af:c9:db:e3:30:ad:85:d9:5b:
2f:56:14:85:0d:2f:96:7d:66:fa:06:cf:0b:d5:fd:
c9:22:54:33:f8:2d:2b:5f:83:5d:71:30:e6:5a:3b:
c3:ba:43:d3:26:cd:0b:f0:f9:14:ea:5b:13:0b:43:
4c:90:5d:a1:2e:84:18:36:6e:58:ac:95:3b:f2:26:
c9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C7:40:6E:A3:12:9E:FE:40:DB:D5:59:CC:F0:A9:74:5B:04:72:C2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/tMdAbqMSnv5A29VZzPCpdFsEcsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.49.0/24
194.87.61.0/24
194.135.46.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:3e:2b:ac:8d:52:fd:eb:65:df:01:2f:0e:a0:0f:00:80:96:
a8:3e:0b:69:e3:ec:d5:4b:41:f7:5d:92:47:13:d0:99:98:0b:
0d:4f:e6:45:23:52:e5:17:b3:29:43:71:bd:3c:c1:5d:64:13:
26:26:38:eb:72:ab:c4:93:e0:0e:32:4d:ac:be:e8:a0:73:d6:
25:8c:6b:68:24:13:4a:1d:4b:c0:32:6b:86:a2:a7:8e:c6:10:
fc:4c:c7:44:ff:6d:95:9f:da:9d:d8:39:7e:2d:df:a0:d2:df:
f1:b3:92:cd:e6:45:2d:08:12:57:c9:78:63:31:fe:d7:ff:48:
03:57:b4:72:5c:0f:05:b3:ba:24:18:77:e9:20:24:67:be:4a:
ad:47:82:a9:7f:b0:19:2d:a6:91:be:24:3d:b4:1a:47:cb:88:
f6:b1:a0:df:9a:5a:68:d4:06:8b:44:7e:f9:6e:4e:bf:67:e8:
17:99:e4:68:84:64:53:ce:f5:b7:2f:80:8d:41:a3:91:b2:f1:
4d:7d:45:95:86:e2:86:04:53:ef:27:f6:ac:b2:b5:47:94:31:
2d:95:7e:00:7b:a8:8e:e0:cf:1d:15:24:34:93:cb:04:a4:86:
eb:ac:65:91:ef:b4:bb:e3:05:85:76:02:ed:b7:0c:a3:a5:cb:
d2:ca:40:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:13 2023 by rpki-client on console-fra.rpki-client.org