Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/E7DC1fUf2Pigd_sS8RazrHu-RKQ.roa
File: E7DC1fUf2Pigd_sS8RazrHu-RKQ.roa (raw, json)
Hash identifier: uR/U5/h/vWpWWOQfLybqJDuB/+ik0wlYHqylLxcAUIY=
Subject key identifier: 13:B0:C2:D5:F5:1F:D8:F8:A0:77:FB:12:F1:16:B3:AC:7B:BE:44:A4
Certificate issuer: /CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
Certificate serial: 01876D073855422C43C0629543084662C255
Authority key identifier: 32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/E7DC1fUf2Pigd_sS8RazrHu-RKQ.roa
Signing time: Mon 10 Apr 2023 21:16:42 +0000
ROA not before: Mon 10 Apr 2023 21:16:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 147.189.239.0/24 maxlen: 24
147.189.20.0/24 maxlen: 24
147.189.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6d:07:38:55:42:2c:43:c0:62:95:43:08:46:62:c2:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
Validity
Not Before: Apr 10 21:16:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13b0c2d5f51fd8f8a077fb12f116b3ac7bbe44a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:eb:56:c0:87:02:d2:60:50:76:b5:5e:48:f2:
85:87:91:c2:00:52:b4:f3:64:50:ec:9e:45:e7:f0:
cf:ff:8b:10:2e:a5:cf:6d:a7:20:ab:44:57:8b:d8:
0d:cf:ba:b4:8c:36:ca:88:e0:1a:cf:fb:55:18:d1:
34:ff:2c:33:5d:6f:1b:e6:c4:e0:75:3e:f8:e1:fc:
80:c6:2a:b2:3b:3c:1a:8a:0e:34:96:cd:ed:7b:a4:
df:b7:e3:43:a6:26:19:96:a9:9a:2c:a0:4a:6b:e6:
58:e7:11:67:5e:7f:87:f7:5c:fd:4d:ac:d0:07:66:
e6:a5:23:b8:69:32:66:4c:8f:ce:5a:2a:e8:97:1d:
bf:17:83:3c:35:de:c4:82:24:a9:bf:d5:83:3f:a6:
6e:5a:46:83:42:61:f7:1e:66:d1:51:d1:12:5a:9a:
dd:a4:42:c9:49:af:d2:a8:20:55:5d:ee:d9:34:cb:
28:8b:c2:66:af:a5:54:19:3d:d3:4b:b8:2e:ac:21:
d4:3d:1b:fc:22:f7:b8:88:bf:7f:a1:ef:1d:9a:d4:
89:ae:9b:28:8a:4e:ca:78:ce:9f:d9:2a:f4:d5:73:
6e:c6:61:7a:71:ce:15:55:38:93:56:9d:72:89:71:
50:93:16:4a:07:c4:a5:0d:28:3d:3f:b1:16:3d:48:
2d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B0:C2:D5:F5:1F:D8:F8:A0:77:FB:12:F1:16:B3:AC:7B:BE:44:A4
X509v3 Authority Key Identifier:
keyid:32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/E7DC1fUf2Pigd_sS8RazrHu-RKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.20.0/24
147.189.238.0/23
Signature Algorithm: sha256WithRSAEncryption
76:41:d1:3e:8e:57:d6:f1:e6:22:1d:05:78:25:4d:22:1d:34:
31:1e:dc:f4:f1:43:ad:b0:d7:5d:52:80:4b:79:27:40:db:f5:
09:3e:50:6e:a8:1c:d3:ab:37:be:e9:a6:f0:1b:da:37:3d:21:
2a:00:f6:28:50:66:55:3c:84:c4:20:45:ee:ec:32:0a:96:1d:
03:c7:c1:00:41:de:7a:25:33:03:79:a0:90:73:7a:40:a4:4e:
cb:d4:bb:07:fd:0e:99:9d:02:68:3b:5e:a2:5e:df:a9:b7:fc:
c4:77:31:b8:40:08:8d:c4:15:a1:26:c4:70:d2:d8:3e:15:ac:
d9:bf:85:00:6b:ce:e0:55:17:68:ad:7c:17:e3:c0:09:a1:06:
67:7d:78:53:e6:73:41:32:11:c5:9a:86:66:ab:99:57:15:4f:
c1:bb:cb:b7:5c:9e:61:bb:23:05:98:c3:75:6e:1f:71:3e:36:
3d:9b:37:44:9d:da:47:5c:28:1a:70:5a:16:3e:94:8b:ac:3c:
99:c3:d0:d4:c2:00:82:b6:38:58:77:ac:e1:57:3a:41:3e:57:
a7:c6:08:b6:37:b3:76:be:92:42:1d:5c:f1:17:b4:da:bd:76:
f8:cc:62:b9:f0:af:20:16:ed:f7:61:8d:d0:d2:7f:ec:19:79:
2e:a2:49:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:19 2024 by rpki-client on console-fra.rpki-client.org