Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f034c-23d4-469a-a006-cbed01781fce/1/0eFUOKI1NO-U2VmUqXFxjzk6E0g.roa
File: 0eFUOKI1NO-U2VmUqXFxjzk6E0g.roa (raw, json)
Hash identifier: E1pRbtG0AjjRjnhxcXLu9eLBWI8EARcrkM5XiN2YLXg=
Subject key identifier: D1:E1:54:38:A2:35:34:EF:94:D9:59:94:A9:71:71:8F:39:3A:13:48
Certificate issuer: /CN=d9ec085baa8caa7b5b934eca29c17961fc88db1b
Certificate serial: 01857255A44A1421840C35DCAD73AC216729
Authority key identifier: D9:EC:08:5B:AA:8C:AA:7B:5B:93:4E:CA:29:C1:79:61:FC:88:DB:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ewIW6qMqntbk07KKcF5YfyI2xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2f034c-23d4-469a-a006-cbed01781fce/1/0eFUOKI1NO-U2VmUqXFxjzk6E0g.roa
Signing time: Mon 02 Jan 2023 11:54:53 +0000
ROA not before: Mon 02 Jan 2023 11:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202766
IP address blocks: 193.34.240.0/24 maxlen: 24
193.34.242.0/24 maxlen: 24
193.34.241.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:a4:4a:14:21:84:0c:35:dc:ad:73:ac:21:67:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ec085baa8caa7b5b934eca29c17961fc88db1b
Validity
Not Before: Jan 2 11:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1e15438a23534ef94d95994a971718f393a1348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b1:a6:8f:ef:95:ea:b7:65:ac:14:85:6d:2f:
98:04:46:1b:00:89:d0:a0:dc:2f:49:17:62:e3:ed:
ab:59:af:d0:96:a6:f1:58:d6:f3:66:90:fa:30:bd:
36:f1:42:e8:51:cd:50:c7:aa:0b:3c:b1:2f:63:6e:
28:98:62:16:41:64:c9:58:f0:9b:8f:39:84:4c:ad:
7a:d4:d3:04:eb:87:83:45:b5:9d:5a:89:d5:51:0f:
c9:23:41:6d:ce:0b:6d:af:96:3f:6e:c6:df:e8:91:
e9:87:fd:29:fe:d7:df:1b:91:c4:25:9f:1f:09:09:
38:37:a8:06:38:26:3a:ab:39:76:16:63:07:52:24:
30:92:0d:20:36:01:8b:5e:b7:1e:04:a6:59:81:a8:
40:81:c2:a7:97:86:15:bd:08:7d:e8:72:a6:17:c8:
5a:e3:af:c3:6b:d7:be:47:fb:65:5f:2e:16:2b:42:
99:a3:73:04:0c:64:b4:22:b0:30:33:2f:93:02:66:
9e:9e:a0:8c:9c:2e:5f:14:87:f3:18:da:96:c2:8b:
ff:c3:25:c7:82:16:25:7f:a7:87:9c:25:db:59:59:
63:dc:85:fa:c6:e3:1d:b1:b0:d8:76:98:e3:e7:2b:
e9:b0:cd:cf:47:b6:6b:e6:88:8d:53:7d:51:f5:1c:
c7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E1:54:38:A2:35:34:EF:94:D9:59:94:A9:71:71:8F:39:3A:13:48
X509v3 Authority Key Identifier:
keyid:D9:EC:08:5B:AA:8C:AA:7B:5B:93:4E:CA:29:C1:79:61:FC:88:DB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ewIW6qMqntbk07KKcF5YfyI2xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f034c-23d4-469a-a006-cbed01781fce/1/0eFUOKI1NO-U2VmUqXFxjzk6E0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f034c-23d4-469a-a006-cbed01781fce/1/2ewIW6qMqntbk07KKcF5YfyI2xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.240.0-193.34.242.255
Signature Algorithm: sha256WithRSAEncryption
1c:90:db:85:fb:2e:7a:57:8f:c5:a6:cb:f6:7d:04:4f:b5:be:
60:93:70:5c:71:b8:7b:70:43:f6:ca:17:c0:f7:c5:df:81:35:
84:a4:45:8a:d1:db:db:b0:52:c0:13:9a:06:4d:64:82:42:41:
11:11:15:0a:f3:e8:ce:5e:ca:24:6c:c7:47:35:d6:b6:ed:d2:
96:54:92:ec:5d:2a:1c:de:b7:c5:32:21:75:f8:6b:ad:ec:71:
60:cd:2b:78:10:1c:60:4a:0e:a7:e9:57:f8:cd:4b:9b:af:f6:
5e:fb:1b:12:5d:17:61:82:8e:07:3d:c7:90:6a:d2:90:8a:4f:
23:fc:e1:53:2c:21:49:2a:ad:ef:4f:70:a2:df:42:1a:26:fb:
11:02:64:e9:0e:7d:18:19:a9:39:ee:bc:ab:0c:26:c3:3b:6b:
dc:61:c1:21:3a:5d:cd:a0:7c:02:61:0c:be:b4:59:99:83:5a:
0f:12:13:98:59:66:fe:c9:1c:ef:63:24:4d:33:24:20:07:0f:
fe:a8:7e:ee:84:08:f8:d7:7a:3f:c2:70:b4:e9:1a:b7:77:9e:
8b:67:e1:87:7f:1b:85:e5:23:d0:b9:1d:22:2b:e7:04:17:2c:
f4:5f:18:8b:91:2c:f3:43:23:f0:73:d8:59:de:d6:a5:fe:07:
05:7c:db:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:36:56 2024 by rpki-client on console-fra.rpki-client.org