Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7xN_swyiVmE5zCMT5i11rj1ZZ0E.roa
File: 7xN_swyiVmE5zCMT5i11rj1ZZ0E.roa (raw, json)
Hash identifier: jkt+JAdsG7FKwaUvZyAHbWLumUvDFXbmxW3HbvtgpFw=
Subject key identifier: EF:13:7F:B3:0C:A2:56:61:39:CC:23:13:E6:2D:75:AE:3D:59:67:41
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018AB2CBD51DE7723EA4E891CA2B8E47EB28
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7xN_swyiVmE5zCMT5i11rj1ZZ0E.roa
Signing time: Wed 20 Sep 2023 13:33:37 +0000
ROA not before: Wed 20 Sep 2023 13:33:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 193.149.29.0/24 maxlen: 24
193.149.30.0/24 maxlen: 24
193.149.28.0/22 maxlen: 22
193.149.31.0/24 maxlen: 24
193.149.28.0/24 maxlen: 24
176.125.255.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b2:cb:d5:1d:e7:72:3e:a4:e8:91:ca:2b:8e:47:eb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 20 13:33:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef137fb30ca2566139cc2313e62d75ae3d596741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3f:98:0a:77:03:bd:24:16:0f:30:a1:9a:9d:
ad:89:1c:f9:53:30:d6:1c:8e:dd:fd:b2:20:60:c7:
15:20:08:73:da:27:f9:e3:14:d1:b8:7d:29:24:e9:
0f:db:98:14:a8:69:3c:e3:b2:df:8d:03:28:da:8d:
9d:94:71:90:db:7e:50:86:56:0b:74:a8:bc:e1:fa:
a5:51:53:93:e0:ee:3e:d0:3b:56:9e:2d:76:a4:dc:
69:35:d2:0b:f1:59:84:07:df:00:67:fb:0d:67:9d:
55:40:a8:13:96:81:64:96:25:f1:10:76:ac:27:f4:
61:1e:cd:e7:4a:a0:73:17:17:b5:0f:e7:94:1b:10:
1e:93:c6:f1:12:ee:9d:39:40:3a:7e:c2:10:a9:e3:
3f:07:ae:df:e2:84:e5:52:53:ac:67:0a:1d:89:91:
ef:4a:00:71:ea:39:3c:f9:df:a2:e3:05:b8:e4:00:
01:78:11:ee:15:48:c2:f0:b5:a0:e7:4d:0e:f5:4a:
3a:a4:2f:10:99:82:5f:8e:e3:58:ad:2f:c8:3a:04:
8a:41:c5:a9:3d:b3:52:3b:c4:fc:0e:8f:ba:90:cf:
1a:2b:e5:b5:51:c5:0e:99:1e:92:79:4e:31:9d:09:
dd:b1:ba:c8:23:6e:2d:fb:20:50:91:5b:8c:4a:0b:
39:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:13:7F:B3:0C:A2:56:61:39:CC:23:13:E6:2D:75:AE:3D:59:67:41
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7xN_swyiVmE5zCMT5i11rj1ZZ0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.255.0/24
185.226.175.0/24
193.149.28.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:1c:b0:dd:52:5b:1d:e6:57:5a:f8:45:e9:7c:d9:69:64:e1:
aa:03:5b:cf:ba:93:e2:0c:11:4f:db:32:96:f8:cf:be:f3:42:
55:33:92:1f:06:0d:bd:0c:1c:52:e3:c8:9a:09:9a:07:6c:72:
84:90:3e:7e:69:bd:4f:30:6b:c5:6d:d4:c5:8d:58:96:3c:5f:
fd:67:c9:39:df:27:24:b8:9a:c3:56:07:71:db:8c:35:46:b9:
ac:47:d3:97:d9:f7:8f:4d:a6:f1:0a:27:75:52:96:dc:fd:c0:
3b:a1:c1:c0:6f:92:4a:d1:50:a2:1f:8a:f4:83:33:9a:c3:06:
9e:de:ec:90:9d:2f:71:d7:a2:28:63:ca:9a:ca:bf:cf:59:29:
23:72:8c:05:a1:0a:87:b9:12:e7:a9:4b:e9:0c:45:60:52:97:
1e:bd:85:a1:60:87:9b:82:38:29:4a:46:82:88:05:b9:ee:b8:
cd:6d:9c:5a:91:ee:c8:cb:08:ac:7a:01:68:74:3e:19:9f:75:
01:6e:cd:3c:fb:57:cf:ee:bb:56:5a:d1:30:35:b2:75:46:6c:
ba:7f:0d:5d:cd:ed:1d:ca:07:64:35:41:8b:ef:62:5e:7c:6c:
ce:5e:7b:01:8d:6e:32:86:ad:4c:1e:f6:fd:30:56:09:e8:54:
0f:9b:b2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 25 09:00:21 2023 by rpki-client on console-ams.rpki-client.org