Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eCtFmwSggZHfVGNe-g5bUn1NZ4A.roa
File: eCtFmwSggZHfVGNe-g5bUn1NZ4A.roa (raw, json)
Hash identifier: x8da0iLEXxHlE+idNwkJ/hwAoj/oUnRWSEOuetsVk+k=
Subject key identifier: 78:2B:45:9B:04:A0:81:91:DF:54:63:5E:FA:0E:5B:52:7D:4D:67:80
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A892C35FD2283FCDB05531BAB4D71E082
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eCtFmwSggZHfVGNe-g5bUn1NZ4A.roa
Signing time: Tue 12 Sep 2023 11:34:50 +0000
ROA not before: Tue 12 Sep 2023 11:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 193.148.50.0/24 maxlen: 24
194.11.197.0/24 maxlen: 24
193.148.49.0/24 maxlen: 24
194.11.198.0/24 maxlen: 24
194.11.199.0/24 maxlen: 24
193.148.48.0/24 maxlen: 24
193.148.51.0/24 maxlen: 24
194.11.196.0/24 maxlen: 24
185.252.162.0/24 maxlen: 24
185.252.161.0/24 maxlen: 24
185.252.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:89:2c:35:fd:22:83:fc:db:05:53:1b:ab:4d:71:e0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 12 11:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=782b459b04a08191df54635efa0e5b527d4d6780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cb:73:fc:a0:6e:b1:e4:e6:3c:e3:21:3f:47:
e0:ea:f0:17:d9:7a:13:5c:a4:48:68:ab:3c:25:66:
37:65:90:e7:1d:cf:4d:fc:79:29:72:8a:22:9c:48:
be:1d:c1:64:8b:6d:fc:f5:d9:7e:37:f4:81:89:8f:
74:df:3b:f9:80:38:7d:07:ab:c6:20:29:22:01:02:
3b:b4:8f:c0:9f:6c:34:97:f6:bd:ff:64:42:0d:e8:
9a:ea:73:53:dc:42:6c:b2:2a:b9:05:70:14:27:f2:
08:6d:26:ce:26:ca:05:d5:b5:99:b1:b0:56:08:d5:
e9:f5:53:d3:e7:d2:7a:c2:8c:05:3f:dc:7a:fe:b9:
9c:7c:91:da:78:50:03:a7:52:a6:d4:02:42:3c:47:
a3:f1:f6:24:b2:66:18:0a:85:98:3f:91:4b:5e:86:
7e:b1:fc:7c:cd:02:81:62:29:b5:e5:ef:e5:98:df:
ac:d4:34:d5:a2:03:e1:27:0d:58:17:2d:37:e5:fd:
f2:b4:de:88:99:8c:38:d2:6c:c6:ad:b1:d3:a8:cf:
8d:35:44:59:57:93:91:68:71:44:a5:3e:77:3a:90:
10:66:d6:38:f7:8f:50:77:e4:e7:38:d3:82:b6:12:
52:c1:17:64:02:d5:8c:df:35:85:a5:37:8e:90:23:
a8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2B:45:9B:04:A0:81:91:DF:54:63:5E:FA:0E:5B:52:7D:4D:67:80
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eCtFmwSggZHfVGNe-g5bUn1NZ4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.161.0-185.252.163.255
193.148.48.0/22
194.11.196.0/22
Signature Algorithm: sha256WithRSAEncryption
30:82:11:bb:e2:e6:0f:89:4b:9d:f6:c3:26:18:9a:4e:b0:42:
b3:ec:94:7c:dc:7d:29:01:2e:50:1a:08:39:25:05:ab:f5:91:
3f:a6:46:3d:44:1d:1d:c0:cc:0a:14:28:de:71:2b:f3:95:68:
1c:0d:1c:58:71:41:6d:07:f1:c7:b4:01:5d:94:26:33:13:39:
3d:30:da:41:32:64:c3:39:e0:6b:7c:51:51:b6:fb:7b:55:56:
15:93:74:db:d8:d5:9b:fb:b0:c9:31:a6:58:e9:50:71:e4:3d:
57:ac:a7:18:57:ef:6b:6d:e8:7c:61:51:70:a5:3d:a5:c8:8b:
5d:92:94:f1:dc:a7:d2:d2:fb:cb:3a:46:06:ef:69:52:ad:cb:
0d:bc:59:d5:2e:bd:d3:ad:a7:a8:59:c2:2b:29:2c:20:28:e9:
30:50:e9:ae:86:7b:e7:4c:8c:4c:d0:6b:5a:25:ad:93:0a:0f:
18:2b:ca:4d:e6:03:3f:b8:df:48:a5:11:c7:6b:21:dc:47:7b:
a2:ff:ad:5b:66:61:7a:9b:5e:58:c2:d3:13:da:02:c5:e9:c6:
89:29:e6:dc:31:9a:f4:7d:fe:ff:2a:35:40:96:eb:a2:76:44:
bf:af:20:12:c7:85:ef:36:ae:be:35:e1:64:5d:81:57:27:44:
32:04:f0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 29 14:07:29 2023 by rpki-client on console-ams.rpki-client.org