Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/EkUG7VPJs73EGwjRfj61Y68tHk4.roa
File: EkUG7VPJs73EGwjRfj61Y68tHk4.roa (raw, json)
Hash identifier: nTBk7C0Zj/d2bUVUJIj6fD7ijaye7RGD1ZeDDfAmQV4=
Subject key identifier: 12:45:06:ED:53:C9:B3:BD:C4:1B:08:D1:7E:3E:B5:63:AF:2D:1E:4E
Certificate issuer: /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Certificate serial: 01856DD4201109DFBEF936AD484E9BCF939F
Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/EkUG7VPJs73EGwjRfj61Y68tHk4.roa
Signing time: Sun 01 Jan 2023 14:54:56 +0000
ROA not before: Sun 01 Jan 2023 14:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41730
IP address blocks: 193.201.240.0/24 maxlen: 24
193.201.241.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:20:11:09:df:be:f9:36:ad:48:4e:9b:cf:93:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Validity
Not Before: Jan 1 14:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=124506ed53c9b3bdc41b08d17e3eb563af2d1e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d7:1e:51:bf:ea:72:2a:b6:02:4a:c7:eb:97:
7c:48:a8:ce:1e:2f:41:ba:9e:47:f7:01:f8:14:ea:
c4:0e:9e:9f:fc:8b:c4:97:4d:32:4d:c4:ad:ce:c8:
34:37:09:c4:70:63:32:71:2b:f2:16:77:b7:ef:eb:
e0:67:5f:3f:7f:0c:25:f5:17:fe:df:53:3d:df:62:
31:94:08:84:de:b4:a9:55:bd:0e:e5:f5:31:5b:09:
7c:a5:ec:d0:b4:d8:54:b6:17:90:a9:1d:21:29:0d:
b7:88:0c:29:73:0c:0f:73:0c:db:f8:00:5e:d8:be:
45:d7:a8:04:0f:28:e5:97:a9:5d:6a:2b:cf:9d:e9:
d4:56:ec:7e:34:66:32:5b:1f:94:34:67:6f:51:83:
43:c1:dd:7b:6c:d6:1b:3a:1f:eb:79:44:12:fa:55:
97:4a:11:b7:e2:67:47:8f:9f:0b:5b:9f:7f:eb:74:
a9:b7:af:76:ca:4e:c9:66:c0:bd:cf:98:be:e1:4a:
35:57:cf:5d:e5:e2:a8:61:20:78:51:b0:6e:81:9c:
63:15:6f:d5:d5:74:0b:69:83:ae:79:12:d7:9a:52:
50:b2:c2:3e:53:a8:d1:b0:cb:25:6f:7c:81:e2:4b:
1d:fc:0c:19:70:2a:fb:c0:78:95:06:74:72:cc:8d:
c7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:45:06:ED:53:C9:B3:BD:C4:1B:08:D1:7E:3E:B5:63:AF:2D:1E:4E
X509v3 Authority Key Identifier:
keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/EkUG7VPJs73EGwjRfj61Y68tHk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.240.0/23
Signature Algorithm: sha256WithRSAEncryption
97:60:0e:07:c9:15:65:2f:41:84:64:1f:d8:e9:77:2c:be:3e:
22:ae:41:66:d2:7c:51:8c:87:b0:87:e5:01:f3:f2:90:0c:e7:
5b:8a:22:b5:77:a9:92:84:bd:fd:8f:af:7b:c5:1e:cc:55:f0:
f6:3f:2f:e3:c4:9c:24:1c:04:1b:16:72:c7:b7:40:c7:0e:c2:
de:2c:89:e9:42:3c:ad:fa:b7:5a:de:8b:2e:19:f7:a5:ea:5e:
5b:6b:71:c5:a9:89:3d:b5:60:27:cc:0e:54:91:b9:31:25:fe:
e8:f7:03:a5:18:58:e1:44:77:e3:33:29:f5:e8:9b:1e:af:f4:
44:ef:85:fd:52:72:8d:9b:17:6e:a7:38:81:ff:8e:7a:b8:7c:
f8:cc:bf:16:b0:a8:05:44:c8:01:20:b6:43:98:2c:51:9a:43:
d8:94:94:24:c0:d4:dd:5d:4e:f5:ab:42:5e:32:2f:f2:13:8f:
35:f6:7a:07:d9:6a:5d:ae:cd:12:f6:80:60:5a:fc:53:ab:58:
d0:f4:9e:60:b9:d6:47:94:c2:d6:e4:36:de:03:74:c7:21:a8:
f3:9e:9c:60:1d:cc:c5:03:02:af:2e:d2:ec:18:68:26:7d:06:
99:8a:87:7f:a4:6d:37:0a:a3:fb:cf:35:a2:2a:7b:42:9e:8e:
23:b1:a9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:17 2024 by rpki-client on console-fra.rpki-client.org