Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/KUdvLj_EwNEw_wNGxWFLzYjlu1g.roa
File: KUdvLj_EwNEw_wNGxWFLzYjlu1g.roa (raw, json)
Hash identifier: NFdd7d11h+xG0438wVBVTkPte17tlfrrTVXoG4WIrI8=
Subject key identifier: 29:47:6F:2E:3F:C4:C0:D1:30:FF:03:46:C5:61:4B:CD:88:E5:BB:58
Certificate issuer: /CN=eead7e8a2349f402a87bfb32ab6e9946f8c4c3f0
Certificate serial: 0185708CC79BF049F8B59E4FD7949090E880
Authority key identifier: EE:AD:7E:8A:23:49:F4:02:A8:7B:FB:32:AB:6E:99:46:F8:C4:C3:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7q1-iiNJ9AKoe_syq26ZRvjEw_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/KUdvLj_EwNEw_wNGxWFLzYjlu1g.roa
Signing time: Mon 02 Jan 2023 03:35:52 +0000
ROA not before: Mon 02 Jan 2023 03:35:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213183
IP address blocks: 194.147.93.0/24 maxlen: 24
194.147.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:c7:9b:f0:49:f8:b5:9e:4f:d7:94:90:90:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eead7e8a2349f402a87bfb32ab6e9946f8c4c3f0
Validity
Not Before: Jan 2 03:35:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29476f2e3fc4c0d130ff0346c5614bcd88e5bb58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:b6:0d:f3:1a:ce:ca:07:61:99:15:1b:fb:
db:61:c5:7c:64:1a:a7:24:fd:ae:9f:35:c2:b3:02:
6b:e3:c5:55:e6:e5:56:51:01:d3:f3:ea:95:38:16:
98:f3:34:51:da:13:3a:a9:47:25:70:ec:50:d3:27:
e7:11:a9:2f:81:a9:b1:14:c6:12:27:cd:5e:7a:8d:
a2:a7:ea:de:2a:85:72:8f:1b:35:b9:cc:28:9f:bc:
05:13:59:d7:23:41:aa:1a:ed:9d:db:7d:43:3b:2f:
56:df:c1:fa:25:9a:60:e8:e7:5b:7f:69:bc:9a:6a:
54:1c:3b:50:d3:3d:3e:65:be:ce:c0:23:eb:1e:e5:
fa:e2:58:26:a3:64:04:22:8e:fe:27:f4:83:b3:fe:
01:99:7f:f6:e5:6b:ef:a4:65:36:77:38:89:4f:4b:
f3:70:25:65:ca:0a:53:eb:2a:99:a0:34:56:dd:1f:
3c:44:68:f2:c6:a4:3e:f3:5a:d9:cb:2b:77:03:dc:
ca:d8:2a:0a:fd:49:d1:ab:d7:35:9b:59:1d:bf:89:
eb:fa:a0:b7:31:af:6f:9e:b9:8d:b1:30:00:cb:12:
01:bc:82:9e:12:83:00:bd:eb:34:cf:48:e3:33:f2:
c1:1d:7c:1a:9a:51:05:57:41:a5:6d:5e:c7:f6:3d:
2b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:47:6F:2E:3F:C4:C0:D1:30:FF:03:46:C5:61:4B:CD:88:E5:BB:58
X509v3 Authority Key Identifier:
keyid:EE:AD:7E:8A:23:49:F4:02:A8:7B:FB:32:AB:6E:99:46:F8:C4:C3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q1-iiNJ9AKoe_syq26ZRvjEw_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/KUdvLj_EwNEw_wNGxWFLzYjlu1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/7q1-iiNJ9AKoe_syq26ZRvjEw_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.93.0-194.147.94.255
Signature Algorithm: sha256WithRSAEncryption
0b:9f:44:e2:f1:58:15:81:13:b3:48:64:fc:ab:f7:13:5c:4c:
43:cb:b9:67:fb:20:31:55:98:67:ad:a6:49:69:23:55:a7:4f:
47:7c:2a:24:59:3e:b6:88:d1:2d:8a:f4:6b:c7:ec:ed:d2:ea:
4e:03:3f:a3:63:97:bd:fd:d8:40:86:dc:dc:eb:ac:1d:14:31:
ef:2a:9e:34:ce:6a:50:9b:5b:24:12:ce:5c:e1:bd:18:4c:3f:
86:e5:06:65:da:f1:c4:96:5f:92:1e:24:e0:24:38:48:ad:64:
1d:18:35:9d:3e:7a:68:ba:69:58:88:d6:fa:64:ca:00:eb:8a:
e0:f2:a6:4d:d0:48:f7:0f:37:8e:ef:a4:75:26:25:6d:e3:b9:
11:66:15:43:b8:26:d5:58:a0:b6:0a:dd:39:53:d2:7b:7c:c0:
1c:82:b0:82:4c:15:d7:cb:cf:91:be:da:59:28:49:5d:1c:43:
76:41:cc:72:17:51:60:d9:71:91:f8:c7:ee:05:a0:8c:9d:11:
f1:47:90:c6:d7:8b:d3:e6:ab:9b:12:16:8f:7e:06:82:b4:0a:
48:41:27:ba:97:16:b5:87:93:3e:8f:f9:00:38:3d:97:95:88:
5d:65:78:f5:cb:34:8b:5d:5e:f1:aa:50:0a:f7:77:fa:8a:34:
7f:54:8b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:27 2024 by rpki-client on console-ams.rpki-client.org