Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Pr0150TXKkNP8nmLqc0oduPm6gg.roa
File: Pr0150TXKkNP8nmLqc0oduPm6gg.roa (raw, json)
Hash identifier: rRAUI6naH1KDm0FAESlnBUYjakpfq1yWGkeMXFJ914w=
Subject key identifier: 3E:BD:35:E7:44:D7:2A:43:4F:F2:79:8B:A9:CD:28:76:E3:E6:EA:08
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01857390001D98CA4FF44E4CF572797752EE
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Pr0150TXKkNP8nmLqc0oduPm6gg.roa
Signing time: Mon 02 Jan 2023 17:38:15 +0000
ROA not before: Mon 02 Jan 2023 17:38:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206446
IP address blocks: 193.31.29.0/24 maxlen: 24
194.56.227.0/24 maxlen: 24
185.186.66.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:90:00:1d:98:ca:4f:f4:4e:4c:f5:72:79:77:52:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ebd35e744d72a434ff2798ba9cd2876e3e6ea08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:13:90:75:37:6e:a5:bf:77:ec:28:b9:db:04:
b4:3b:71:20:b8:df:df:cd:23:0d:d2:08:4a:34:ee:
dd:8f:d5:10:e0:90:2c:e5:54:d0:d0:d6:c7:2e:14:
25:ba:9d:99:b3:ef:f3:33:27:6f:0c:71:c8:d8:39:
18:6a:ea:ad:d9:2c:83:2f:99:32:a0:bf:f3:6d:5d:
69:4a:51:8a:1c:08:ca:94:89:05:61:59:4c:1f:7d:
84:98:07:77:5e:51:cf:59:64:51:74:69:dd:c8:27:
7a:4a:5c:46:43:d5:31:a7:a7:18:08:b2:c4:d7:fb:
0c:ed:95:59:14:cc:2c:79:15:27:f9:c6:42:e7:f6:
73:d3:98:f1:11:79:ed:dd:cf:85:5b:62:ac:92:41:
9b:a3:ab:4d:d4:91:ce:84:24:9c:d7:c7:66:65:35:
90:a2:a6:bf:2f:d5:d4:53:73:aa:c6:a3:4c:c0:4e:
06:42:d9:42:1c:b4:ac:11:45:53:71:de:b8:da:ee:
3e:eb:35:e3:8d:49:a5:3b:b3:fd:ff:2b:0a:5c:7d:
4a:28:e3:65:f9:51:24:fc:da:de:9e:a3:ac:fb:b2:
a9:6e:c4:c0:3a:e8:18:5b:e5:28:30:85:4e:01:1e:
c8:42:37:8d:02:47:0a:59:25:86:b2:a5:cd:30:7f:
33:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BD:35:E7:44:D7:2A:43:4F:F2:79:8B:A9:CD:28:76:E3:E6:EA:08
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Pr0150TXKkNP8nmLqc0oduPm6gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.66.0/24
193.31.29.0/24
194.56.227.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:5f:d2:6d:67:dc:ca:f4:58:3f:74:b7:e1:74:f1:4c:db:1f:
2c:1f:ee:fc:76:96:34:41:ec:36:49:5e:5e:55:6e:40:3b:66:
b6:8f:a5:11:e3:3e:fc:d3:3b:18:49:fa:d8:1d:d7:23:b1:79:
3e:d7:95:5f:70:f7:50:81:60:87:2d:c9:0f:8b:be:3b:73:75:
4c:93:66:02:ea:7c:54:91:03:e2:10:16:2e:04:dc:b7:2f:b5:
a4:42:48:71:31:53:db:af:6b:c8:6d:42:a7:db:32:5b:bb:0b:
37:c7:67:62:3d:25:36:c9:44:3d:11:62:32:dd:da:f0:a0:98:
ef:fb:13:58:8d:54:a2:98:24:c7:f5:5c:f6:64:56:35:d7:5a:
71:64:8e:be:66:06:67:29:52:e1:90:11:8b:3a:33:ae:8e:39:
a5:b0:2c:0c:5c:ea:d3:e5:02:d1:99:71:8f:0d:7d:29:09:bc:
ba:8f:53:37:e0:58:cf:20:ea:15:26:6f:23:1a:e0:33:2b:9f:
77:7f:59:41:77:fe:54:80:c5:08:d5:ad:c1:80:da:ea:d8:8c:
fc:4b:b6:00:41:14:fc:78:3f:ef:63:ee:12:e9:b2:fb:b0:03:
70:c0:ab:ac:2f:0f:4a:f2:13:a7:4a:bd:e2:6a:8b:80:e5:4d:
de:42:12:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:34 2024 by rpki-client on console-ams.rpki-client.org