Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/EaSfjgXleU9ndyD74OJ89SRRuDg.roa
File: EaSfjgXleU9ndyD74OJ89SRRuDg.roa (raw, json)
Hash identifier: 4D48iZxzL+cSJ5BHdCbIcnQ/YCfJJeDvdaC/A7u4J1c=
Subject key identifier: 11:A4:9F:8E:05:E5:79:4F:67:77:20:FB:E0:E2:7C:F5:24:51:B8:38
Certificate issuer: /CN=1911a6583dc79a41551b17aeb4314db29311cbeb
Certificate serial: 0185718C224599EABDE0EAC5B8C4549E8691
Authority key identifier: 19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/EaSfjgXleU9ndyD74OJ89SRRuDg.roa
Signing time: Mon 02 Jan 2023 08:14:47 +0000
ROA not before: Mon 02 Jan 2023 08:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208060
IP address blocks: 193.43.30.0/23 maxlen: 24
193.43.32.0/23 maxlen: 24
2a0f:b880::/29 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:22:45:99:ea:bd:e0:ea:c5:b8:c4:54:9e:86:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1911a6583dc79a41551b17aeb4314db29311cbeb
Validity
Not Before: Jan 2 08:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11a49f8e05e5794f677720fbe0e27cf52451b838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:29:e2:63:f0:40:ad:9e:44:7e:29:20:6b:
1e:30:73:78:f2:21:21:5f:a4:6c:fd:ba:ea:4d:45:
36:8f:dd:6f:37:72:e0:bd:69:e5:c4:8d:09:18:f1:
eb:02:70:37:d3:1b:ae:ed:98:fd:2e:c9:e4:0f:90:
02:fc:f7:e4:88:b3:c7:ff:b8:d3:2a:f4:ee:dc:e3:
d7:e7:eb:86:49:63:dc:ca:b4:78:4d:7d:9d:35:dd:
79:24:50:4d:ea:a6:91:ea:93:42:de:21:df:d6:d7:
dd:4c:9b:34:64:af:08:64:67:60:47:f9:39:0d:3b:
4c:49:10:b6:91:5d:0e:51:bb:78:7c:f1:23:92:31:
95:6e:86:4c:6a:15:c1:09:08:fa:57:19:61:04:93:
68:cd:62:7d:e2:40:db:3a:0e:cd:9e:86:88:44:75:
e5:4b:4f:30:24:38:fd:63:10:4e:42:96:6c:83:66:
33:d7:a9:fb:9d:06:ae:55:09:9f:53:80:43:96:15:
f4:52:8a:f0:9a:f4:25:07:cc:bd:79:08:fe:09:32:
45:99:a9:2a:2e:fa:b1:c9:5d:c9:09:74:98:ad:8e:
c4:50:2c:1f:ba:2a:49:83:af:ec:65:2b:23:39:09:
53:dd:7a:4e:4c:2d:25:74:43:3f:1f:ae:8a:36:f2:
8c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A4:9F:8E:05:E5:79:4F:67:77:20:FB:E0:E2:7C:F5:24:51:B8:38
X509v3 Authority Key Identifier:
keyid:19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/EaSfjgXleU9ndyD74OJ89SRRuDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.30.0-193.43.33.255
IPv6:
2a0f:b880::/29
Signature Algorithm: sha256WithRSAEncryption
a7:aa:bd:fe:b6:e2:ca:2d:fb:3f:90:ce:4f:ce:a3:58:cc:65:
62:fa:4a:95:af:67:e6:1a:a4:77:38:ca:a6:05:23:4b:92:15:
6a:a5:22:63:a9:48:5f:2c:0d:13:8c:d2:60:b0:e6:0a:e8:97:
10:63:95:e9:ab:fa:61:f5:61:28:1e:a0:0e:82:20:f9:ac:b5:
3b:5a:79:bc:8e:2d:60:d7:ee:55:d7:f5:31:99:ac:d4:2e:1b:
aa:28:37:5f:7b:ab:49:af:33:1f:81:49:66:b0:3e:73:b7:47:
6c:5a:51:59:fe:1b:75:36:03:62:2b:e3:2c:3c:bd:24:80:58:
a9:b5:eb:e1:3e:75:26:9c:0e:0e:a9:e1:42:1b:43:79:4f:92:
aa:f0:9c:eb:54:90:34:93:c1:66:88:14:f7:b3:30:4c:70:97:
66:7b:12:89:55:e6:e6:1b:10:84:fc:d0:9b:8c:b4:55:27:cc:
af:cf:0c:8f:95:42:9b:1c:bd:36:f0:bb:52:82:a8:9e:c0:05:
4b:71:db:9b:6c:14:2f:b9:fb:5c:43:88:73:76:de:84:3c:cc:
73:55:ac:aa:91:0e:86:07:36:8f:28:5b:12:74:7b:51:6c:55:
d2:90:04:cc:39:4f:44:8b:14:59:35:21:48:61:d1:d1:86:66:
fa:a5:bf:80
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYVxjCJFmeq94OrFuMRUnoaRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MTFhNjU4M2RjNzlhNDE1NTFiMTdhZWI0MzE0ZGIyOTMx
MWNiZWIwHhcNMjMwMTAyMDgxNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWE0OWY4ZTA1ZTU3OTRmNjc3NzIwZmJlMGUyN2NmNTI0NTFiODM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruwp4mPwQK2eRH4pIGseMHN48iEh
X6Rs/brqTUU2j91vN3LgvWnlxI0JGPHrAnA30xuu7Zj9LsnkD5AC/PfkiLPH/7jT
KvTu3OPX5+uGSWPcyrR4TX2dNd15JFBN6qaR6pNC3iHf1tfdTJs0ZK8IZGdgR/k5
DTtMSRC2kV0OUbt4fPEjkjGVboZMahXBCQj6VxlhBJNozWJ94kDbOg7NnoaIRHXl
S08wJDj9YxBOQpZsg2Yz16n7nQauVQmfU4BDlhX0UorwmvQlB8y9eQj+CTJFmakq
LvqxyV3JCXSYrY7EUCwfuipJg6/sZSsjOQlT3XpOTC0ldEM/H66KNvKMGQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFBGkn44F5XlPZ3cg++DifPUkUbg4MB8GA1UdIwQY
MBaAFBkRplg9x5pBVRsXrrQxTbKTEcvrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1JHbVdEM0hta0ZWR3hldXRERk5zcE1SeS1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lYjE2ZWItNzdmNS00MDAzLWI5MDMt
MWMzNGFmZDlkNTBkLzEvRWFTZmpnWGxlVTluZHlENzRPSjg5U1JSdURnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9lYjE2ZWItNzdmNS00MDAzLWI5MDMtMWMzNGFmZDlkNTBk
LzEvR1JHbVdEM0hta0ZWR3hldXRERk5zcE1SeS1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAHBKx4D
BAHBKyAwDQQCAAIwBwMFAyoPuIAwDQYJKoZIhvcNAQELBQADggEBAKeqvf624sot
+z+Qzk/Oo1jMZWL6SpWvZ+YapHc4yqYFI0uSFWqlImOpSF8sDROM0mCw5grolxBj
lemr+mH1YSgeoA6CIPmstTtaebyOLWDX7lXX9TGZrNQuG6ooN197q0mvMx+BSWaw
PnO3R2xaUVn+G3U2A2Ir4yw8vSSAWKm16+E+dSacDg6p4UIbQ3lPkqrwnOtUkDST
wWaIFPezMExwl2Z7EolV5uYbEIT80JuMtFUnzK/PDI+VQpscvTbwu1KCqJ7ABUtx
25tsFC+5+1xDiHN23oQ8zHNVrKqRDoYHNo8oWxJ0e1FsVdKQBMw5T0SLFFk1IUhh
0dGGZvqlv4A=
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:25 2024 by rpki-client on console-fra.rpki-client.org