Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/2tyBF9JmbQk_EgOolV6t8_tsHHM.roa
File: 2tyBF9JmbQk_EgOolV6t8_tsHHM.roa (raw, json)
Hash identifier: X7zOJ+GkZ7fyNZWngVOES91fQtmaeygcQKgPnqSfDO4=
Subject key identifier: DA:DC:81:17:D2:66:6D:09:3F:12:03:A8:95:5E:AD:F3:FB:6C:1C:73
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 01856B8119A4F086A14E0E060D5DEE143A1B
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/2tyBF9JmbQk_EgOolV6t8_tsHHM.roa
Signing time: Sun 01 Jan 2023 04:05:00 +0000
ROA not before: Sun 01 Jan 2023 04:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199485
IP address blocks: 82.196.27.0/24 maxlen: 24
88.212.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:81:19:a4:f0:86:a1:4e:0e:06:0d:5d:ee:14:3a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 1 04:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dadc8117d2666d093f1203a8955eadf3fb6c1c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f5:39:dd:83:da:73:c9:28:d9:a8:69:3b:cf:
ee:9d:47:8d:56:95:3d:51:b4:60:5f:88:e3:9a:bb:
36:8c:66:5e:5a:39:b9:ec:69:15:fa:9f:d6:f3:d1:
39:e5:94:f6:30:bc:bd:ca:4f:18:93:46:2d:c7:dc:
eb:eb:14:4b:4d:29:2a:f4:97:5d:37:7b:46:a7:7a:
7e:ce:80:ec:b6:c2:9a:19:ab:8d:b9:6b:c6:58:d7:
d9:da:44:fb:54:ab:46:0e:fd:57:61:c7:6a:ce:84:
61:fb:71:87:06:29:98:87:bd:0d:fb:6e:aa:88:4b:
17:bb:42:40:40:0b:05:8f:df:3f:48:0a:41:47:c2:
3c:2a:e9:4c:d3:0b:68:dc:aa:e9:07:30:ac:74:04:
09:6d:2e:5a:57:68:e8:ac:0b:0f:06:88:7c:47:b2:
aa:bd:5b:31:40:f8:6b:41:67:2a:0f:04:5d:22:51:
e3:98:01:a7:89:5f:44:98:1e:89:2d:1f:65:2d:c9:
a7:f0:30:6c:db:43:84:dc:ca:fc:01:b6:bb:b2:5c:
11:1b:8e:1c:4b:a4:39:ed:6a:6a:bd:cf:b0:4d:03:
4d:56:97:80:9b:cc:ca:8c:75:d2:96:04:7f:77:ed:
2c:a9:79:22:37:15:a4:06:c6:aa:b6:38:e9:90:e5:
1f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DC:81:17:D2:66:6D:09:3F:12:03:A8:95:5E:AD:F3:FB:6C:1C:73
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/2tyBF9JmbQk_EgOolV6t8_tsHHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.196.27.0/24
88.212.144.0/24
Signature Algorithm: sha256WithRSAEncryption
44:1d:40:c9:7b:db:e1:90:b7:32:7d:64:04:bb:05:d1:fa:25:
4f:51:f3:ec:a2:03:5f:9a:fc:0a:bb:3f:34:b9:89:1e:b5:c7:
7a:fd:4f:ac:df:53:47:92:73:eb:b3:1b:11:7a:2c:b8:9d:ae:
33:99:59:53:7e:0b:41:9c:57:ef:5e:ca:a6:9b:b6:8c:0b:f7:
fd:6a:ae:ef:59:7f:1e:79:b9:38:73:c6:23:29:eb:17:2f:4a:
fc:21:f1:86:57:a6:d8:85:54:a7:74:db:4a:d6:7f:d2:90:80:
f2:0e:90:49:30:da:dd:98:a7:2c:e1:13:15:5d:e1:40:9b:bb:
a4:b8:8d:d3:62:39:d0:50:35:14:a9:a6:70:53:1a:3a:d8:77:
2b:16:c4:94:a6:46:98:bb:d7:18:d4:7c:45:ad:a2:d9:9c:b0:
ca:c6:f9:a2:8c:d0:94:68:cf:d3:dc:3e:47:6b:87:97:ff:22:
15:66:45:72:ce:f6:4c:c7:ac:3b:10:80:ac:38:04:83:6c:7e:
49:4b:0b:fb:86:f4:e0:1b:96:e9:17:8f:3e:a3:38:1e:2d:57:
ac:93:6c:b9:6f:9f:7c:45:23:98:65:d3:99:4b:09:0f:ef:3a:
a4:be:6b:3d:6e:47:b3:12:eb:be:72:46:ac:72:7f:59:9e:0b:
22:76:54:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:10 2024 by rpki-client on console-fra.rpki-client.org