Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/RrEpGncQCsXmls9nTnYGp2hx0O8.roa
File: RrEpGncQCsXmls9nTnYGp2hx0O8.roa (raw, json)
Hash identifier: F9ijTGqPa7tfm/8UNlhRzJa2QJ3xJl+fYrFL9nMfWKo=
Subject key identifier: 46:B1:29:1A:77:10:0A:C5:E6:96:CF:67:4E:76:06:A7:68:71:D0:EF
Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial: 01861731DEF6F592677CA8BC659E46C170A1
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/RrEpGncQCsXmls9nTnYGp2hx0O8.roa
Signing time: Fri 03 Feb 2023 12:13:09 +0000
ROA not before: Fri 03 Feb 2023 12:13:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200264
IP address blocks: 82.194.237.0/24 maxlen: 24
81.95.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:17:31:de:f6:f5:92:67:7c:a8:bc:65:9e:46:c1:70:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Validity
Not Before: Feb 3 12:13:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46b1291a77100ac5e696cf674e7606a76871d0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:bb:e7:04:b2:d8:bb:5f:ba:43:f7:32:4d:82:
c1:78:c9:d2:60:07:48:64:e9:61:9a:7b:94:96:62:
00:ee:8a:0b:02:66:f6:97:0f:35:7f:18:26:65:d1:
8a:ab:2b:46:46:54:fb:72:c6:c4:07:96:ef:7a:32:
b6:49:f8:fa:73:3d:dd:e5:32:c5:6f:0f:e7:e2:3a:
1e:22:f8:14:f2:dc:c6:be:a4:f9:7c:be:0e:72:ff:
17:0c:f2:d7:75:6c:10:07:d5:1b:99:3f:31:1b:35:
9c:55:47:79:1c:4d:ad:c6:c3:7d:41:70:8a:e8:31:
6c:bc:3e:37:4e:3e:16:c0:93:a8:66:b5:21:08:d8:
28:7e:75:57:3d:ea:77:b0:62:ef:4b:ac:23:0d:69:
4b:2f:3d:d3:83:17:b6:3f:89:61:56:71:22:2c:00:
45:32:84:19:44:b4:7a:e0:ba:91:f1:47:82:08:de:
6a:8b:5b:d1:e2:29:dd:fd:69:97:2b:1a:61:26:4b:
e7:e7:03:84:f0:d6:06:f6:fc:f8:ce:97:4d:42:96:
ca:99:12:47:a9:49:df:ce:85:69:7a:f6:d7:63:7e:
41:3a:13:33:56:d1:aa:87:7f:e9:0a:5f:90:5a:6c:
d6:88:34:4f:c9:46:e9:d7:a9:d4:ce:2e:d6:1d:66:
c0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B1:29:1A:77:10:0A:C5:E6:96:CF:67:4E:76:06:A7:68:71:D0:EF
X509v3 Authority Key Identifier:
keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/RrEpGncQCsXmls9nTnYGp2hx0O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.95.42.0/24
82.194.237.0/24
Signature Algorithm: sha256WithRSAEncryption
06:10:df:7c:49:ac:3c:05:76:30:eb:33:0f:26:b8:46:1b:fb:
9b:1c:4a:5e:8b:6b:3b:31:81:60:c7:59:45:b7:30:1e:49:b8:
3b:c7:d0:fe:7e:5d:04:44:c2:f4:7b:03:c1:94:e7:cf:40:3d:
81:38:73:81:af:4b:e1:4d:5e:90:4c:5c:ad:5d:a3:a3:bd:db:
8d:e7:2f:df:d6:6f:41:51:ee:82:62:47:ee:3b:c6:f4:2f:6f:
aa:55:16:32:d1:05:fb:14:ba:33:58:32:38:1a:7d:8f:01:80:
6e:36:00:51:9c:2b:cf:bb:1b:af:16:d5:46:79:d1:91:4f:2c:
fb:db:c2:89:11:8c:35:53:72:77:c4:08:ee:68:0a:22:80:cc:
d3:a2:e7:d7:4b:18:15:33:f1:1a:a4:11:46:97:33:9b:ec:61:
e0:82:8c:bd:7c:a0:cf:06:e8:bf:2c:ba:60:64:34:0d:2e:dc:
33:52:e2:2e:e2:8c:5d:a1:cd:9f:e2:4d:af:5c:f1:3c:89:cf:
06:c9:ee:c5:33:2e:68:c8:3d:6e:d7:15:4f:19:6b:45:0f:c1:
9b:47:9e:77:5d:af:f4:03:d0:11:9d:4f:b4:bc:30:12:43:1c:
85:05:99:79:eb:92:0a:47:a8:11:39:73:d3:cd:d2:2d:d5:08:
4c:b5:1d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:48 2024 by rpki-client on console-ams.rpki-client.org