Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/e0rMFc3SHuGuNAyGu3p_kMhtKa8.roa
File: e0rMFc3SHuGuNAyGu3p_kMhtKa8.roa (raw, json)
Hash identifier: 9H1qM1iWjaKOecwYDwY6a43Yyfy5chnN2ws6gJk5Zm0=
Subject key identifier: 7B:4A:CC:15:CD:D2:1E:E1:AE:34:0C:86:BB:7A:7F:90:C8:6D:29:AF
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 0185FA0BFEF241C6626131D9C0FAC9BE9E23
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/e0rMFc3SHuGuNAyGu3p_kMhtKa8.roa
Signing time: Sat 28 Jan 2023 20:22:48 +0000
ROA not before: Sat 28 Jan 2023 20:22:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 193.239.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:fa:0b:fe:f2:41:c6:62:61:31:d9:c0:fa:c9:be:9e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 28 20:22:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b4acc15cdd21ee1ae340c86bb7a7f90c86d29af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6a:b8:0c:6b:f8:e3:5e:48:85:c2:c6:43:d9:
5d:b9:d2:d1:d3:84:c0:2a:47:ac:84:12:77:de:92:
5e:4d:a2:ac:d8:31:5e:f4:b3:83:fd:5a:af:d0:d5:
ec:20:b8:50:7b:d1:9c:20:14:98:1f:e9:c7:45:08:
b7:76:cc:45:a0:08:df:5d:ee:41:81:61:ea:ef:b6:
39:cc:91:70:70:6a:03:52:52:ff:f5:5e:fe:4a:84:
79:58:7e:fe:2f:a0:71:e5:35:ec:16:e0:de:0e:7b:
61:4f:3b:ee:54:f7:8a:f0:ef:b7:94:a2:20:d8:fd:
5f:2e:f8:d7:df:77:92:d4:17:4b:05:d9:08:6b:31:
a2:9a:13:02:39:4f:24:26:86:60:0d:ca:c1:fe:b7:
ad:01:a5:c8:9d:41:b4:44:bb:90:7c:86:9e:19:52:
5d:5e:79:4a:a8:b1:bd:45:f3:8e:f9:65:63:1f:a7:
e2:fd:ba:b7:81:b7:db:2b:c8:9b:30:29:21:e9:06:
f6:ff:29:d2:db:11:3b:7d:a3:90:25:7a:62:9e:04:
63:6d:4d:40:9a:36:b0:e9:0c:70:b8:81:43:60:74:
28:49:28:56:49:1e:c7:d1:39:39:63:ab:8d:39:a9:
de:fb:fc:23:64:08:77:1c:4b:52:51:c0:b5:fc:83:
b8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4A:CC:15:CD:D2:1E:E1:AE:34:0C:86:BB:7A:7F:90:C8:6D:29:AF
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/e0rMFc3SHuGuNAyGu3p_kMhtKa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.236.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:78:68:05:68:1c:b1:0f:94:24:a3:37:52:13:c2:55:e7:c8:
b2:2b:10:ec:c7:5b:25:4d:f4:10:80:1b:84:f4:f6:e7:28:f6:
e0:68:66:7b:1c:3b:33:b1:f9:90:1a:a9:56:e2:db:43:2d:23:
02:d3:7e:b3:30:5a:9b:52:c1:8b:6e:07:ff:c8:73:e5:cf:7d:
f2:52:c1:eb:32:20:46:e8:ff:bb:0a:e3:0e:04:d9:d9:6b:d1:
b4:93:1f:66:cb:e9:20:db:bd:bf:c0:ed:3e:b1:71:20:86:02:
17:62:ef:db:7c:82:62:1c:ed:30:f6:58:34:b9:d2:f1:09:3a:
69:e0:26:3c:13:e0:32:ba:3c:e0:07:58:aa:92:f3:e0:13:41:
74:ca:62:f9:f8:bc:3a:a3:93:38:3d:59:b9:57:4a:c6:67:7b:
15:21:fa:9a:42:5c:09:e1:2f:fe:76:81:bd:98:b3:40:43:bf:
86:d6:30:73:4b:cf:5c:83:da:9d:3d:d1:2f:e1:67:84:53:8b:
df:92:20:3d:95:24:65:31:e5:2c:14:a2:55:ae:67:0b:7b:7a:
22:df:be:00:eb:f0:2c:cd:b7:6e:76:99:3f:70:15:76:b9:c0:
95:75:fa:25:82:e8:d2:40:7f:4b:f8:19:df:7a:cd:4c:49:58:
8b:5a:18:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:03 2024 by rpki-client on console-fra.rpki-client.org