Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/edlg_sY3A7DduKWRXjZxhaUtBV4.roa
File: edlg_sY3A7DduKWRXjZxhaUtBV4.roa (raw, json)
Hash identifier: u3OahyEA5e7bLRp3wGoboitNTHlY4IBB1vdCpdiNwEw=
Subject key identifier: 79:D9:60:FE:C6:37:03:B0:DD:B8:A5:91:5E:36:71:85:A5:2D:05:5E
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A7A1325C4E79B399897C2CABEF2DC5
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/edlg_sY3A7DduKWRXjZxhaUtBV4.roa
Signing time: Mon 02 Jan 2023 08:44:49 +0000
ROA not before: Mon 02 Jan 2023 08:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41171
IP address blocks: 193.37.200.0/22 maxlen: 22
212.90.116.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:a1:32:5c:4e:79:b3:99:89:7c:2c:ab:ef:2d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79d960fec63703b0ddb8a5915e367185a52d055e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f5:fd:5e:72:95:03:17:67:f6:08:90:d5:ac:
28:3a:16:f9:43:4d:ab:b4:df:45:39:cb:67:00:88:
cd:43:d8:3e:59:05:02:28:2a:f2:9b:79:de:e0:3b:
ca:d6:32:36:47:c6:eb:b2:62:7c:1c:6b:a4:97:19:
61:49:82:a4:0e:74:3e:d3:15:de:0f:c8:66:e4:4b:
f0:96:9a:12:1e:38:05:ed:f4:f3:ab:7d:ec:3e:9d:
f8:67:f4:48:6b:db:71:04:93:b7:64:e0:98:b0:da:
5b:ad:ec:78:d2:0a:7d:24:7c:15:5b:e6:5e:65:42:
45:13:75:ea:21:0b:98:0c:21:9a:4c:3e:59:81:78:
f3:13:fa:35:fd:b3:a6:99:64:25:df:88:1c:c1:e0:
f1:31:73:ee:8c:c2:d0:7a:a5:ba:79:a4:ab:8d:0d:
aa:9c:f6:2d:ba:6b:2e:73:a8:9d:55:73:e2:e6:d8:
ee:ce:b7:12:66:ef:61:de:be:5b:49:52:3b:60:b2:
f5:8a:ab:62:3a:e2:14:e6:55:6f:55:af:40:d4:f8:
b2:62:87:51:56:b9:02:09:5a:ba:60:3b:f8:f7:b9:
95:a8:41:18:93:c8:67:2f:79:4c:e1:ce:7f:44:b6:
aa:32:32:68:15:c3:29:48:7a:96:04:3d:2c:73:3c:
0d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D9:60:FE:C6:37:03:B0:DD:B8:A5:91:5E:36:71:85:A5:2D:05:5E
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/edlg_sY3A7DduKWRXjZxhaUtBV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.200.0/22
212.90.116.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:bf:29:3f:a6:a6:ff:e4:db:7b:ea:ab:55:74:8f:ff:c5:2d:
da:e2:c5:08:3e:68:9b:30:24:94:a2:84:2a:b3:a7:70:ba:c5:
c1:9d:ec:3d:91:f1:15:74:64:81:c3:66:56:2a:b7:39:8a:55:
65:d7:69:d5:73:fe:db:28:95:97:e8:9f:62:e0:3c:d4:86:9e:
57:be:81:8c:f6:63:24:66:c1:a7:19:56:79:a0:f6:39:9c:95:
65:bd:0b:04:da:a5:69:8b:e7:9e:36:44:54:07:de:6b:9a:94:
98:74:f1:8c:be:ca:26:87:17:e3:79:06:5b:48:bc:18:e3:5c:
c2:e1:c2:19:fa:ce:08:67:91:11:f7:6d:cf:77:4c:c4:d8:2c:
48:d3:e0:18:a9:9a:4b:e7:d5:11:eb:d6:01:a6:f4:cf:60:8a:
be:73:6a:87:54:1e:29:4e:24:e0:75:13:68:6b:89:3f:c3:c5:
14:1f:91:06:c9:22:f3:7e:71:1d:93:be:d4:f6:7b:65:45:9a:
65:a8:3d:b0:4b:e0:12:d7:39:d9:97:ab:d3:0e:e1:9a:a9:44:
a9:1f:1d:c7:6b:98:2f:d9:a4:0c:7a:07:64:63:be:38:93:26:
91:81:11:20:b7:0b:a0:4a:01:d8:30:c2:6a:5e:a0:96:54:e1:
9e:98:83:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:21 2024 by rpki-client on console-fra.rpki-client.org