Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/EivWc7yB1Ccq7aO2SUKNEcot0Ew.roa
File: EivWc7yB1Ccq7aO2SUKNEcot0Ew.roa (raw, json)
Hash identifier: kVJfgIdRba6/eIvAYvrS5Qwn7N0Uhk97DRWNe0Zu6Rs=
Subject key identifier: 12:2B:D6:73:BC:81:D4:27:2A:ED:A3:B6:49:42:8D:11:CA:2D:D0:4C
Certificate issuer: /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Certificate serial: 0185712782F1FE975E6875F491E9C2A0AB63
Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/EivWc7yB1Ccq7aO2SUKNEcot0Ew.roa
Signing time: Mon 02 Jan 2023 06:24:52 +0000
ROA not before: Mon 02 Jan 2023 06:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47774
IP address blocks: 193.111.16.0/23 maxlen: 24
194.117.55.128/25 maxlen: 25
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:82:f1:fe:97:5e:68:75:f4:91:e9:c2:a0:ab:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Validity
Not Before: Jan 2 06:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=122bd673bc81d4272aeda3b649428d11ca2dd04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:19:1a:9b:1e:72:88:d8:ae:de:e2:4c:c6:
0d:b0:1d:eb:8e:b3:a6:72:d1:d6:4f:29:98:62:43:
d9:69:e1:6a:15:61:33:42:22:73:2d:3e:cc:d6:e0:
37:60:06:f1:95:27:39:f8:e6:21:95:54:dc:49:92:
c8:01:6c:4b:d5:1b:35:12:ce:5c:24:6c:c0:e2:10:
30:92:83:8e:e3:e7:f4:8c:3f:2a:8c:f9:3e:84:2f:
79:c2:d5:0d:49:fe:b0:85:7c:fc:b9:fe:a7:a4:ce:
87:c7:5e:9a:7e:97:b9:57:23:bd:1f:b6:88:19:a0:
5c:16:8e:e8:ff:89:74:d5:64:41:66:2c:93:53:3e:
ed:49:51:69:52:80:51:82:ef:4b:d2:ce:0e:15:5b:
6e:6b:a3:bf:c0:c9:d4:68:7b:15:90:b9:62:15:2a:
4f:7d:59:9f:fb:8e:72:71:ea:df:5a:9a:51:e8:6f:
4b:d5:84:c1:78:e1:36:3d:4d:94:12:45:be:a8:e2:
01:0f:8b:ed:77:57:23:07:40:c3:1a:1d:ad:ab:46:
e2:b1:05:f5:79:a8:45:7e:69:bc:2a:ef:23:28:63:
57:42:11:35:c1:d2:27:22:be:ae:c0:6b:63:39:a2:
3c:20:2d:2e:79:5b:90:f4:20:ad:f6:20:f3:0f:58:
6e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2B:D6:73:BC:81:D4:27:2A:ED:A3:B6:49:42:8D:11:CA:2D:D0:4C
X509v3 Authority Key Identifier:
keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/EivWc7yB1Ccq7aO2SUKNEcot0Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.16.0/23
194.117.55.128/25
Signature Algorithm: sha256WithRSAEncryption
55:a6:80:b4:a3:e1:9f:f4:43:2f:d7:54:8e:89:6f:5e:c7:eb:
0f:9e:8a:34:ae:35:96:4e:1c:6e:e9:b3:30:e9:1d:81:9f:e4:
99:3b:80:ba:88:4c:0c:46:31:79:82:96:a7:ed:5c:a7:d2:89:
7d:54:15:22:38:93:26:99:84:60:3d:06:80:95:a8:1b:69:25:
01:25:8e:cf:24:0d:f9:00:72:42:80:f7:79:fb:3d:89:51:80:
1c:6c:bd:eb:ca:cc:dd:a3:cb:51:a4:90:5d:49:18:6b:96:a0:
61:d5:5c:4a:06:fa:89:f8:e9:1b:43:bf:d6:f4:6a:ca:47:59:
75:44:f2:b3:b4:47:30:ea:6c:93:a3:e0:9a:f1:42:cc:bd:13:
7c:11:a8:ae:68:cd:07:81:c2:fc:a3:a0:99:68:fb:32:a7:33:
89:33:21:b0:17:24:23:e0:f9:e8:5d:5c:75:8d:b2:e4:b3:2c:
7f:d7:65:8b:de:89:19:9a:62:17:66:35:e1:dc:b0:be:66:67:
60:aa:88:9b:98:06:de:a3:54:85:cf:88:cb:04:70:16:ea:c9:
cc:a4:62:26:9d:5e:fe:f8:27:20:b2:69:87:57:ec:3e:85:11:
42:17:59:8b:b1:2b:50:ee:9e:26:c2:1b:e5:3e:c2:46:b0:d0:
4e:a4:3c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:58 2024 by rpki-client on console-fra.rpki-client.org