Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/IsvDFshPO_5Y9PL7OCBS4JMs-YQ.roa
File: IsvDFshPO_5Y9PL7OCBS4JMs-YQ.roa (raw, json)
Hash identifier: MAVfKLj1M/j2OveCGX8IhdrRF0fubGtj0r+vCMmSmco=
Subject key identifier: 22:CB:C3:16:C8:4F:3B:FE:58:F4:F2:FB:38:20:52:E0:93:2C:F9:84
Certificate issuer: /CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Certificate serial: 01856DD40DE0B2D9C5D7BC86C939096B6DEB
Authority key identifier: F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/IsvDFshPO_5Y9PL7OCBS4JMs-YQ.roa
Signing time: Sun 01 Jan 2023 14:54:51 +0000
ROA not before: Sun 01 Jan 2023 14:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42643
IP address blocks: 193.142.210.0/24 maxlen: 24
193.200.46.0/23 maxlen: 23
193.200.46.0/24 maxlen: 24
193.200.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:0d:e0:b2:d9:c5:d7:bc:86:c9:39:09:6b:6d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Validity
Not Before: Jan 1 14:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22cbc316c84f3bfe58f4f2fb382052e0932cf984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:19:8a:6d:83:8f:81:d1:2e:73:a7:da:b5:88:
08:5a:a3:75:92:5b:cc:c5:0c:03:f9:e7:e3:46:1c:
33:e1:f3:3c:7a:c0:9e:60:94:0c:3d:d3:70:d9:94:
67:9e:b2:2c:60:bd:b9:dc:e0:4f:84:c3:b1:0e:c0:
71:30:7d:48:76:4c:f6:ca:89:30:fa:dc:09:ac:7b:
a2:9d:18:39:a7:69:c1:c5:ac:a3:32:11:0a:41:db:
99:58:e4:2a:56:bd:02:f1:fb:1b:bf:28:10:c8:ac:
bd:43:08:e6:11:3d:c7:dd:b2:e8:59:80:5b:e5:b5:
7d:c8:74:7e:d9:7f:d3:06:8c:49:6c:ca:9d:b8:1b:
42:1e:79:1f:a4:cf:15:6d:5e:e6:0f:71:35:9e:02:
f3:38:d6:f1:8f:2a:a9:1f:67:15:19:67:cd:6a:fa:
49:d2:28:51:4a:8f:84:55:8c:25:8d:05:61:e6:cf:
90:b7:03:27:aa:ce:07:24:4d:d3:53:7e:9b:6b:1d:
49:57:81:2e:0d:39:20:dc:11:5a:d1:fb:82:23:0a:
b7:49:2b:6d:63:d2:d5:15:2c:2d:0d:8b:34:a5:75:
97:43:42:68:ee:4c:84:40:50:b0:c9:77:a1:8b:6d:
4d:09:d0:57:04:0c:c0:e8:4b:e0:9a:4e:2b:bc:59:
65:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CB:C3:16:C8:4F:3B:FE:58:F4:F2:FB:38:20:52:E0:93:2C:F9:84
X509v3 Authority Key Identifier:
keyid:F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/IsvDFshPO_5Y9PL7OCBS4JMs-YQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.210.0/24
193.200.46.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:02:c1:37:a3:ad:35:ba:29:94:9e:5a:c1:04:eb:64:ab:9d:
7a:24:fd:01:00:ec:15:a9:8e:9f:4a:1e:51:0a:65:f7:f0:cc:
13:e1:b1:bb:fc:55:69:b0:20:ce:24:51:0a:79:12:47:d0:da:
55:10:7c:b1:b4:2a:31:d3:e6:f4:d1:6c:ad:48:62:5b:1b:39:
a7:b1:da:f4:bb:f3:12:0d:99:e5:f0:4e:f8:70:16:1d:cf:5a:
7b:66:63:1c:0c:17:c1:c0:ba:e5:86:9b:9f:57:6f:e0:49:cc:
0d:ab:78:f5:4d:12:74:59:e9:5b:70:2a:a1:2f:25:65:60:bf:
3f:68:2c:32:26:a9:74:79:07:11:5c:90:a0:a2:0f:4a:c4:dc:
fb:38:d0:5f:d1:76:51:d6:9a:01:4f:26:15:f4:8b:27:fa:df:
ca:9a:61:02:43:17:19:b8:62:2a:d6:c6:ae:0e:bc:f8:45:5c:
8e:63:65:2a:de:9a:85:ef:eb:bf:6d:e2:69:c3:ff:3e:03:14:
16:fc:75:92:55:ab:e3:37:f1:d6:57:0f:6f:64:10:1f:ac:e9:
03:2c:23:b4:9c:bd:c6:f1:3c:19:f2:02:4a:2a:5b:06:4a:41:
0a:ed:19:e3:e2:4f:50:92:30:b7:48:94:be:3e:d7:9a:5c:f4:
03:fa:b7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:01 2024 by rpki-client on console-ams.rpki-client.org