Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/E_-8tVe705WeGHfh6798EWOj5-8.roa
File: E_-8tVe705WeGHfh6798EWOj5-8.roa (raw, json)
Hash identifier: U3PrCboEYbYYSQFIQf840VGr76at8IMX30MffLlfAOE=
Subject key identifier: 13:FF:BC:B5:57:BB:D3:95:9E:18:77:E1:EB:BF:7C:11:63:A3:E7:EF
Certificate issuer: /CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Certificate serial: 018570DE4FE46149AE4745AD070D8FB6051F
Authority key identifier: A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/E_-8tVe705WeGHfh6798EWOj5-8.roa
Signing time: Mon 02 Jan 2023 05:04:55 +0000
ROA not before: Mon 02 Jan 2023 05:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34489
IP address blocks: 193.0.226.0/24 maxlen: 24
195.250.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:4f:e4:61:49:ae:47:45:ad:07:0d:8f:b6:05:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Validity
Not Before: Jan 2 05:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13ffbcb557bbd3959e1877e1ebbf7c1163a3e7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:2b:3a:d8:12:82:2a:0d:d5:c2:fd:f0:42:
eb:9c:9e:45:37:2f:f1:11:0b:9d:5e:28:83:b8:4f:
88:a9:fd:00:06:50:6b:fd:ad:c6:57:fc:1a:5c:af:
aa:ee:78:f3:58:2b:e0:09:23:27:86:e5:c5:c3:f4:
de:15:04:6c:be:dc:3f:4b:c3:cb:a3:c2:b6:46:9b:
52:a4:10:a8:48:7d:ee:c8:e1:0f:9d:11:d9:eb:80:
8d:b9:bf:80:3e:56:8a:a1:21:e8:5e:e0:cc:14:49:
d3:7a:d5:5d:05:02:e1:a4:5d:08:20:97:83:25:bf:
f5:1f:dd:3d:b4:dc:7f:77:02:98:d6:fb:a4:a2:4d:
c6:22:0b:ca:99:7c:4d:87:ff:f1:e0:29:75:11:09:
54:2f:0c:c7:07:6e:65:45:58:d8:db:74:bf:2b:32:
65:a1:0e:79:4a:a4:ab:19:7f:41:23:f2:92:b2:fa:
75:40:03:d0:ff:06:97:70:b2:44:66:d2:e0:99:be:
f4:36:36:83:c2:cd:d0:cf:4b:c6:cd:50:72:4a:c5:
d7:36:45:1f:4d:e8:c2:50:1d:f0:36:22:05:32:4b:
22:5e:91:d7:ad:d7:4c:b9:00:69:da:11:6a:d2:d6:
2f:71:f6:dc:17:f7:85:3b:97:a9:26:d6:86:6c:a6:
85:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FF:BC:B5:57:BB:D3:95:9E:18:77:E1:EB:BF:7C:11:63:A3:E7:EF
X509v3 Authority Key Identifier:
keyid:A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/E_-8tVe705WeGHfh6798EWOj5-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.226.0/24
195.250.39.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:1b:ea:e8:16:b3:45:1b:4d:d1:55:f1:b2:e1:9f:28:2e:e5:
5d:42:32:a0:21:f7:cd:aa:1a:aa:95:2b:7c:cd:7e:29:c2:92:
32:f6:54:e4:cd:fa:70:23:d6:9a:ea:b1:86:b4:19:7b:d0:3d:
85:76:cf:cf:32:fe:00:30:5c:96:59:24:0b:ce:f3:e6:d1:07:
cd:f7:3c:5d:76:0b:e5:1d:79:40:e3:18:b3:5e:36:bc:27:c3:
62:18:9d:3e:df:3a:c7:ab:5f:b1:f5:be:18:ef:7b:fa:5e:a9:
ea:28:d1:67:8f:f3:9f:0c:b3:dc:18:5c:49:27:de:4a:1c:24:
12:f0:7d:f8:a7:cd:9f:20:a0:83:03:c7:e2:0e:87:cf:3d:f4:
b0:65:b1:40:bc:bf:0a:3f:b1:3a:05:a9:1d:bb:5d:9b:3f:e8:
c1:4d:33:fd:a3:47:4b:07:05:7f:88:2c:64:2c:95:67:8c:5a:
7c:a4:1d:b1:02:fd:52:ab:a0:9d:07:1c:71:17:a9:89:f9:0f:
81:0e:d4:1c:00:18:78:5d:1e:b3:39:4d:db:a4:5a:22:85:9d:
2b:a7:f0:d7:52:6b:d2:6e:e9:65:cc:23:9c:94:94:14:9e:fa:
2c:bd:e2:e0:39:b2:37:10:45:da:56:82:55:e2:31:72:58:53:
d3:0e:ea:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:56 2024 by rpki-client on console-ams.rpki-client.org