Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/7A5scXOVO5i6VEYiQzeoO72RP30.roa
File: 7A5scXOVO5i6VEYiQzeoO72RP30.roa (raw, json)
Hash identifier: JK/yZkBvunphTXnoSMul0/7hV6Rl4kNXpdONzew0rGs=
Subject key identifier: EC:0E:6C:71:73:95:3B:98:BA:54:46:22:43:37:A8:3B:BD:91:3F:7D
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018934037B95490F2A7437DF0B962B77E20C
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/7A5scXOVO5i6VEYiQzeoO72RP30.roa
Signing time: Sat 08 Jul 2023 05:39:50 +0000
ROA not before: Sat 08 Jul 2023 05:39:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.15.96.0/24 maxlen: 24
188.209.128.0/22 maxlen: 22
194.15.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:34:03:7b:95:49:0f:2a:74:37:df:0b:96:2b:77:e2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jul 8 05:39:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec0e6c7173953b98ba5446224337a83bbd913f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b3:1a:af:a3:b2:e3:4d:ed:00:aa:af:00:49:
3c:aa:45:04:1d:04:eb:b2:04:15:e5:e5:24:42:64:
b1:77:a4:49:ce:a1:99:ff:24:e3:ef:43:75:da:11:
ff:d2:30:9a:ad:e2:41:f2:a4:36:ce:09:25:07:fe:
52:e4:43:8e:a6:86:80:a7:52:50:f6:9e:3f:c5:91:
6d:0b:68:74:31:11:fd:cb:b2:7f:c0:0b:34:96:a9:
96:90:e1:54:4b:8c:15:e3:ba:d4:f1:1b:9b:ee:f9:
82:74:62:9e:ca:a0:69:64:16:f8:fa:10:db:25:e6:
a3:97:20:c7:79:62:53:54:a1:cc:7e:09:6d:fa:7c:
d9:d5:23:51:f2:86:10:7e:16:f0:cd:fe:3a:d7:9b:
11:d4:10:da:a6:d7:ba:a6:cd:4b:7d:c8:15:83:bc:
cb:73:0f:fd:50:59:9d:36:b7:28:ac:80:6a:27:f8:
de:7f:5c:a8:9a:f9:76:6b:9e:ce:51:a7:8b:d4:b4:
f9:cd:ad:e8:5f:e1:f4:02:79:ee:52:7a:17:7b:ab:
3d:c5:03:7a:9c:7f:47:17:20:10:63:ca:03:bd:9a:
9c:00:71:e7:32:a1:c1:a3:65:8d:6b:3d:e8:c3:d4:
31:7b:0e:5d:e0:38:b6:d9:db:fd:5c:77:2d:2e:a1:
c5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0E:6C:71:73:95:3B:98:BA:54:46:22:43:37:A8:3B:BD:91:3F:7D
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/7A5scXOVO5i6VEYiQzeoO72RP30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.128.0/22
194.15.96.0/24
194.15.99.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:49:ed:4e:19:56:1d:58:c4:2d:e8:70:ba:83:9f:82:a3:30:
a5:a2:01:0f:5b:0c:a9:59:51:92:34:d7:e9:b5:4b:9f:8e:ba:
af:ae:f6:74:ee:82:57:6f:d8:e5:7c:82:06:30:f0:ff:a8:24:
cb:d5:fb:ba:23:69:a7:f5:7e:17:06:c2:d3:56:48:5a:d2:09:
fd:86:96:39:37:af:ea:e6:24:12:af:88:51:de:8f:1c:b1:78:
9b:ec:85:df:f9:2a:28:a2:cf:cf:5f:43:f5:50:44:45:19:89:
f9:d1:0d:d7:99:aa:74:6d:c2:ec:86:ce:80:ac:41:22:5e:e6:
62:94:a2:e2:69:b4:e4:29:1b:d3:bf:c2:c8:10:1d:de:0f:0e:
88:69:e0:52:93:b0:c9:6b:57:63:40:72:e1:eb:29:6d:e4:bd:
ff:f3:f6:a5:6e:09:d5:2e:c1:9b:c9:d3:2f:73:35:e2:cb:01:
e0:a7:a2:2f:68:b8:11:1f:2a:5c:52:19:07:35:ef:c3:a2:b7:
26:46:5b:93:5f:32:d6:06:a6:4f:fc:d1:7e:ca:64:5e:0a:95:
e7:a1:06:f6:6f:d3:0d:87:bb:27:e9:54:f2:33:f0:f6:2a:e9:
88:1a:87:96:3a:4c:7c:3d:28:ea:b4:c4:26:6e:52:65:ff:54:
14:bd:48:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:59 2023 by rpki-client on console-ams.rpki-client.org