Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/EQOFEu7ZkL5bSiuHPHXSnWXw65g.roa
File: EQOFEu7ZkL5bSiuHPHXSnWXw65g.roa (raw, json)
Hash identifier: gxPn41nSimON52t0CghcsXRCkbxu+vNj27f8hDgHskk=
Subject key identifier: 11:03:85:12:EE:D9:90:BE:5B:4A:2B:87:3C:75:D2:9D:65:F0:EB:98
Certificate issuer: /CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Certificate serial: 01857002854433AFC95F9D356027C45688DB
Authority key identifier: F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/EQOFEu7ZkL5bSiuHPHXSnWXw65g.roa
Signing time: Mon 02 Jan 2023 01:04:51 +0000
ROA not before: Mon 02 Jan 2023 01:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60860
IP address blocks: 193.106.64.0/24 maxlen: 24
193.106.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:85:44:33:af:c9:5f:9d:35:60:27:c4:56:88:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Validity
Not Before: Jan 2 01:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11038512eed990be5b4a2b873c75d29d65f0eb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3b:01:44:ca:66:f2:1b:50:39:3b:68:fd:1e:
1a:84:b1:b8:6c:f7:47:66:14:5c:29:92:8e:f5:cc:
5a:a5:0e:d1:e3:2f:10:b7:e1:14:fa:88:d0:94:66:
84:db:14:76:f6:19:cd:b7:c0:d3:34:74:2f:a1:12:
8b:93:7e:c2:6b:8a:7c:de:04:17:8e:81:37:79:5f:
60:8d:39:9c:97:5d:3f:8b:6e:26:db:bb:6b:1a:d3:
a5:cd:0b:1c:67:7f:59:44:b1:9a:d3:07:dd:a5:ed:
76:b0:fb:2b:c3:4a:a7:a4:b2:12:06:b9:4b:9a:96:
78:a5:97:28:c9:d8:e8:6d:bc:81:e3:67:f9:01:49:
e3:71:cd:6e:03:39:4a:99:af:36:99:03:54:17:e5:
44:e4:17:b5:9b:bf:33:d7:82:e5:95:29:2c:fb:cd:
1e:d6:e0:ca:75:15:31:e7:28:37:72:c5:c6:fc:44:
0d:03:99:17:54:7e:49:c1:b8:8d:68:6d:24:a2:58:
07:5e:8a:f0:70:f3:a3:16:7b:9a:b1:33:18:d5:d2:
a4:8f:b0:8e:5f:f1:e8:0b:8a:e9:a9:b5:a1:22:cb:
d2:04:a7:8a:96:4b:2f:ee:62:67:db:e4:77:d1:79:
dc:3d:a8:e2:c6:07:ea:41:ae:84:a4:d1:08:e1:19:
ac:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:03:85:12:EE:D9:90:BE:5B:4A:2B:87:3C:75:D2:9D:65:F0:EB:98
X509v3 Authority Key Identifier:
keyid:F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/EQOFEu7ZkL5bSiuHPHXSnWXw65g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.64.0/24
193.106.67.0/24
Signature Algorithm: sha256WithRSAEncryption
48:92:70:54:6b:00:52:df:88:47:2a:ab:da:23:b0:0b:5e:f3:
af:bc:07:4a:10:bd:d7:11:d6:bb:2a:8d:01:c5:8f:81:0d:d4:
40:e4:ea:31:3b:08:f2:6d:46:56:e4:d5:b5:3a:3a:9b:4a:7e:
fa:92:74:16:43:61:66:55:0e:72:36:2e:28:2f:7b:ca:58:02:
ba:0b:52:28:28:fc:fc:3f:d4:43:ab:e3:54:51:04:3c:63:3c:
8e:8e:86:15:4f:8b:70:1e:12:c5:f2:a7:3a:cf:62:c7:36:78:
9b:06:c4:04:ba:87:bc:20:8b:1d:85:1c:c0:ee:f1:06:1d:e6:
46:7c:d2:ca:12:fa:dd:02:77:c9:82:c6:d8:2a:9e:a3:1e:d6:
e3:27:dd:60:a4:30:0d:de:58:72:3f:b7:23:f0:fc:80:0d:ff:
f7:c8:be:c8:ab:8e:2e:f6:80:0c:41:41:66:57:d0:68:b5:1f:
38:23:88:fc:f9:d2:57:78:71:3b:84:84:b6:b3:49:6e:08:51:
d0:d0:5d:cd:8a:a5:93:63:b9:57:b5:e1:39:61:50:0f:5d:cf:
e7:8c:c3:7e:ba:f5:81:f2:87:d9:45:02:f8:ff:a5:c6:d3:ba:
3f:c5:72:fb:46:70:31:06:51:05:64:bc:d4:05:b6:de:fe:a1:
80:fd:c9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:18 2024 by rpki-client on console-ams.rpki-client.org