Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/9jEuZutCaItFmazO4QFz3tB94yM.roa
File: 9jEuZutCaItFmazO4QFz3tB94yM.roa (raw, json)
Hash identifier: MtGHsbk/NHnF7oFb+doskQzlWAotA79t4bgOKYhCwEE=
Subject key identifier: F6:31:2E:66:EB:42:68:8B:45:99:AC:CE:E1:01:73:DE:D0:7D:E3:23
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 01857115201B27C2CDA65362E1CC6D8353F0
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/9jEuZutCaItFmazO4QFz3tB94yM.roa
Signing time: Mon 02 Jan 2023 06:04:47 +0000
ROA not before: Mon 02 Jan 2023 06:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211496
IP address blocks: 193.22.12.0/24 maxlen: 24
185.195.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:20:1b:27:c2:cd:a6:53:62:e1:cc:6d:83:53:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Jan 2 06:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6312e66eb42688b4599accee10173ded07de323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:40:82:0e:23:30:b1:cd:ab:17:5e:bd:61:b3:
8c:68:e3:fc:63:2a:d6:b4:be:cf:0d:b5:da:9b:df:
17:fc:6f:2e:b1:ca:57:82:75:4e:49:05:e1:26:d2:
cf:b8:f5:bf:d9:f3:27:ff:35:04:cd:46:ac:5d:72:
aa:89:7e:3a:56:cf:4d:19:ff:37:90:7e:f4:05:7b:
5c:21:88:3f:fa:4b:d3:32:15:38:20:bd:1f:0b:37:
1b:db:b1:1a:d6:88:be:e4:0c:fa:68:99:e6:16:d9:
26:8f:9d:dd:14:fb:27:93:64:e3:ad:55:91:30:30:
c8:38:b5:0b:fe:db:1a:69:92:42:e1:54:d6:0e:8b:
e0:a2:d4:ee:dd:56:30:3d:dc:b0:a3:34:0c:1c:6b:
8d:d2:a5:71:e6:64:b5:ba:4c:f5:9f:13:97:8f:52:
fc:d1:0a:f6:dd:cf:0e:69:70:eb:46:5a:71:cb:ad:
41:96:77:40:3d:dd:54:b4:f4:bd:8e:1e:df:32:21:
3b:c5:ee:dc:0e:d1:28:6f:c7:23:d6:d0:a7:e6:2a:
8e:ea:79:d0:f2:26:5f:18:c9:5c:ec:51:af:ae:8b:
4a:1e:4a:43:6a:a5:c5:37:56:c6:16:2c:20:cd:6f:
ae:77:5c:28:66:69:6a:2a:7c:c2:2f:76:ac:6a:f0:
94:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:31:2E:66:EB:42:68:8B:45:99:AC:CE:E1:01:73:DE:D0:7D:E3:23
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/9jEuZutCaItFmazO4QFz3tB94yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.252.0/24
193.22.12.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:06:c4:5f:42:1f:3a:ec:cf:bc:4f:49:58:ca:44:15:06:c7:
3b:2a:03:90:d9:29:3d:f7:01:6f:f6:0a:ea:b7:4c:a3:c1:1b:
0d:22:52:f5:06:36:8f:2d:7f:b8:b3:81:15:11:a1:47:b1:07:
a6:45:1f:41:90:b1:60:7b:11:db:32:c1:e3:dc:57:f3:46:5e:
f4:e0:5d:c3:a4:5a:bb:6c:04:eb:ab:01:e5:b0:c3:00:af:72:
c1:8a:db:96:dc:78:45:de:0d:1e:5e:d7:02:ce:d1:50:79:5d:
f8:b7:5e:33:47:27:b9:ef:8e:83:5e:2b:a0:4a:1e:c4:a4:e9:
55:27:f4:07:60:b8:0d:7a:db:f7:31:55:63:1f:3e:26:7a:d3:
3e:81:a5:95:ff:72:88:af:db:3b:43:9c:6b:ea:41:99:40:10:
a9:0e:03:4d:14:8e:14:88:f6:03:d9:a1:99:a3:00:6e:d9:2b:
f9:de:1e:ef:76:1c:54:18:a1:9a:e7:32:42:2e:06:b6:4f:dd:
fa:1d:23:77:46:ab:63:84:e6:e8:57:a1:57:4b:08:4a:6c:9d:
25:e4:f4:71:5a:92:ae:42:26:15:6f:ba:af:06:46:23:71:b5:
09:cd:21:ce:eb:a7:ba:bb:b5:e2:52:b6:d9:99:d1:10:94:d4:
b0:45:07:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:33 2024 by rpki-client on console-fra.rpki-client.org