Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/alDE2ow6WwpFmKXpnTfpyCrYYt0.roa
File: alDE2ow6WwpFmKXpnTfpyCrYYt0.roa (raw, json)
Hash identifier: y2TEy9GkpoNqLqQTOJSYxv3IHEe7CdHkUvrToyiSf0E=
Subject key identifier: 6A:50:C4:DA:8C:3A:5B:0A:45:98:A5:E9:9D:37:E9:C8:2A:D8:62:DD
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01870F67B2244BBB41D7D65BC4C5E23437C9
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/alDE2ow6WwpFmKXpnTfpyCrYYt0.roa
Signing time: Thu 23 Mar 2023 16:57:46 +0000
ROA not before: Thu 23 Mar 2023 16:57:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399587
IP address blocks: 194.28.156.0/24 maxlen: 24
194.28.158.0/24 maxlen: 24
194.104.4.0/24 maxlen: 24
194.104.5.0/24 maxlen: 24
194.104.6.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
212.69.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0f:67:b2:24:4b:bb:41:d7:d6:5b:c4:c5:e2:34:37:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Mar 23 16:57:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a50c4da8c3a5b0a4598a5e99d37e9c82ad862dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5c:82:80:21:4f:8e:4f:24:69:54:35:38:bf:
6d:65:77:dc:22:d2:9c:d5:ca:2c:a8:6d:ad:5b:5f:
64:80:84:ce:b0:de:92:b6:e8:58:02:55:d3:50:34:
db:c6:00:1f:1e:8e:90:58:8f:aa:c2:71:63:38:aa:
67:96:d5:4e:f8:07:d3:23:9e:45:ef:48:74:09:93:
7d:f1:41:29:33:c0:5a:85:87:36:27:1e:30:5b:18:
eb:3d:98:f5:5b:ec:ef:95:b7:e5:b1:7c:0f:4d:6d:
76:a5:00:ae:d9:2b:cd:9f:17:02:31:c7:f2:cd:45:
7b:6d:10:6c:e6:d0:a1:ec:4a:65:07:6d:e6:1e:ab:
3d:06:75:2b:ec:8c:ed:ab:43:14:41:72:9c:2c:14:
9a:6c:d4:13:eb:77:2c:56:08:83:a5:f3:10:98:8a:
4d:82:c5:89:84:a7:c4:e3:25:be:4f:6f:38:cb:6d:
eb:f3:a8:88:2e:02:f2:56:4c:92:72:91:aa:73:9d:
71:e9:25:c7:c6:c7:5f:07:c8:9d:69:62:0b:d1:1a:
8e:c3:6c:bc:ae:c2:50:19:14:c5:13:84:da:ef:9a:
10:88:3b:51:34:8e:cd:6a:3e:49:55:b8:5f:d2:3f:
1c:e1:b1:56:6a:c1:7e:3b:4f:28:99:79:e8:cd:a6:
e2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:50:C4:DA:8C:3A:5B:0A:45:98:A5:E9:9D:37:E9:C8:2A:D8:62:DD
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/alDE2ow6WwpFmKXpnTfpyCrYYt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.156.0/24
194.28.158.0/24
194.104.4.0-194.104.6.255
212.69.133.0-212.69.134.255
Signature Algorithm: sha256WithRSAEncryption
11:ff:a5:b4:30:01:84:7b:62:0e:6c:55:1e:9f:a1:05:49:d0:
3c:33:7e:2b:ec:60:3b:16:7c:0e:8d:cf:e0:81:fb:30:0e:80:
ef:da:2a:23:a9:43:23:cb:c8:40:0c:89:77:59:d0:c0:88:32:
79:5c:23:6d:bf:06:8f:82:b9:14:a5:ff:8f:3e:b7:03:93:d8:
3d:e8:f1:df:02:30:63:fc:22:c3:7b:f0:62:73:d6:fa:51:d9:
a1:02:09:09:6a:4a:a1:c7:48:b8:0a:c0:5d:2b:06:36:67:bf:
6f:21:01:d8:76:45:7f:5e:07:fb:af:8a:ed:36:ca:64:2e:4d:
f7:b8:1e:80:c7:84:fe:f6:05:7f:a8:50:42:00:f9:f1:c0:a9:
e5:83:67:15:04:af:fe:33:d4:16:1c:65:ed:fe:b6:2b:29:c9:
9c:45:9c:87:8c:c7:5d:b6:66:07:3d:ff:1a:01:47:eb:a2:c2:
bf:2c:d8:8c:01:9d:39:a7:11:48:84:70:80:81:cd:9f:cf:cd:
4e:fe:82:97:5e:41:98:2a:32:78:43:cf:ab:bf:cb:6c:36:0a:
e7:81:c8:47:d0:12:5b:a3:17:7f:1e:e1:db:f5:d1:27:42:92:
97:18:6c:e8:69:48:2f:22:3f:cf:6f:4e:e8:85:fd:0e:a1:91:
8f:43:70:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-fra.rpki-client.org