Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/e9kZ__HdpeIR2A5wJUybIY_u6m8.roa
File: e9kZ__HdpeIR2A5wJUybIY_u6m8.roa (raw, json)
Hash identifier: SwFFRroF7MnCxPJwOAXJkp3z3Ta3oA778sXK133LpHw=
Subject key identifier: 7B:D9:19:FF:F1:DD:A5:E2:11:D8:0E:70:25:4C:9B:21:8F:EE:EA:6F
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0187108E7F9A43D98FA632FAC8A3A73F81BE
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/e9kZ__HdpeIR2A5wJUybIY_u6m8.roa
Signing time: Thu 23 Mar 2023 22:19:46 +0000
ROA not before: Thu 23 Mar 2023 22:19:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 194.180.232.0/23 maxlen: 24
194.180.236.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Mar 2023 21:09:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:10:8e:7f:9a:43:d9:8f:a6:32:fa:c8:a3:a7:3f:81:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Mar 23 22:19:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bd919fff1dda5e211d80e70254c9b218feeea6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1b:43:77:4e:9d:f9:a0:a9:59:5b:a1:cc:6c:
ac:79:9c:bb:ba:4f:9f:27:49:fa:f4:50:49:8f:b2:
dd:6a:fa:9b:c7:9e:aa:88:ba:ab:fe:1d:ef:f5:e9:
56:b0:09:f8:1c:ea:89:86:43:6c:f6:be:be:c4:39:
03:41:07:98:a0:1e:a9:20:10:cc:59:a2:67:73:0b:
b7:d5:f1:bf:ff:09:31:7b:71:cb:d3:4e:11:ec:01:
cd:b4:b1:34:28:be:90:8a:57:f8:f4:eb:68:1d:93:
85:0e:3a:4a:f2:33:2f:8d:26:5a:db:73:a9:30:40:
09:8e:81:54:da:44:dd:60:de:ee:21:ab:af:c4:64:
c0:e9:e2:9c:11:20:fc:ff:89:00:da:23:25:bb:f5:
10:b9:ed:a7:eb:fe:de:be:61:9f:27:f9:24:da:a1:
4c:66:2d:54:95:f5:30:eb:42:33:57:fe:da:9c:ac:
86:d6:78:b1:79:c3:ac:79:d4:56:89:b2:71:13:a2:
d4:ab:3f:72:6a:74:89:92:29:53:df:6e:a6:13:70:
6c:64:6e:28:18:3e:c4:e8:9f:27:98:29:40:da:2b:
75:6f:1a:8f:ad:c7:b2:96:f8:95:88:4f:45:f7:a0:
47:2f:b5:d6:17:05:eb:99:3b:27:f1:e6:6b:ab:9d:
c4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D9:19:FF:F1:DD:A5:E2:11:D8:0E:70:25:4C:9B:21:8F:EE:EA:6F
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/e9kZ__HdpeIR2A5wJUybIY_u6m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.232.0/23
194.180.236.0/23
Signature Algorithm: sha256WithRSAEncryption
24:1d:74:c2:f3:17:be:7e:74:0f:69:ce:3e:d3:dc:6d:eb:33:
ad:e5:05:e9:eb:8f:1c:d6:00:ad:fb:bf:e4:05:c3:33:70:89:
33:2b:67:10:36:cd:ff:39:cd:08:11:a3:a0:37:aa:36:b0:f0:
d6:55:fe:e8:85:ab:dc:44:5e:5e:5e:cd:3f:ab:72:2a:30:06:
11:b0:cc:aa:44:0d:5e:93:2c:bc:e0:dd:65:db:b1:9a:14:48:
a4:4f:81:f0:0f:77:c7:6d:dd:2e:03:21:ac:d4:98:c7:8c:ca:
e9:2e:89:e8:5a:53:b0:7c:8f:e1:ae:17:82:05:59:6d:d5:21:
2d:66:2f:3e:c1:94:c7:4b:f4:13:07:01:36:cf:7a:5e:69:5d:
05:1b:59:fe:0d:4b:53:f9:f1:e7:ca:01:86:65:d3:bd:8b:95:
32:d5:c5:37:68:32:b5:8f:8f:31:74:da:8e:dd:70:e3:c4:00:
8e:b5:94:d8:77:f7:bd:54:3d:d7:b6:93:3d:40:43:5f:3b:d3:
30:26:5d:4c:80:82:95:e5:2e:ed:30:74:bc:12:06:f2:10:96:
12:96:68:e7:d2:c3:e4:af:bb:b3:7c:1b:fe:67:4c:0b:96:ce:
a4:36:9b:0c:6f:8c:13:5d:c2:5a:67:93:6b:fb:87:63:03:18:
aa:74:6c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:20 2024 by rpki-client on console-ams.rpki-client.org