Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/j83RJ8PZgxOZVJ43Q4MUlUDeytc.roa
File: j83RJ8PZgxOZVJ43Q4MUlUDeytc.roa (raw, json)
Hash identifier: guEvyrtqETTmuDHEKdvdsLiX2FQ2nMkEYJ0QGdvF+Yk=
Subject key identifier: 8F:CD:D1:27:C3:D9:83:13:99:54:9E:37:43:83:14:95:40:DE:CA:D7
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 018705E32DFB515BFF7523600D8FF0D7A68E
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/j83RJ8PZgxOZVJ43Q4MUlUDeytc.roa
Signing time: Tue 21 Mar 2023 20:36:27 +0000
ROA not before: Tue 21 Mar 2023 20:36:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 27323
IP address blocks: 194.62.166.0/24 maxlen: 24
193.42.244.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:05:e3:2d:fb:51:5b:ff:75:23:60:0d:8f:f0:d7:a6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Mar 21 20:36:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fcdd127c3d9831399549e374383149540decad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c9:22:89:e4:d3:d2:a5:41:ab:fb:0c:19:33:
71:99:b1:79:6b:16:3e:9b:6e:eb:d2:be:1e:bc:d8:
19:8e:ff:31:96:51:f4:e7:d9:1d:97:3f:6b:96:b3:
88:3c:1c:6e:dd:d7:6b:0f:cf:51:49:12:b3:98:f9:
6d:53:73:5d:aa:ea:c5:b1:bb:1a:06:39:81:ff:c0:
8d:f0:79:71:d9:3c:dc:8f:9b:dd:6c:71:73:d9:bb:
9e:7b:f0:a3:f0:64:91:a4:e9:16:31:18:84:7c:70:
0c:f2:ee:d1:ba:e3:78:01:78:6d:26:7e:e2:bd:85:
da:77:e7:4d:e8:da:d9:b0:17:c9:fc:c3:ed:9d:b0:
3b:e4:e8:88:a5:6e:ee:04:11:85:97:56:cc:9a:0e:
8f:c6:1f:c0:ea:75:b0:4f:81:c2:07:aa:4d:3c:04:
6c:ea:7c:c2:19:da:dc:67:d6:cc:17:3e:f2:d0:8c:
f1:93:21:59:b3:19:03:4b:55:63:90:a6:2e:35:29:
f8:ab:51:11:ec:4f:02:89:2e:29:8d:f2:d0:56:de:
db:e5:35:7d:72:1c:a1:2d:40:6e:bb:71:2b:77:e5:
27:01:60:92:90:45:f6:46:01:c4:5c:f6:f2:12:ab:
8d:c0:cd:ff:ba:55:4b:78:a5:3d:2a:a2:09:96:15:
b1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CD:D1:27:C3:D9:83:13:99:54:9E:37:43:83:14:95:40:DE:CA:D7
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/j83RJ8PZgxOZVJ43Q4MUlUDeytc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.244.0/24
194.62.166.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:48:a0:cc:b8:ee:f3:72:f7:b3:ac:ea:ee:1b:9b:e8:63:5f:
53:ca:d0:d9:7a:24:85:47:01:bc:69:2b:91:b1:4f:81:84:df:
0d:29:c4:41:43:1c:26:04:03:b4:32:0f:12:76:40:9d:5d:9a:
42:58:7e:84:f7:81:f3:5c:69:15:6d:ac:fb:c2:4f:34:94:6b:
1b:61:36:31:e4:78:68:49:b2:42:bd:06:05:33:dd:c5:7c:d9:
da:59:d0:d8:c7:a2:dd:51:3d:61:d8:92:c3:d1:b2:ba:65:6d:
63:2f:ae:69:1c:66:23:2e:9c:27:68:78:fc:f1:e0:5d:0f:cd:
c1:74:a3:8e:a9:87:de:26:04:e9:02:b2:6d:18:f2:e6:73:d5:
ab:76:e7:8d:74:6b:cc:31:31:08:89:2b:db:20:66:ef:9b:92:
73:42:47:58:4f:f8:c3:ae:3a:34:15:56:3c:71:15:23:4c:42:
27:07:9a:8f:08:08:62:0a:b4:1e:dd:30:32:6e:5a:5b:33:67:
10:87:91:0c:96:e6:39:06:bb:f3:d0:83:ba:c2:89:12:5f:d7:
4d:e2:c0:cb:9b:85:ff:64:c5:39:ba:64:61:91:5c:c7:03:56:
f0:b5:25:6e:b4:57:dc:8b:89:71:58:dd:ca:5b:50:b2:88:f8:
75:ca:4e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:24 2024 by rpki-client on console-fra.rpki-client.org