Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/IZmTmENZzcJmJu7ILE-z9gG6EwE.roa
File: IZmTmENZzcJmJu7ILE-z9gG6EwE.roa (raw, json)
Hash identifier: D6N0CkkN8AoaxdqUgNsUVPCtRO5fvS4trrVzddIci2k=
Subject key identifier: 21:99:93:98:43:59:CD:C2:66:26:EE:C8:2C:4F:B3:F6:01:BA:13:01
Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial: 018896286DBED876B528369F8D4CE3BAEE5A
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/IZmTmENZzcJmJu7ILE-z9gG6EwE.roa
Signing time: Wed 07 Jun 2023 14:00:11 +0000
ROA not before: Wed 07 Jun 2023 14:00:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 375
IP address blocks: 192.49.100.0/23 maxlen: 23
192.49.103.0/24 maxlen: 24
192.49.104.0/24 maxlen: 24
192.49.106.0/23 maxlen: 23
192.49.108.0/22 maxlen: 22
192.49.0.0/21 maxlen: 21
192.49.10.0/24 maxlen: 24
2a03:9b80::/34 maxlen: 34
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:96:28:6d:be:d8:76:b5:28:36:9f:8d:4c:e3:ba:ee:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
Validity
Not Before: Jun 7 14:00:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=219993984359cdc26626eec82c4fb3f601ba1301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9f:64:2b:90:fd:11:c6:13:bd:ff:35:39:1e:
bc:fb:55:d1:02:91:5a:62:88:12:39:17:f7:8c:2e:
ff:03:41:13:58:41:fa:1b:07:ee:fd:42:2b:46:32:
a8:af:fe:c3:98:31:6d:fb:e3:0a:3a:30:80:4e:1f:
7d:00:5e:f1:ce:88:36:14:54:e3:60:19:d0:a6:38:
d7:bf:42:57:79:e3:79:88:12:22:0b:6b:58:88:44:
d0:76:88:63:1f:96:5f:2c:6d:ca:c9:20:03:e3:e4:
30:68:03:dd:0d:06:91:c8:d2:57:fb:0a:9c:72:e1:
c1:87:3f:45:e8:82:11:99:42:d9:60:63:7b:96:a0:
a0:16:5b:ba:7c:9e:05:7d:00:21:10:4b:69:71:3f:
29:a8:e4:6c:77:dc:6e:bc:52:82:b7:34:14:79:04:
91:34:b7:c6:2e:ac:47:ca:7d:2b:27:59:31:d1:77:
4c:82:3a:89:52:61:36:b4:32:c9:9b:fc:55:44:6c:
d9:97:91:1d:a5:40:44:48:32:87:12:12:06:e1:4d:
21:9a:c0:bc:09:00:b0:45:e2:99:1e:ca:09:0d:11:
7b:44:6d:ff:27:3e:78:03:e8:01:0f:a7:24:9f:92:
c0:f9:e1:04:f4:3b:20:d0:9a:46:6b:87:fc:46:95:
e8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:99:93:98:43:59:CD:C2:66:26:EE:C8:2C:4F:B3:F6:01:BA:13:01
X509v3 Authority Key Identifier:
keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/IZmTmENZzcJmJu7ILE-z9gG6EwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.49.0.0/21
192.49.10.0/24
192.49.100.0/23
192.49.103.0-192.49.104.255
192.49.106.0-192.49.111.255
IPv6:
2a03:9b80::/34
Signature Algorithm: sha256WithRSAEncryption
4f:2c:8f:36:29:9e:46:16:e5:17:c0:94:dc:69:72:4f:02:c2:
05:a3:9d:8f:06:75:82:e8:d6:96:54:ed:ab:f0:d0:21:be:18:
4b:a5:f9:f2:08:1e:3c:ea:d9:14:5b:26:1e:91:5e:5a:91:e9:
9f:7d:d4:08:ff:b5:ed:25:01:20:70:18:5c:55:16:43:36:5f:
c5:ff:0e:f5:07:c8:11:aa:6e:51:15:8b:50:c1:c6:eb:0b:e5:
d3:ee:90:60:54:66:2d:9f:81:9a:e0:63:c8:06:30:f6:d6:3d:
24:04:c0:73:bc:92:4c:75:3c:9f:50:55:65:ef:36:c6:d2:0c:
b5:0e:73:71:b1:50:f9:b2:6d:82:31:18:d5:4d:b3:9c:3f:aa:
15:21:5a:09:cf:ef:6e:3a:24:a0:55:8c:bd:9c:25:69:92:9c:
f8:a3:bb:4b:47:ea:bb:4a:05:50:d2:38:8c:85:0e:51:98:08:
2a:e8:ab:14:9a:3f:59:80:c1:81:bf:34:52:42:97:63:8f:7c:
ac:b1:30:3c:82:07:bf:6b:7c:c7:cb:48:9b:c7:70:04:ce:f7:
1f:c7:10:60:86:28:7e:f6:f2:2d:9a:e8:f9:48:60:1d:97:7a:
03:d9:09:1e:ef:01:d0:b6:20:f9:e5:a7:cb:83:73:16:3b:1b:
f6:04:b1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:47 2023 by rpki-client on console-fra.rpki-client.org