Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/izZnpA8N-3MPSVL7rHs59iOgfj8.roa
File: izZnpA8N-3MPSVL7rHs59iOgfj8.roa (raw, json)
Hash identifier: IPpU/2zz+cCvoR7ch1eInYFU/dNWQ+34GyUVGRCy7eo=
Subject key identifier: 8B:36:67:A4:0F:0D:FB:73:0F:49:52:FB:AC:7B:39:F6:23:A0:7E:3F
Certificate issuer: /CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Certificate serial: 0187C23F504F001996EBDAFF876BF236C688
Authority key identifier: EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/izZnpA8N-3MPSVL7rHs59iOgfj8.roa
Signing time: Thu 27 Apr 2023 10:25:41 +0000
ROA not before: Thu 27 Apr 2023 10:25:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49538
IP address blocks: 213.192.236.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:3f:50:4f:00:19:96:eb:da:ff:87:6b:f2:36:c6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Validity
Not Before: Apr 27 10:25:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b3667a40f0dfb730f4952fbac7b39f623a07e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8f:13:ae:71:79:a6:af:ac:0b:a9:c4:04:2e:
3e:46:6a:01:26:fd:1d:99:5b:a1:03:5f:ff:43:b9:
cf:24:77:47:f5:3e:8e:68:80:45:2a:13:79:03:6a:
0e:30:0b:24:c8:b0:c7:c4:3f:b0:c7:a6:5e:31:ee:
2f:5e:03:03:90:22:33:95:ac:b5:6c:65:7b:91:e3:
7d:a8:ae:98:83:04:68:7e:8e:da:88:9e:e3:09:8b:
a7:6e:15:c7:ef:32:8f:6e:f3:18:85:a2:c9:9d:ab:
c1:a3:70:72:e4:72:06:df:c9:08:9e:fc:cf:a6:df:
1d:fd:93:a8:47:5e:26:26:dd:12:3c:68:6f:18:3b:
a3:27:de:a2:83:bd:08:95:f9:0d:25:8f:94:b3:65:
43:e8:c0:a4:a7:fa:58:cd:39:d4:23:fa:63:d1:03:
89:78:c7:46:cb:d4:b3:1b:b2:db:71:b2:f7:20:5f:
d2:ea:d1:7d:df:b8:9c:91:0c:27:86:49:8b:fd:47:
31:2e:1b:69:7f:f9:b0:ad:98:79:c8:52:65:7d:5c:
ce:3d:fd:77:6c:b9:91:2e:1d:14:9c:7c:a2:6a:33:
2f:8e:19:8c:e3:51:65:ff:d7:40:fe:e5:a4:8c:02:
47:d7:dc:90:0e:45:0f:95:fb:fc:5f:4a:6d:5d:59:
0d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:36:67:A4:0F:0D:FB:73:0F:49:52:FB:AC:7B:39:F6:23:A0:7E:3F
X509v3 Authority Key Identifier:
keyid:EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/izZnpA8N-3MPSVL7rHs59iOgfj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.192.236.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:3f:4d:7f:b9:8a:71:e5:fe:ac:2a:a6:90:e6:aa:02:70:e1:
20:31:30:c5:b3:07:9c:d1:28:1a:3d:b8:a0:1e:7a:87:5a:3f:
40:3c:07:fa:14:eb:02:d1:95:ae:e3:85:95:de:af:61:c5:66:
1d:72:10:8d:88:d0:4f:52:a9:cd:91:95:95:7e:9d:20:5f:5f:
46:23:3a:75:50:1b:66:cf:8a:86:87:e7:58:02:0a:08:39:fc:
1d:ef:5b:4c:f8:6d:82:62:28:55:48:3b:b5:48:7d:d5:db:90:
6e:e6:ea:63:3d:f7:7e:80:c2:a5:4a:8b:1d:20:59:9b:cd:f5:
01:c6:66:11:59:f8:90:12:ea:5b:88:ef:ba:0e:b0:cc:ba:43:
45:86:20:26:c6:4f:33:dc:97:d8:e5:05:2c:5b:15:56:3b:ff:
25:61:c2:9e:fb:f2:8f:a7:89:29:ac:91:ba:35:29:8f:fb:61:
1f:7a:37:5b:ba:ad:eb:24:9e:b0:31:b5:87:37:3a:18:fa:c7:
6d:69:64:0a:0c:81:a0:df:72:71:a5:cf:94:72:5a:dc:88:57:
ef:83:b2:9b:4b:2f:16:76:a4:f9:56:76:6f:5a:b4:e3:54:36:
7c:4c:75:f5:7b:d0:60:5c:4f:da:03:1a:07:73:74:2f:42:08:
22:68:da:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:21 2024 by rpki-client on console-fra.rpki-client.org