Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/jaaEbbZFIB4kSG9IY8qQ98uvAIo.roa
File: jaaEbbZFIB4kSG9IY8qQ98uvAIo.roa (raw, json)
Hash identifier: /B4izqMeRMuJp8f/GHpEt+x5aAr/VTMEgzxcPiWoLXc=
Subject key identifier: 8D:A6:84:6D:B6:45:20:1E:24:48:6F:48:63:CA:90:F7:CB:AF:00:8A
Certificate issuer: /CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Certificate serial: 0187C23F50A445502E0DA6E83140C4DBE3F2
Authority key identifier: EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/jaaEbbZFIB4kSG9IY8qQ98uvAIo.roa
Signing time: Thu 27 Apr 2023 10:25:41 +0000
ROA not before: Thu 27 Apr 2023 10:25:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49635
IP address blocks: 213.192.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:3f:50:a4:45:50:2e:0d:a6:e8:31:40:c4:db:e3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Validity
Not Before: Apr 27 10:25:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8da6846db645201e24486f4863ca90f7cbaf008a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2c:34:69:b3:41:04:00:1e:cc:00:e4:8a:f9:
b0:b0:85:a6:d7:42:0a:10:14:46:aa:3c:be:cd:9f:
91:63:77:34:d8:4f:e8:bb:5c:d0:2c:0a:2b:32:e4:
3c:d0:06:29:bb:d0:f2:58:95:49:3b:e7:84:e1:d5:
f2:4b:ee:a9:d5:b8:c0:94:80:87:10:b3:a0:36:60:
b6:a3:b3:a8:0e:c9:44:05:7e:a2:99:b6:17:d8:38:
2a:69:1b:e3:54:9a:10:78:eb:8c:3a:22:37:89:d9:
1d:80:1f:d9:27:82:90:07:5f:99:74:69:ca:9d:42:
c4:c6:00:d1:e8:d7:98:99:7f:a2:ae:a3:10:72:fc:
3f:60:a5:8e:c0:d2:cb:90:72:73:50:6e:08:38:24:
a7:c3:4c:3a:a0:41:70:a2:d2:b0:4e:ae:d0:fc:aa:
97:b6:97:d6:92:54:cb:2f:55:fc:e8:3f:85:a7:96:
c6:c9:62:e7:cb:2e:53:6d:18:f7:b3:74:b8:c9:d4:
ad:b8:b4:49:f0:9b:40:4f:e0:72:eb:09:82:c6:ab:
2b:32:76:f2:3c:fc:88:d3:97:47:2c:02:d4:4c:7e:
8d:9d:dd:6a:1c:7e:d6:07:68:df:7c:ef:fd:5f:5f:
82:7a:f6:eb:7c:0e:cf:49:e1:d9:f9:8a:9f:30:89:
05:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A6:84:6D:B6:45:20:1E:24:48:6F:48:63:CA:90:F7:CB:AF:00:8A
X509v3 Authority Key Identifier:
keyid:EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/jaaEbbZFIB4kSG9IY8qQ98uvAIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.192.233.0/24
Signature Algorithm: sha256WithRSAEncryption
65:af:78:e0:cb:8b:71:81:f8:40:5f:54:ca:87:ee:c4:79:3d:
76:9a:06:15:fa:9b:dc:a6:18:9f:f0:02:d1:8b:69:69:33:7d:
aa:fa:7a:7a:b1:c5:ce:f3:5b:a9:cf:e0:5b:19:b3:cf:cd:43:
8f:9d:17:91:74:aa:0d:62:ea:f8:55:94:bd:9c:46:5f:93:c0:
7f:21:b6:c0:fc:d7:8b:f8:32:c0:18:20:13:9a:8e:1d:77:9d:
35:3c:34:84:7e:55:1e:6b:09:d3:2d:bd:03:5c:e9:45:e1:8e:
e9:6c:a9:27:e8:cb:32:58:9e:8a:f7:d6:47:00:d9:7e:b6:60:
0e:b3:58:e6:8a:c1:48:4d:8b:20:47:43:1a:11:f0:98:9e:28:
2c:c1:96:38:ff:47:ec:80:d6:07:fb:0c:f8:16:a9:7a:18:38:
c6:57:a1:54:f4:8f:99:c4:f6:bb:3a:37:5a:88:a9:df:7b:bd:
cd:98:ae:62:fb:ef:6f:60:7c:06:3f:7d:f6:b9:4e:6f:62:bd:
1d:d6:3d:19:5b:17:43:86:2d:3e:40:5c:ea:35:6c:56:c9:03:
b2:d0:d0:54:5f:52:36:78:4f:04:37:d7:89:00:cb:32:20:df:
44:d2:2d:cb:2d:3f:5a:9d:8b:d0:b3:6e:97:44:98:65:01:41:
70:6b:66:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:48 2023 by rpki-client on console-fra.rpki-client.org