Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/s3-JAeGrFxlolG59p6PzIHYGEmo.roa
File: s3-JAeGrFxlolG59p6PzIHYGEmo.roa (raw, json)
Hash identifier: nNbXv36NBJSmjMMkylGFkhguh0d34GwCNBaSFBHThjA=
Subject key identifier: B3:7F:89:01:E1:AB:17:19:68:94:6E:7D:A7:A3:F3:20:76:06:12:6A
Certificate issuer: /CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Certificate serial: 0187C23F510B051A9B65402BF44E939E390F
Authority key identifier: EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/s3-JAeGrFxlolG59p6PzIHYGEmo.roa
Signing time: Thu 27 Apr 2023 10:25:42 +0000
ROA not before: Thu 27 Apr 2023 10:25:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202097
IP address blocks: 213.192.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:3f:51:0b:05:1a:9b:65:40:2b:f4:4e:93:9e:39:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Validity
Not Before: Apr 27 10:25:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b37f8901e1ab171968946e7da7a3f3207606126a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:1b:07:06:ac:a4:7f:ab:8c:a6:a8:91:e0:
07:18:af:15:04:c4:82:8f:66:7e:41:3c:01:8e:f4:
f9:45:ca:78:4f:1c:c0:c9:26:59:ea:95:01:2b:1a:
8c:12:4f:fc:ae:ff:70:51:69:fa:22:09:fd:4b:b1:
e5:0b:44:69:0f:ab:67:90:ae:47:40:e8:e5:cb:8e:
43:93:c3:f3:85:fc:31:44:9d:d2:b0:ac:5a:c8:19:
9c:44:e4:41:22:a1:0e:45:8b:61:d7:ab:3c:0d:92:
ff:10:ce:81:f6:99:17:17:6d:b9:20:29:2a:45:b9:
6d:8e:2d:2d:40:53:b6:cf:f6:c8:62:42:18:5f:d2:
65:28:d0:62:75:4d:c1:65:a4:ba:21:44:6c:90:2b:
6a:1b:76:bf:1a:56:46:2a:09:24:25:bd:2c:ca:d6:
8f:ed:d1:2c:91:10:65:d0:38:44:b5:b2:0c:39:c1:
89:f9:22:06:e6:ae:a4:e7:80:35:0a:4c:6a:7e:58:
3a:d2:65:71:00:de:e9:03:fa:b7:fa:24:09:be:dc:
7b:aa:68:0e:e5:f4:d6:70:fd:d1:61:43:8c:ab:29:
20:63:63:01:4c:a4:bb:25:c5:18:36:ea:d8:46:c7:
c4:a5:e8:d1:70:87:4d:13:46:50:b8:d5:56:3c:3c:
18:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7F:89:01:E1:AB:17:19:68:94:6E:7D:A7:A3:F3:20:76:06:12:6A
X509v3 Authority Key Identifier:
keyid:EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/s3-JAeGrFxlolG59p6PzIHYGEmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.192.243.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:1a:d0:70:f7:6d:98:92:13:b2:52:8a:5d:28:7e:2a:2b:9c:
85:97:58:ce:3e:6f:1c:ea:70:06:dc:fb:43:f3:f5:fd:43:63:
7d:b7:d0:d8:a6:8b:38:aa:61:f5:fa:71:e4:d5:60:9f:86:b7:
18:92:a3:93:66:56:f9:23:94:76:e5:03:40:55:4f:95:d1:4b:
99:13:09:26:e1:cd:4c:0d:b6:f2:70:74:8e:50:0a:45:d4:a2:
4d:40:87:35:a7:c3:36:1b:75:26:09:ea:fe:9d:da:e3:35:8b:
4b:81:1e:13:70:72:a8:c0:c3:ab:ff:39:76:62:48:d7:56:da:
89:d4:4c:17:2a:61:8c:2b:27:aa:90:34:55:48:c2:78:7c:f8:
09:70:28:26:41:e1:df:ca:ff:d0:5c:d5:6a:54:9c:43:fb:fd:
de:c9:8b:d1:0d:27:de:c5:3d:98:a1:d5:d9:95:8b:09:d9:66:
eb:e0:20:ea:f9:a2:41:71:41:f0:f6:64:48:ec:7b:cd:9d:2c:
0c:d3:b1:e2:db:99:f5:01:0f:df:b6:07:22:68:eb:a8:78:af:
ab:f9:d3:bb:c9:5a:4b:57:d1:36:89:3c:77:2d:fb:d4:0c:12:
a7:01:7e:9c:a1:d1:9e:e4:25:59:47:24:9d:d1:64:f9:27:4a:
e7:ab:50:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:08 2024 by rpki-client on console-ams.rpki-client.org