Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/suPWLyqTuc3LwwedE6RAWodNf0I.roa
File: suPWLyqTuc3LwwedE6RAWodNf0I.roa (raw, json)
Hash identifier: frDobz3ytFRackVM2J9MFTk9VrU8pyABA2KolsByR4Y=
Subject key identifier: B2:E3:D6:2F:2A:93:B9:CD:CB:C3:07:9D:13:A4:40:5A:87:4D:7F:42
Certificate issuer: /CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Certificate serial: 0187BEAE86D807201CD60D1869425DC61CCB
Authority key identifier: EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/suPWLyqTuc3LwwedE6RAWodNf0I.roa
Signing time: Wed 26 Apr 2023 17:48:41 +0000
ROA not before: Wed 26 Apr 2023 17:48:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8239
IP address blocks: 213.192.196.0/24 maxlen: 24
212.59.192.0/19 maxlen: 19
195.5.64.0/19 maxlen: 19
2001:ac0:c800::/44 maxlen: 44
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:be:ae:86:d8:07:20:1c:d6:0d:18:69:42:5d:c6:1c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Validity
Not Before: Apr 26 17:48:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2e3d62f2a93b9cdcbc3079d13a4405a874d7f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ea:20:a4:1e:b1:74:0e:31:f1:9b:d4:8e:2e:
bb:9d:f6:3f:44:5a:75:f7:3e:80:96:9a:f7:4f:a6:
5c:c8:77:41:3c:71:24:75:5f:1e:94:71:28:78:4b:
d8:c4:6b:99:a2:cb:6b:bd:80:e7:aa:5a:a4:bd:22:
75:48:e7:6d:32:49:6d:a5:db:3e:6b:d0:c3:6b:5d:
35:5e:8d:47:46:f0:ab:3b:e4:29:79:02:50:7f:2b:
7f:6b:92:75:33:21:27:de:bb:10:88:f9:c2:b4:56:
0b:20:8b:cf:78:60:b1:f7:19:c1:dc:5e:87:a8:5d:
67:c5:58:a7:53:df:6d:86:56:c7:de:9a:40:b7:27:
57:0e:22:af:dc:0f:26:e9:09:c4:80:c5:fb:15:15:
44:62:34:8c:62:3c:0d:53:23:e2:c8:6f:6b:24:93:
85:79:3e:31:9d:0c:65:d0:33:cd:9e:5f:55:db:d4:
c9:c3:ba:cc:5f:3e:9c:63:e6:bb:0b:3a:de:b7:05:
5e:86:27:3d:b3:92:36:48:53:e7:cb:d5:a7:f3:03:
85:48:9c:b4:96:25:97:45:54:94:b1:9a:5a:86:39:
c2:0a:04:d6:e3:9d:a6:07:29:19:64:28:3c:a1:04:
26:50:04:f3:33:55:fd:c6:79:ea:25:e8:d3:76:80:
15:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E3:D6:2F:2A:93:B9:CD:CB:C3:07:9D:13:A4:40:5A:87:4D:7F:42
X509v3 Authority Key Identifier:
keyid:EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/suPWLyqTuc3LwwedE6RAWodNf0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.64.0/19
212.59.192.0/19
213.192.196.0/24
IPv6:
2001:ac0:c800::/44
Signature Algorithm: sha256WithRSAEncryption
41:c3:f9:7a:9b:34:52:94:a8:f8:e4:45:03:d3:4a:c1:49:00:
18:c0:71:b7:45:db:9b:d9:97:92:c4:a2:34:ce:69:65:c4:d2:
4c:e2:dc:38:71:17:b9:2c:83:b2:3e:77:01:b2:9d:d9:00:87:
25:cb:0a:a4:e2:4a:19:4d:8e:16:33:84:8c:6b:b9:02:ad:df:
b9:de:14:91:da:23:b0:99:69:01:f6:1c:d5:e3:b6:dd:f5:e3:
af:70:c4:4d:40:93:44:1f:1a:70:8b:c1:46:6f:fd:2c:b7:d7:
5c:49:5d:c1:71:64:29:8a:eb:9d:da:45:9a:f6:5f:88:18:73:
8d:15:c8:3a:9a:3a:04:1b:b9:fa:bc:92:88:fb:a0:20:17:c5:
8b:d9:37:86:b7:72:b3:00:c4:e2:ef:f2:d2:b6:87:05:d7:fb:
48:6f:80:51:02:93:aa:27:09:09:4a:bf:2a:ec:d4:19:5d:d4:
99:df:3a:f4:3e:9d:65:18:e0:af:9f:f8:96:76:a1:cd:da:90:
a2:0d:4d:24:9c:88:17:e3:26:2e:86:b4:80:ea:23:79:a2:20:
b0:8b:1a:b3:f9:32:77:32:8e:a9:18:39:43:85:56:29:ca:97:
6f:1b:63:b9:40:d5:6b:14:78:40:f5:b1:24:c7:e2:64:8a:b6:
0d:91:d9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:21 2024 by rpki-client on console-fra.rpki-client.org