Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/er3AUrcNuX786mtJ8n1EUKsjWFA.roa
File: er3AUrcNuX786mtJ8n1EUKsjWFA.roa (raw, json)
Hash identifier: nbYEpODiTf+OZlx5uVfB82q6cMx1SpS2H66hXbmiR2c=
Subject key identifier: 7A:BD:C0:52:B7:0D:B9:7E:FC:EA:6B:49:F2:7D:44:50:AB:23:58:50
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 0188D949AD2B3B13B1BA56B1C67298EBFE96
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/er3AUrcNuX786mtJ8n1EUKsjWFA.roa
Signing time: Tue 20 Jun 2023 14:51:04 +0000
ROA not before: Tue 20 Jun 2023 14:51:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.160.113.0/24 maxlen: 24
193.160.136.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d9:49:ad:2b:3b:13:b1:ba:56:b1:c6:72:98:eb:fe:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jun 20 14:51:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7abdc052b70db97efcea6b49f27d4450ab235850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bc:5b:02:aa:a1:0a:cf:3f:96:9f:ee:9a:a6:
8e:94:1c:e2:f7:6c:e2:f4:fe:ca:90:c8:f7:a9:86:
e1:0e:75:5b:ea:83:cc:dc:c1:0a:59:3e:55:23:6a:
79:bb:28:14:f4:b8:e4:b1:22:6d:c7:3e:b3:6f:a1:
cb:ee:00:2b:d2:63:1b:db:0c:04:8a:06:fd:62:13:
13:59:70:a9:02:4f:18:83:18:8e:b4:db:89:a6:4b:
7a:99:e0:b5:48:b9:ea:cf:cd:aa:6c:fd:09:5c:58:
8f:59:22:12:18:bd:c8:82:13:80:4a:22:48:18:34:
10:fd:f2:76:1b:b4:7e:5a:f1:81:bf:1b:9a:78:3e:
48:69:8b:84:5e:9d:ab:de:10:24:9f:f7:ae:dc:72:
d2:55:6c:f5:ee:c8:30:9d:a7:83:4d:30:33:b2:ef:
ad:0f:3d:60:91:64:af:fc:5e:59:a5:6d:87:1a:55:
f2:03:1f:98:d7:53:48:e8:0b:93:d1:f0:fb:21:4f:
a3:ea:5e:c3:d5:3e:ed:91:20:2a:55:0c:be:da:2d:
16:ee:de:03:5c:d9:9f:c0:28:c3:98:ec:67:99:0c:
b5:62:83:56:f2:94:5a:4a:36:54:61:03:27:cd:a4:
03:7c:b7:cc:fd:08:62:a7:16:de:b7:73:13:1c:1b:
a7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BD:C0:52:B7:0D:B9:7E:FC:EA:6B:49:F2:7D:44:50:AB:23:58:50
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/er3AUrcNuX786mtJ8n1EUKsjWFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.113.0/24
193.160.136.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:aa:6d:64:1a:ea:93:44:5d:18:a3:e5:de:b8:56:34:e4:f8:
c4:27:b5:7a:f7:63:86:2e:f2:b0:ad:f4:ae:03:78:53:43:d1:
21:89:56:69:7a:22:e6:2e:cf:d4:c9:dc:a7:4d:c9:65:2e:7a:
c1:ee:5e:c7:37:7c:0c:89:92:33:81:97:e2:3c:75:d5:ca:9a:
87:7a:ed:41:55:d3:34:d8:c0:94:7f:ab:d7:e5:fc:26:ca:e0:
b8:38:e1:96:77:51:f6:f5:51:f2:59:9d:18:8a:c7:6d:26:df:
c8:af:68:bf:5d:21:67:8e:00:be:44:33:fa:ac:14:a7:d0:d2:
f6:88:11:84:11:c6:b5:18:72:14:2a:02:c1:79:96:02:e0:3a:
db:49:c8:41:6c:4f:47:a3:05:ac:d7:46:b6:3c:64:43:78:86:
94:52:c7:d8:9c:5c:94:1d:3e:60:5e:fd:05:66:ea:90:73:3f:
b6:5b:03:fa:54:67:25:a9:af:05:6b:73:69:d1:7a:f8:48:ba:
e2:e0:fa:c4:13:37:b0:84:8d:6d:83:a7:62:cc:da:e4:ee:33:
17:6d:69:8e:de:2f:a6:35:13:a3:59:2a:32:0b:aa:b9:5c:e2:
cb:c0:2a:81:62:63:a4:c8:2b:4b:93:a7:af:a1:11:e8:60:3c:
0a:57:f5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:22 2023 by rpki-client on console-fra.rpki-client.org