Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/xEd2XCg9YcyS0l_2EJz53NoxBjs.roa
File: xEd2XCg9YcyS0l_2EJz53NoxBjs.roa (raw, json)
Hash identifier: 70QTulPKxCRQXvfkfytD4ytAjWs0PE3TxwZINxSLbX0=
Subject key identifier: C4:47:76:5C:28:3D:61:CC:92:D2:5F:F6:10:9C:F9:DC:DA:31:06:3B
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 01856FCBBD97475B1CA75118D6CD8CBC9A78
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/xEd2XCg9YcyS0l_2EJz53NoxBjs.roa
Signing time: Mon 02 Jan 2023 00:05:01 +0000
ROA not before: Mon 02 Jan 2023 00:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212669
IP address blocks: 193.160.102.0/24 maxlen: 24
193.160.113.0/24 maxlen: 24
193.160.130.0/24 maxlen: 24
193.160.136.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:bd:97:47:5b:1c:a7:51:18:d6:cd:8c:bc:9a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jan 2 00:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c447765c283d61cc92d25ff6109cf9dcda31063b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2e:4a:be:d8:e8:16:ab:3f:4a:1d:1d:9b:47:
75:9a:45:08:f5:bb:88:ef:d1:ab:20:a7:0b:b0:f5:
7e:13:4f:23:09:1b:01:ae:4b:87:f5:10:1e:3b:94:
6a:31:87:14:08:e4:84:01:a7:d2:a4:5c:d4:70:13:
d9:83:ed:b9:e8:74:0b:73:d1:b4:b7:ea:1d:de:1b:
26:bd:59:08:33:2e:54:95:e1:45:f7:09:81:01:a9:
a9:7d:39:b1:fc:df:fb:06:df:63:fb:f5:f1:0e:f9:
45:2c:f6:d0:1f:0f:9a:9c:27:0f:e6:0a:25:1d:26:
ab:8d:e5:db:1c:2d:4f:df:e5:0a:4d:cd:3d:db:82:
9a:5e:03:43:93:a8:78:ae:f0:8b:ba:f1:21:1e:9f:
6c:9a:35:4d:27:0f:35:6f:3f:d7:d1:7f:1d:5a:70:
22:a3:6d:7a:11:11:53:fa:da:a5:89:28:34:d0:74:
c3:ce:e4:34:5e:4e:dd:4a:69:96:51:ee:c5:70:2c:
18:2f:78:18:f3:72:1a:b8:ac:f4:4f:b3:28:4f:92:
ea:18:5d:8e:7b:d0:a4:bf:9b:c8:e6:d3:ee:3f:5e:
41:cc:0d:11:9b:57:38:3e:be:47:eb:dd:59:74:3e:
d3:7b:50:29:2d:c7:9e:84:2c:4b:8f:a7:88:7c:dd:
2b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:47:76:5C:28:3D:61:CC:92:D2:5F:F6:10:9C:F9:DC:DA:31:06:3B
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/xEd2XCg9YcyS0l_2EJz53NoxBjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.102.0/24
193.160.113.0/24
193.160.130.0/24
193.160.136.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:2d:be:56:50:8e:3e:77:86:a4:1c:f5:11:36:5c:a5:95:e3:
86:5f:b4:d2:fc:16:fa:2d:9e:38:30:f9:7e:9e:08:d4:c4:31:
d6:88:d2:8f:62:fd:35:e3:cc:b4:52:3b:e4:20:d5:53:96:bf:
e0:b6:29:dc:54:ac:5c:f5:3e:3d:21:74:67:98:c9:38:23:c4:
17:d9:98:e9:bf:b1:3d:4e:21:0e:41:4d:c1:ca:c8:14:53:55:
cc:16:0c:49:c7:31:85:b5:87:92:da:a4:0c:83:ba:be:a3:b2:
89:26:9d:c5:d6:4b:86:0c:bd:98:a8:bd:b6:81:82:53:8a:7a:
76:7b:be:13:0e:60:8b:76:c3:0e:32:48:8c:18:1b:bb:a6:da:
f5:7f:10:c8:64:ff:d1:88:c1:bd:9b:e8:37:44:69:cf:20:68:
c1:86:bc:27:f0:cc:1f:ab:63:12:5b:e1:43:52:d0:58:79:6f:
94:7f:6a:44:69:75:4b:3e:43:62:5b:dc:c3:55:a7:45:ac:68:
60:51:82:84:55:2c:4a:08:80:a9:89:2a:f8:f5:c7:d5:26:83:
31:92:6c:e6:65:4a:10:76:a7:71:e6:41:5f:ce:bc:7e:5b:5a:
0b:2f:be:36:e8:6a:4e:d1:85:67:64:64:00:e0:aa:0a:b2:ab:
ad:e6:08:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:22 2023 by rpki-client on console-fra.rpki-client.org