Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/R-Z2aRQxiJSi24Fp6ugvSM0TAZY.roa
File: R-Z2aRQxiJSi24Fp6ugvSM0TAZY.roa (raw, json)
Hash identifier: p7wsZAOdqdBvve741gEbVftIty9J0UpUVMBk7AO2eC4=
Subject key identifier: 47:E6:76:69:14:31:88:94:A2:DB:81:69:EA:E8:2F:48:CD:13:01:96
Certificate issuer: /CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Certificate serial: 018572E82BE1020975C80F30A40D56DEE3EA
Authority key identifier: 5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/R-Z2aRQxiJSi24Fp6ugvSM0TAZY.roa
Signing time: Mon 02 Jan 2023 14:34:56 +0000
ROA not before: Mon 02 Jan 2023 14:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50986
IP address blocks: 193.34.202.0/24 maxlen: 24
31.170.24.0/21 maxlen: 21
185.27.96.0/22 maxlen: 22
178.236.64.0/20 maxlen: 20
2a02:1610::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:2b:e1:02:09:75:c8:0f:30:a4:0d:56:de:e3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Validity
Not Before: Jan 2 14:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47e6766914318894a2db8169eae82f48cd130196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fe:28:f0:15:e1:36:56:e5:f3:1a:40:f3:e0:
01:8f:8d:b1:93:b8:63:30:d4:44:89:3e:47:9b:bf:
67:ea:f5:c3:df:66:2e:52:c3:e9:34:fd:e7:71:69:
52:bc:41:c2:65:87:0c:c1:fe:d9:0f:dd:1e:b6:79:
c5:69:76:e9:3a:b5:06:ca:87:4f:15:6c:38:e7:02:
58:1f:33:4c:90:08:ea:7e:ed:b8:26:e3:8c:5e:20:
1a:6c:61:ce:9f:24:ed:75:0b:17:fc:21:44:70:fe:
11:ea:0d:0d:f1:ec:49:c4:f5:68:82:cc:d7:64:68:
c6:e5:02:a6:00:75:d3:95:a4:5e:6d:47:18:ed:10:
80:30:0b:63:5a:c6:7a:da:ef:5d:62:5b:12:ce:4c:
40:cf:cc:9f:37:6b:04:c7:3f:b4:c1:8a:88:c4:01:
55:27:21:9b:12:dd:5e:78:f4:a8:e8:0a:e3:48:39:
61:05:19:dc:33:6a:01:75:7d:7e:40:f0:5d:d2:ce:
ae:6d:da:b4:50:34:cd:d2:b5:59:39:9b:b7:bf:78:
bf:59:e0:fb:9b:ca:21:b9:c5:93:2f:f4:8f:6b:6b:
d9:6e:f9:22:95:43:20:69:6f:c8:16:3b:ba:67:18:
40:82:51:6c:4e:6e:e7:48:74:32:d4:32:8a:ca:ad:
68:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E6:76:69:14:31:88:94:A2:DB:81:69:EA:E8:2F:48:CD:13:01:96
X509v3 Authority Key Identifier:
keyid:5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/R-Z2aRQxiJSi24Fp6ugvSM0TAZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.24.0/21
178.236.64.0/20
185.27.96.0/22
193.34.202.0/24
IPv6:
2a02:1610::/32
Signature Algorithm: sha256WithRSAEncryption
14:84:67:b9:50:54:87:a3:35:98:18:0a:b4:04:27:4b:22:12:
b3:3d:c3:15:e4:c6:2f:22:a6:d1:f7:a9:ad:04:1f:8f:12:fc:
62:0f:a8:9d:de:57:ac:b8:8e:48:79:41:14:f1:80:e2:75:27:
01:c7:14:a4:22:0f:be:c7:c5:43:bf:58:18:26:90:75:c0:00:
66:cc:67:22:8f:c7:a1:a6:b5:c9:54:b2:92:c6:4e:ac:98:68:
53:86:be:0a:86:5a:e7:3f:1b:22:c3:7a:84:16:d2:1c:0f:6b:
00:3e:ec:af:40:a4:17:a0:cf:6f:7d:af:d5:60:af:64:c5:d7:
5b:10:5d:33:c8:0e:91:b8:e2:6b:ce:1b:5e:51:7a:9d:81:9c:
46:86:9d:20:85:1b:39:e4:e2:34:f0:7e:58:63:9e:f6:ec:e6:
97:32:d3:e6:14:83:77:bd:aa:2c:ff:87:c9:2c:37:43:c7:5f:
75:65:68:2e:3a:d6:c2:8c:4c:0e:55:b6:fb:cc:9d:52:76:f1:
2f:fe:02:ff:e4:9f:b7:10:f5:15:c2:a5:b6:f6:72:9a:0f:d6:
63:aa:4a:e1:8b:a2:16:b3:e9:7c:88:5e:d7:6e:b0:09:fe:bc:
ee:6d:e0:30:7f:0f:2b:29:1c:8b:1c:05:e6:b7:bf:e7:62:c3:
3a:05:5d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:20 2023 by rpki-client on console-ams.rpki-client.org