Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/2Dtd_UreYInF8wcrQ-dYyhtv02M.roa
File: 2Dtd_UreYInF8wcrQ-dYyhtv02M.roa (raw, json)
Hash identifier: Og3jquhF2r7C5bMov/XXG70Hd6SSSR/VL9TfCQi0org=
Subject key identifier: D8:3B:5D:FD:4A:DE:60:89:C5:F3:07:2B:43:E7:58:CA:1B:6F:D3:63
Certificate issuer: /CN=5990c1553762ac9af57df9b58d9dc50af409c566
Certificate serial: 01856DD3E79DEB1476DC7CAD62606F40A19B
Authority key identifier: 59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/2Dtd_UreYInF8wcrQ-dYyhtv02M.roa
Signing time: Sun 01 Jan 2023 14:54:41 +0000
ROA not before: Sun 01 Jan 2023 14:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49801
IP address blocks: 193.29.18.0/24 maxlen: 24
193.29.26.0/24 maxlen: 24
2a10:f980::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d3:e7:9d:eb:14:76:dc:7c:ad:62:60:6f:40:a1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5990c1553762ac9af57df9b58d9dc50af409c566
Validity
Not Before: Jan 1 14:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d83b5dfd4ade6089c5f3072b43e758ca1b6fd363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b5:c5:42:57:6c:4c:52:99:fa:cc:4e:f4:81:
d1:16:d1:90:87:10:b8:ab:28:b7:13:12:5d:e8:da:
ae:13:37:6d:62:85:ba:0a:f8:76:3e:93:ef:74:2a:
45:71:e6:31:b6:de:db:1f:c5:83:3f:1d:7a:64:91:
7d:a7:26:a5:c8:d5:10:d4:58:a5:11:8e:f0:4a:be:
b5:fe:8d:b2:b2:88:24:5a:fb:cd:a3:5e:ad:03:be:
e2:4d:3c:62:41:71:ec:f2:33:08:0d:b4:5a:74:b5:
79:f2:07:6d:c8:9d:a2:68:3e:ea:40:63:2d:f9:83:
c3:a4:d7:17:04:94:a8:73:46:d9:9d:92:c5:37:7d:
3e:91:02:e0:2d:ee:a4:39:31:b9:6d:d3:38:30:e5:
eb:b3:31:81:12:bb:61:df:58:44:60:f8:04:c6:bc:
06:ef:cf:74:52:91:d5:b4:d2:0a:35:14:9a:3c:5d:
71:65:6c:35:6b:53:02:1f:ef:5c:57:c6:a0:be:bb:
e1:26:c1:85:9d:f0:ca:32:eb:55:83:3e:d4:23:35:
33:46:34:81:98:d3:12:43:42:16:35:5e:a3:cf:2a:
95:c2:f6:c1:ed:2e:ba:c8:f2:0f:50:97:e1:6c:55:
90:21:30:cf:61:ac:27:d0:54:e7:b6:e1:22:eb:1d:
ba:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3B:5D:FD:4A:DE:60:89:C5:F3:07:2B:43:E7:58:CA:1B:6F:D3:63
X509v3 Authority Key Identifier:
keyid:59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/2Dtd_UreYInF8wcrQ-dYyhtv02M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.18.0/24
193.29.26.0/24
IPv6:
2a10:f980::/29
Signature Algorithm: sha256WithRSAEncryption
8f:e3:e6:c2:a3:68:ac:9d:73:04:2e:f5:59:21:1f:d4:bd:2e:
cb:a5:76:86:29:19:26:bc:b2:25:c3:ed:6b:c3:88:70:29:e1:
3f:f1:5e:b4:5c:4c:b4:87:d1:c1:f8:a7:eb:51:e1:39:bb:76:
57:ab:18:93:4b:75:d4:bc:0d:6b:d0:e5:49:3d:f1:a9:3e:5b:
6c:65:af:35:ff:c0:c1:bb:50:16:30:d6:2b:96:25:4f:29:b7:
ca:48:55:d5:be:de:c8:72:34:b5:b9:c3:e0:83:b8:67:c4:16:
d0:cf:7c:8d:59:05:55:92:e6:09:7e:03:bb:a6:f6:a1:e6:02:
35:32:f6:6d:c8:9f:1f:8c:3e:3d:e2:98:f5:bc:d0:56:af:99:
22:3d:eb:8d:b1:e5:d0:a8:01:19:39:52:ce:0a:4a:b1:c9:b3:
f1:1c:e0:ee:c4:60:84:4f:41:0f:60:47:37:fa:de:47:1c:78:
33:cc:e3:58:b7:ae:d3:d6:95:b4:58:49:e2:a2:77:4c:1d:1a:
aa:9f:59:0b:ab:c7:79:67:e0:04:16:c3:3e:2c:92:b4:dc:39:
07:07:6f:ba:82:e6:18:56:0e:db:72:59:fa:8d:27:cd:f4:5d:
77:4c:eb:7b:9e:b2:5c:06:2f:15:9d:a3:1e:07:6b:a7:98:72:
9c:6e:bd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:45 2024 by rpki-client on console-fra.rpki-client.org