Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/eULVP7Ac4iXy7NrE7fEm7XcYrpo.roa
File: eULVP7Ac4iXy7NrE7fEm7XcYrpo.roa (raw, json)
Hash identifier: XBXPUO7MRJUIFWhreRvrrDl7uE7MEveC2dpD5rlTDOo=
Subject key identifier: 79:42:D5:3F:B0:1C:E2:25:F2:EC:DA:C4:ED:F1:26:ED:77:18:AE:9A
Certificate issuer: /CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Certificate serial: 01863074241F497E64B9F7044434D83BECF6
Authority key identifier: 35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/eULVP7Ac4iXy7NrE7fEm7XcYrpo.roa
Signing time: Wed 08 Feb 2023 09:56:03 +0000
ROA not before: Wed 08 Feb 2023 09:56:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 116.50.16.0/21 maxlen: 24
83.142.200.0/21 maxlen: 24
198.14.16.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:30:74:24:1f:49:7e:64:b9:f7:04:44:34:d8:3b:ec:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Validity
Not Before: Feb 8 09:56:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7942d53fb01ce225f2ecdac4edf126ed7718ae9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:6a:b0:63:0d:ce:b0:30:91:34:75:65:1f:
ea:7e:26:02:c2:5a:99:89:78:80:85:74:af:2a:41:
ff:a8:2b:fe:72:5d:f7:71:84:3a:ba:06:30:a9:7a:
62:e4:68:fc:4a:ba:2b:06:67:2f:ad:aa:4d:b9:49:
b0:96:75:ed:4b:fd:10:8a:ed:79:65:4b:79:d8:10:
d1:79:17:28:f1:e3:88:c1:01:79:01:92:65:4c:ca:
ba:9c:fe:b8:90:b1:05:72:e9:8e:88:0c:4f:5a:15:
b5:ac:fb:2b:5b:84:ab:be:2c:65:94:da:ec:1e:1a:
b5:66:06:6d:e4:06:3d:3c:b4:6b:90:80:67:20:6e:
78:d3:3a:91:3c:c3:f6:c2:eb:1e:37:f1:94:34:ca:
dc:85:61:18:f7:6f:fa:8c:89:b3:6b:2a:f4:95:b0:
af:be:1f:2b:bf:aa:4f:39:59:1b:40:df:6c:02:0e:
09:f7:34:3e:45:5c:4d:3f:05:0b:9b:56:a6:74:25:
1d:9a:34:98:22:92:8b:df:5e:b8:11:05:0a:b3:58:
0f:c1:50:b3:1c:57:70:bf:f4:95:57:16:28:99:7d:
cc:c1:cb:23:60:a4:ff:ad:1c:03:be:4b:6f:97:07:
21:72:f4:58:f7:bd:24:72:15:08:d9:3e:35:f0:ee:
45:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:42:D5:3F:B0:1C:E2:25:F2:EC:DA:C4:ED:F1:26:ED:77:18:AE:9A
X509v3 Authority Key Identifier:
keyid:35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/eULVP7Ac4iXy7NrE7fEm7XcYrpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/NclgZQk5mLpCz7oRvw0X06xAPUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.200.0/21
116.50.16.0/21
198.14.16.0/20
Signature Algorithm: sha256WithRSAEncryption
96:c1:1c:d1:3b:a9:98:af:11:c3:7b:f0:0d:f6:90:56:39:6f:
04:e6:87:09:10:a0:af:88:49:c5:1d:84:c0:a3:2b:89:3c:d5:
d3:64:87:18:c7:4a:87:f6:46:08:f9:df:dc:93:85:6e:5b:59:
98:c0:c6:a6:3a:bd:2e:88:32:28:ff:41:cc:de:c0:a5:a9:13:
58:7b:94:b7:bb:a5:cf:41:8f:e5:40:64:91:10:3a:b9:8b:d8:
16:ac:bc:9d:27:61:a3:7f:ef:ec:32:1a:04:ae:ff:2c:e3:1c:
ea:b5:5c:69:ee:08:82:b9:dd:83:aa:2d:d9:fe:04:4e:ee:f8:
95:e2:3b:ad:23:92:3d:6a:e5:60:3a:25:26:b6:2d:fa:31:05:
d5:63:59:d3:6d:dc:30:0c:02:d5:3d:d4:d9:21:1d:1d:12:d5:
8f:77:bf:fb:8c:fc:67:2a:19:8f:e1:fd:29:b9:b6:00:5c:23:
9d:ac:d7:28:f0:05:4f:61:58:76:f2:2c:e3:13:af:ab:9e:f4:
55:68:fb:55:f5:e9:52:c6:5e:88:ab:ca:88:89:1b:de:34:19:
b9:b4:01:63:87:76:74:71:38:d7:2b:3e:d6:93:c4:ea:76:86:
07:a9:54:17:46:2b:c4:e7:f7:1a:96:8b:ac:b1:c8:70:fc:eb:
8a:1f:3c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:41 2023 by rpki-client on console-fra.rpki-client.org