Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/pK0hZ7iOGdSH7PNKf9OwM0ozhX8.roa
File: pK0hZ7iOGdSH7PNKf9OwM0ozhX8.roa (raw, json)
Hash identifier: pGZaLxG5K51Avw0AxPBPxl4ZupLfXqiZbYcoTehcXYI=
Subject key identifier: A4:AD:21:67:B8:8E:19:D4:87:EC:F3:4A:7F:D3:B0:33:4A:33:85:7F
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 0186550BF7E70C53716E2A49AB8CA58982AD
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/pK0hZ7iOGdSH7PNKf9OwM0ozhX8.roa
Signing time: Wed 15 Feb 2023 12:28:12 +0000
ROA not before: Wed 15 Feb 2023 12:28:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43624
IP address blocks: 193.43.147.0/24 maxlen: 24
193.57.137.0/24 maxlen: 24
193.46.57.0/24 maxlen: 24
93.185.166.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:55:0b:f7:e7:0c:53:71:6e:2a:49:ab:8c:a5:89:82:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Feb 15 12:28:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4ad2167b88e19d487ecf34a7fd3b0334a33857f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:6f:f0:88:c0:46:dc:42:fa:6c:64:3f:3d:
9e:da:66:c3:7b:04:69:08:44:da:c7:a9:81:cc:da:
91:40:02:eb:46:cb:fc:97:9b:32:77:53:0f:fb:3d:
a7:fb:8d:9f:c6:a5:3c:09:4a:62:af:3a:29:bc:e5:
5d:34:77:45:c0:c1:d1:ac:a5:6f:e9:9f:06:03:30:
c4:7d:2a:d2:a7:cc:1f:e4:ad:b6:25:e4:ab:0f:88:
75:55:50:48:61:11:50:8f:5c:13:08:e9:b3:0e:ad:
c9:14:f2:95:99:e1:6c:6b:60:50:8f:09:34:e1:0d:
d4:88:8f:2b:bd:c9:51:1a:c1:17:82:b5:9e:34:ee:
48:be:58:76:b9:f6:b9:9a:ef:1e:1a:11:05:d2:b5:
83:ff:a5:9d:8d:57:d2:77:77:d9:57:c1:bf:9a:22:
2a:d7:bf:7c:cb:18:80:79:65:f1:c9:52:c4:5a:50:
20:b4:50:a7:f6:82:50:70:9a:c8:7b:7c:f8:16:b5:
4f:6d:d0:bd:1c:47:c4:66:66:cd:06:96:15:b4:4e:
20:50:4c:55:7b:c2:ae:d4:90:99:3b:8e:7e:b4:13:
21:dc:42:e3:e3:a3:ff:c4:ce:57:0b:57:be:9e:5b:
8e:58:ea:0e:8b:a2:59:49:fe:21:46:f7:aa:04:04:
07:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AD:21:67:B8:8E:19:D4:87:EC:F3:4A:7F:D3:B0:33:4A:33:85:7F
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/pK0hZ7iOGdSH7PNKf9OwM0ozhX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.166.0/24
193.43.147.0/24
193.46.57.0/24
193.57.137.0/24
Signature Algorithm: sha256WithRSAEncryption
87:6c:19:4d:9a:26:47:46:66:ba:a5:9f:14:54:72:da:de:ff:
7f:37:97:29:8f:b9:08:09:7f:74:78:37:60:84:15:d4:cf:e7:
e7:b8:da:93:a0:3b:24:7e:2c:9c:f5:56:da:19:ad:53:d0:b6:
00:2a:8a:ac:3a:ea:db:61:fe:42:b1:7e:b0:d9:b4:c8:84:82:
e1:90:61:0a:e6:00:7f:a1:78:5c:74:fe:7e:28:5a:f9:bc:d4:
6f:17:81:9e:8e:d5:cc:2e:58:df:7f:72:b2:b0:d2:56:b8:ff:
09:8f:07:cd:b7:91:fc:04:21:eb:b0:9c:72:cf:a8:d3:7a:95:
1c:8c:ba:02:99:f0:ec:04:7d:4f:5f:c6:85:fb:7d:ec:11:4f:
26:c1:81:fc:45:2f:01:37:60:19:0a:73:b9:9c:cf:4c:d3:aa:
b9:b6:d4:2e:7d:2a:f5:c2:09:e4:e0:65:a8:23:26:cb:41:c6:
51:8a:15:10:fb:e6:23:8a:d2:3b:3c:5b:31:9e:ec:9c:e1:82:
01:13:f8:98:4b:0d:96:a6:50:9a:79:e5:91:c9:93:b3:23:16:
53:e3:2d:94:e6:f1:e4:17:2b:0d:0f:47:e0:1f:c5:ab:71:9b:
da:51:9c:03:98:ab:e2:b4:a2:10:95:c7:55:04:c2:43:3e:6b:
80:c8:c2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:38 2024 by rpki-client on console-fra.rpki-client.org