Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/E-xLGxolQrDb26t6trSdkalkasc.roa
File: E-xLGxolQrDb26t6trSdkalkasc.roa (raw, json)
Hash identifier: HT5NoEy8d3CC/groHVtzQGloNd5ZNhJTVgJjwgeLnj4=
Subject key identifier: 13:EC:4B:1B:1A:25:42:B0:DB:DB:AB:7A:B6:B4:9D:91:A9:64:6A:C7
Certificate issuer: /CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
Certificate serial: 018790FB02CA4A725B4103C713A285B43195
Authority key identifier: F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/E-xLGxolQrDb26t6trSdkalkasc.roa
Signing time: Mon 17 Apr 2023 20:49:41 +0000
ROA not before: Mon 17 Apr 2023 20:49:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 192.162.219.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:90:fb:02:ca:4a:72:5b:41:03:c7:13:a2:85:b4:31:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
Validity
Not Before: Apr 17 20:49:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13ec4b1b1a2542b0dbdbab7ab6b49d91a9646ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:11:b5:d8:9f:22:80:da:82:05:62:6a:3f:13:
6a:f0:62:81:95:f8:f4:4b:04:03:3b:1a:c7:f8:f9:
76:21:55:c0:c8:a1:9b:f6:3a:8d:10:a6:91:6a:9c:
12:ee:bb:2a:8d:e1:ce:b5:f4:80:8e:f2:5f:e7:54:
3c:b3:a4:ca:3b:ba:b0:0d:c8:c9:7b:84:75:f8:48:
04:51:f9:1b:df:30:f2:c5:cd:1b:80:e5:e4:d8:84:
8d:13:34:1b:f3:5d:52:25:89:cf:3e:a1:27:67:59:
64:f8:a4:43:1d:a2:1e:4d:3f:de:fe:8e:9a:b8:c3:
c7:cd:18:25:39:d1:9b:a6:4f:ad:6a:fc:3d:2e:7f:
8d:36:f1:b2:d0:79:cf:76:9a:9c:f0:78:0a:66:b1:
3b:fb:49:ca:36:40:32:64:ab:25:8e:d0:63:86:c2:
3b:43:e5:cd:47:f3:a1:0f:1f:58:42:2e:b2:1d:35:
ce:56:6e:e8:be:ee:b9:a5:55:95:3e:e8:ed:87:89:
d7:a2:c1:f6:b2:6e:39:aa:ba:10:6f:8a:98:94:2e:
6b:fa:ce:8c:73:a6:e8:3f:a3:14:4f:c3:22:2e:d5:
d8:79:d9:99:38:02:6b:bd:38:df:b5:6a:57:52:c2:
2b:44:91:fa:49:df:da:e4:a7:d7:38:84:74:98:c2:
1a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EC:4B:1B:1A:25:42:B0:DB:DB:AB:7A:B6:B4:9D:91:A9:64:6A:C7
X509v3 Authority Key Identifier:
keyid:F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/E-xLGxolQrDb26t6trSdkalkasc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.219.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:c2:1a:a7:c9:4d:bc:1f:1a:f0:b8:b4:15:d0:d4:ca:cd:63:
30:df:4d:ad:8a:27:00:e6:1e:a6:19:ce:55:6b:e9:8f:3e:d3:
4f:25:74:bc:33:90:bf:a6:e0:43:71:dc:26:23:ff:47:fe:8e:
a3:85:f6:28:c1:e2:9a:f0:61:1e:f8:29:d0:3e:2c:0a:14:8e:
a1:0f:6b:5d:ad:db:0a:3a:73:15:99:33:70:37:a2:8d:a4:26:
53:11:c1:19:91:c7:d4:60:dc:7f:ef:50:de:49:6b:6b:cc:20:
04:bb:a5:a7:99:87:41:af:3e:16:15:ff:33:1a:1f:15:ad:ec:
36:68:df:6b:49:b3:92:f3:cd:db:63:37:0f:fb:44:b1:0d:2b:
f0:60:5f:76:d8:74:fa:d8:9f:f4:e9:be:73:c9:ed:3a:9d:6f:
3f:a3:c9:77:03:e1:dc:cb:a8:46:28:55:58:63:e6:74:f6:1f:
4e:26:22:5e:82:08:6c:07:c3:68:58:89:b0:25:2f:ec:e8:11:
02:58:28:be:9e:c9:0c:94:03:c2:62:f0:78:ec:ee:7b:a7:96:
b0:b0:ca:98:0e:20:ec:8d:b3:b0:de:38:f6:be:bc:fb:7d:c4:
00:45:08:6e:15:4d:9f:e8:63:d1:be:af:65:4a:79:04:78:c8:
72:93:93:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:44 2024 by rpki-client on console-fra.rpki-client.org