Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/SE8tjFZg9MIj4XQJFb9cG4eFMi4.roa
File: SE8tjFZg9MIj4XQJFb9cG4eFMi4.roa (raw, json)
Hash identifier: t7UIpJNEOpGjxwn4Qly5ZZsq0pDWwJNwfMxFO59qJgY=
Subject key identifier: 48:4F:2D:8C:56:60:F4:C2:23:E1:74:09:15:BF:5C:1B:87:85:32:2E
Certificate issuer: /CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Certificate serial: 01857067234143684D333D8753142BC3A84E
Authority key identifier: 25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/SE8tjFZg9MIj4XQJFb9cG4eFMi4.roa
Signing time: Mon 02 Jan 2023 02:54:45 +0000
ROA not before: Mon 02 Jan 2023 02:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202371
IP address blocks: 94.185.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:23:41:43:68:4d:33:3d:87:53:14:2b:c3:a8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Validity
Not Before: Jan 2 02:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=484f2d8c5660f4c223e1740915bf5c1b8785322e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:42:13:67:46:ee:b6:07:2c:a6:68:ef:7d:08:
b7:51:28:4b:fb:c5:89:ea:cd:f4:4d:cc:ac:e3:64:
37:30:7f:b9:9f:ed:fe:db:4e:88:fa:6e:ac:b5:e2:
9e:82:e0:78:6c:94:95:51:62:77:6b:00:f3:1c:1e:
73:70:d6:31:a7:f6:8e:84:60:cb:79:7e:3f:7d:f9:
b5:42:c6:39:c7:58:a6:df:07:bf:b7:4c:7b:10:17:
f9:b7:11:fb:66:a4:6f:7e:7f:d5:46:e4:93:c7:7a:
d3:43:f9:a4:66:86:ea:24:10:0a:97:04:80:1e:5e:
11:fe:bf:e8:d5:5a:cb:73:49:45:1d:72:b6:32:84:
0b:27:fe:1c:f2:72:aa:4d:49:fa:f5:04:23:9d:eb:
e7:15:3b:11:d1:01:95:62:65:0d:2c:88:d8:d3:2f:
3d:e5:b1:0e:e4:cc:91:ee:7b:64:f2:c7:04:cb:2a:
cd:dd:33:c5:5c:35:82:3a:81:3a:cb:02:ef:d3:64:
c8:e8:cf:50:bb:1e:a4:f0:12:d6:b4:45:19:e2:12:
9b:b6:99:8c:2c:77:5f:6e:54:7e:5d:9a:b1:d2:84:
72:bc:9c:90:e5:86:21:eb:d3:d8:f9:e7:d5:23:b7:
a8:90:ef:3f:11:9d:9b:b6:91:93:01:44:c6:15:2a:
92:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4F:2D:8C:56:60:F4:C2:23:E1:74:09:15:BF:5C:1B:87:85:32:2E
X509v3 Authority Key Identifier:
keyid:25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/SE8tjFZg9MIj4XQJFb9cG4eFMi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.185.122.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:85:ca:bf:f3:e1:0a:2c:61:5c:f2:47:5f:7a:13:41:19:16:
46:53:4c:ac:37:00:aa:12:fe:0a:8d:eb:91:db:b9:95:4c:86:
8f:35:77:f4:d4:50:b8:08:84:f5:92:26:76:72:89:8e:bf:05:
8b:b6:ad:c2:b0:53:ae:d5:1a:33:cf:60:62:3d:b2:ad:97:9e:
c2:63:44:95:c5:32:6f:ef:d2:8c:55:8e:e0:1e:27:5b:35:f9:
f0:90:35:1a:b4:b1:e2:09:89:ce:db:b3:5f:ad:e9:ee:87:94:
d2:94:4d:37:32:11:9c:d8:fa:db:fc:15:55:5f:93:fc:42:b9:
2d:03:54:88:96:25:c4:50:9e:5a:f2:26:a8:3c:76:a2:4f:68:
0b:5d:bd:82:08:c5:37:25:e3:96:b7:a5:e6:fc:11:39:50:c2:
a7:e3:59:b5:04:a2:60:60:2e:8a:60:66:e2:d4:13:13:62:99:
84:99:a7:a6:45:3b:11:15:d6:62:78:fb:12:36:bb:c6:48:b6:
2f:11:4c:ad:98:28:dc:23:ac:73:3b:a2:ee:fc:c7:c4:e8:13:
53:f8:df:bc:d3:c4:b4:94:3a:e7:8d:44:d4:63:0f:29:57:c8:
42:09:48:c8:88:32:19:63:17:0a:97:51:8b:bd:d8:69:f9:d2:
b7:d2:c1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:06 2023 by rpki-client on console-fra.rpki-client.org