Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/E3l6rxSG6OKLVPKkY2-oQZRkGX8.roa
File: E3l6rxSG6OKLVPKkY2-oQZRkGX8.roa (raw, json)
Hash identifier: 28VpxQI/fxPcaYzfoBP0iDqUWu3x4CRa32fPNdbgopw=
Subject key identifier: 13:79:7A:AF:14:86:E8:E2:8B:54:F2:A4:63:6F:A8:41:94:64:19:7F
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 0186A8EABA503A430CE6728E511CBE2616CF
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/E3l6rxSG6OKLVPKkY2-oQZRkGX8.roa
Signing time: Fri 03 Mar 2023 19:20:00 +0000
ROA not before: Fri 03 Mar 2023 19:20:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201389
IP address blocks: 95.85.85.0/24 maxlen: 24
93.179.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Apr 2023 11:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a8:ea:ba:50:3a:43:0c:e6:72:8e:51:1c:be:26:16:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Mar 3 19:20:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13797aaf1486e8e28b54f2a4636fa8419464197f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:be:2f:b6:e8:e6:ed:0b:51:5b:15:da:73:f8:
bb:ef:20:c6:bf:15:6c:33:56:77:1c:b0:45:ec:18:
07:b2:7b:15:a7:2d:14:8f:83:47:a9:19:03:26:60:
55:0e:94:6b:49:d3:72:8b:cd:0d:39:7a:81:e3:fd:
ed:34:90:7b:d3:fe:f5:bb:38:f5:61:72:66:51:45:
66:e5:b5:83:fe:48:6e:2d:12:df:3f:2e:59:58:45:
76:bb:f7:f3:fa:30:24:d5:c3:de:e2:d3:a4:57:ab:
cb:96:66:46:1d:c8:92:7a:9f:a5:fd:be:83:82:77:
d0:28:8e:2d:4d:41:0f:47:44:b6:89:7a:5a:9b:59:
de:a2:b9:56:13:b8:04:e1:a3:1d:fc:dd:2b:1b:49:
73:18:57:48:1e:0a:d7:6c:df:23:d0:68:96:04:cd:
65:3e:99:3e:0b:4d:6e:d5:58:1e:5e:b9:94:ee:e3:
5c:98:bb:42:02:b5:47:dc:9a:c7:40:73:e3:69:35:
7b:dd:8f:b2:8e:25:69:c5:31:f5:e0:42:90:32:77:
f1:32:45:02:95:5d:1e:32:93:aa:ad:ea:25:db:ad:
85:bf:3d:9f:a5:ed:0f:7f:d0:d0:44:07:bc:87:7a:
42:53:b6:60:f7:6e:d9:20:29:31:b3:8f:0e:75:7c:
68:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:79:7A:AF:14:86:E8:E2:8B:54:F2:A4:63:6F:A8:41:94:64:19:7F
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/E3l6rxSG6OKLVPKkY2-oQZRkGX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.179.66.0/24
95.85.85.0/24
Signature Algorithm: sha256WithRSAEncryption
06:19:01:8a:a5:5e:17:8f:c5:b8:40:3c:1b:90:50:89:1d:d7:
0b:05:f3:47:c2:5a:63:21:03:7a:90:74:23:29:25:f3:f5:ca:
c2:c5:73:d4:51:99:58:81:71:4f:f2:a7:9d:56:8e:9a:39:78:
9f:9b:1e:1e:fa:73:c6:41:12:13:85:35:69:ac:c2:55:d3:6f:
94:1a:4d:fc:d6:a0:3a:31:d1:4d:70:c1:d8:4d:e2:5b:a6:6f:
a4:41:ba:55:d6:e0:e9:b6:05:3e:fe:cb:4f:a8:62:d8:bf:ee:
b6:9c:81:e3:ba:8c:cc:94:27:93:c3:fd:43:d8:3c:5a:61:54:
5c:a8:4d:3d:ac:95:8c:90:21:a1:d3:ab:c4:30:97:90:b9:e2:
9f:8b:0d:b6:38:99:ac:d9:74:28:b4:17:d8:03:06:0a:6b:db:
ae:ba:33:52:a7:84:b9:a1:58:fa:f6:3e:e9:39:d3:23:4d:ca:
ca:e3:75:ff:c5:00:27:a0:6a:d7:7a:03:ce:50:4e:70:8a:55:
06:8d:78:c5:14:db:ad:92:df:1a:b3:e8:37:1f:dc:29:bd:2b:
0d:24:e3:ff:43:eb:61:5e:8d:53:fe:d3:dc:46:b7:8d:35:9b:
01:2c:82:55:18:d6:d8:a2:94:d7:f3:df:14:cc:82:94:b7:fb:
26:92:86:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:22 2024 by rpki-client on console-ams.rpki-client.org