Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/0eeUWveoSnMHrMMm2kIs3ZqXvhA.roa
File: 0eeUWveoSnMHrMMm2kIs3ZqXvhA.roa (raw, json)
Hash identifier: eTtrL7nmI5cRBSL+X17l419j8bGjuyyFAU6MdORzMs4=
Subject key identifier: D1:E7:94:5A:F7:A8:4A:73:07:AC:C3:26:DA:42:2C:DD:9A:97:BE:10
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 01856E01C8C4C37D91F748A0B59FC265E60C
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/0eeUWveoSnMHrMMm2kIs3ZqXvhA.roa
Signing time: Sun 01 Jan 2023 15:44:48 +0000
ROA not before: Sun 01 Jan 2023 15:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43665
IP address blocks: 193.10.30.0/23 maxlen: 23
193.10.29.0/24 maxlen: 24
193.10.160.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:c8:c4:c3:7d:91:f7:48:a0:b5:9f:c2:65:e6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 1 15:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1e7945af7a84a7307acc326da422cdd9a97be10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:db:81:15:44:96:fa:58:77:c9:5f:54:a3:
15:50:60:52:9e:53:79:2e:d0:a8:28:7e:56:f1:70:
34:db:31:8b:de:c5:94:6f:5b:86:bf:dd:ef:4f:70:
db:e5:68:6f:66:a5:5c:1d:42:52:23:93:05:d2:f4:
41:4b:2b:2a:fe:bf:ec:31:96:3c:7d:19:bb:5c:c7:
c9:8b:a8:5f:cd:6d:43:9e:62:27:84:69:a8:70:40:
55:4a:c5:02:8e:f2:a5:c9:a8:bf:a1:1d:6c:fc:d9:
cc:a1:5c:a0:b3:5a:42:2c:6a:ef:25:71:17:a4:68:
11:27:37:9c:d6:52:64:44:c4:62:23:4c:76:af:10:
67:c0:62:8c:c1:aa:06:f9:9b:2d:d7:c0:05:2e:14:
99:67:e7:00:a2:71:4d:ed:e0:8a:92:55:04:bf:14:
6e:5b:b3:35:2d:22:f7:bb:55:49:4a:3a:e0:8f:9a:
58:f9:c0:63:a6:f0:57:77:fb:6e:f8:25:5f:39:0e:
36:b2:32:c7:c6:df:68:34:47:25:ab:a1:43:78:cf:
c4:09:46:7b:bd:39:4b:78:75:da:73:ee:fb:be:9d:
1d:eb:74:c5:8c:a1:1e:f8:33:90:0d:20:4a:ab:8b:
1a:22:8b:e7:28:13:7d:ae:83:08:d2:42:ba:e9:86:
1c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E7:94:5A:F7:A8:4A:73:07:AC:C3:26:DA:42:2C:DD:9A:97:BE:10
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/0eeUWveoSnMHrMMm2kIs3ZqXvhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.10.29.0-193.10.31.255
193.10.160.0/23
Signature Algorithm: sha256WithRSAEncryption
67:14:8c:4d:b9:df:d4:75:9d:27:98:d7:72:e3:67:d2:fe:c5:
48:81:e3:18:da:10:97:30:97:67:fd:03:92:52:f5:a8:20:f6:
5d:4a:64:0b:ad:98:9a:ff:98:6a:7f:c3:04:ed:a4:f2:d4:ff:
b8:63:ea:e6:d1:1b:26:4b:87:9f:8a:b4:e1:3c:51:c6:09:ec:
5b:18:86:2e:ad:9c:b3:f0:fa:ce:8b:66:6d:1b:ff:66:ff:79:
24:91:c9:8d:24:e9:fa:e2:15:56:99:0f:0d:1a:99:ab:83:09:
95:72:f0:2d:ce:9a:d0:07:db:58:0d:e8:28:c2:b8:36:12:df:
4f:d2:ec:7e:dc:12:54:f0:96:de:ea:13:43:62:d9:b6:cc:f7:
69:a6:09:0f:25:7e:69:3a:9b:3d:51:15:86:63:0d:a8:90:38:
9c:2a:83:3a:4e:92:34:19:18:a5:76:5c:50:07:5e:22:d0:a5:
86:94:58:2d:fb:aa:1c:b1:8d:ce:8c:6c:f4:77:bc:b1:0b:47:
ff:e0:b2:c4:d0:80:73:47:61:ce:97:8b:26:61:c4:b3:90:dc:
87:d6:cb:af:8d:55:db:54:76:43:0a:0d:90:71:68:c4:9d:50:
ff:a0:69:80:0d:e3:a4:63:d6:d8:d3:92:ba:cb:ec:be:f7:8a:
21:4c:59:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:10 2024 by rpki-client on console-fra.rpki-client.org