Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/eB0J60QNX4MBo7y4SUQr8fqwQV8.roa
File: eB0J60QNX4MBo7y4SUQr8fqwQV8.roa (raw, json)
Hash identifier: BmgyGjMF5v4RgJil9ENB2No7nvX9Gv0jHbHv6zMrB6E=
Subject key identifier: 78:1D:09:EB:44:0D:5F:83:01:A3:BC:B8:49:44:2B:F1:FA:B0:41:5F
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 01856E01C79E6E0FF58FC15EAC6E38144685
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/eB0J60QNX4MBo7y4SUQr8fqwQV8.roa
Signing time: Sun 01 Jan 2023 15:44:48 +0000
ROA not before: Sun 01 Jan 2023 15:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25176
IP address blocks: 193.10.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:c7:9e:6e:0f:f5:8f:c1:5e:ac:6e:38:14:46:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 1 15:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=781d09eb440d5f8301a3bcb849442bf1fab0415f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:e8:ef:c5:91:4a:a9:0e:99:fc:89:cd:7a:
cf:1e:bf:b1:fd:04:fc:e3:a8:6a:0c:a2:47:ee:d0:
ee:fe:90:b0:0a:56:1b:aa:bc:73:0a:33:76:a8:76:
94:3e:34:e9:bf:01:54:2a:e5:ce:65:8b:58:44:1c:
6b:77:e1:0c:0c:a5:77:a9:93:0d:69:1e:2e:1c:f5:
d2:ab:bb:5e:8a:26:07:32:99:03:10:1b:06:e5:90:
ab:87:fd:76:99:32:d7:ab:c4:72:31:bc:0b:f4:08:
93:08:9e:d7:11:4e:b4:e5:df:40:d4:e0:2b:59:08:
01:5e:71:50:7e:6e:6c:29:e8:45:eb:77:a4:c6:6f:
de:cf:4d:3f:c8:b4:dc:b8:08:9c:7c:45:14:34:3f:
6d:8b:7a:74:24:43:92:c3:2e:a5:f6:26:a4:06:14:
dc:ec:af:7f:53:68:ba:7a:9b:79:fc:3f:12:62:c1:
f1:84:bc:d2:fd:4a:8e:e3:07:3c:4d:63:71:fc:72:
22:1b:34:85:2f:00:39:0f:55:45:c4:c9:e6:78:61:
35:0f:4c:82:60:21:97:a8:f0:ad:7e:12:5e:fc:66:
f0:e5:2d:fc:2e:74:58:b4:18:34:03:6a:dd:07:29:
11:2c:cc:ac:ba:82:c3:38:72:59:dd:f5:bf:80:9e:
15:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1D:09:EB:44:0D:5F:83:01:A3:BC:B8:49:44:2B:F1:FA:B0:41:5F
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/eB0J60QNX4MBo7y4SUQr8fqwQV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.10.32.0/24
Signature Algorithm: sha256WithRSAEncryption
62:7c:aa:e6:0f:ee:fd:2c:eb:0b:bd:50:e2:c3:8e:6b:0d:a8:
4f:b4:9c:ea:da:ea:d3:14:18:54:75:be:7e:0f:01:47:20:ce:
de:c1:89:e5:53:0a:6a:ad:c9:4f:d9:85:83:66:8d:84:0a:d2:
ff:97:09:2b:a7:04:ce:50:81:92:ac:d5:5f:5c:6f:05:b0:83:
1d:ff:69:42:34:b3:4b:f6:ef:6b:75:99:8a:e8:f6:73:8c:ce:
a6:e9:98:87:75:2b:92:63:ff:68:1a:82:0a:5b:36:ec:a7:7b:
e8:0e:bc:07:6c:65:34:10:c7:d8:ab:10:b2:b0:9e:84:16:49:
78:20:2d:62:bc:b1:41:59:71:88:62:04:02:b8:0a:8f:06:0e:
36:f9:77:30:cd:5f:b0:37:c5:04:7a:ed:47:ac:31:75:2d:1b:
5b:1f:0b:ef:af:3c:f5:32:7b:21:90:4b:a8:66:d7:af:0d:8d:
0d:e2:09:6a:c7:76:09:d5:48:08:0e:09:75:d9:e5:09:c2:1a:
ad:75:72:ef:85:20:3d:e7:00:b3:e7:64:12:0f:0f:eb:8e:7d:
68:0a:49:1e:71:d6:95:eb:bd:0b:0f:9a:f4:7f:50:4d:8f:44:
b5:0c:24:4b:b6:97:c8:d9:80:f4:27:30:b4:66:36:da:18:78:
c4:a6:78:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:12 2024 by rpki-client on console-ams.rpki-client.org