Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/rGex9Ts4_IjqCp9ms0_gE8D8_LM.roa
File: rGex9Ts4_IjqCp9ms0_gE8D8_LM.roa (raw, json)
Hash identifier: A6/F629q+36NwRlxKsmC7GPWfzlSfKLKihNCkrRPu+g=
Subject key identifier: AC:67:B1:F5:3B:38:FC:88:EA:0A:9F:66:B3:4F:E0:13:C0:FC:FC:B3
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 01856E01C3EBCE0F3A23EC49A403EC9D167C
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/rGex9Ts4_IjqCp9ms0_gE8D8_LM.roa
Signing time: Sun 01 Jan 2023 15:44:47 +0000
ROA not before: Sun 01 Jan 2023 15:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2834
IP address blocks: 193.10.132.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:c3:eb:ce:0f:3a:23:ec:49:a4:03:ec:9d:16:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 1 15:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac67b1f53b38fc88ea0a9f66b34fe013c0fcfcb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:dd:c2:da:e1:5a:27:48:30:bb:fb:f8:69:fa:
31:bb:19:5a:06:b8:b8:3a:34:43:32:78:5b:29:04:
a7:2b:e8:a9:65:92:55:0c:25:69:e9:61:fc:dc:c2:
c0:07:ac:23:65:b4:83:50:63:2f:72:ab:a8:21:fb:
c3:de:ac:09:50:a5:43:79:2f:b9:30:5b:1b:d9:82:
9b:e0:18:1c:cf:32:21:99:ce:11:74:17:02:05:6b:
6c:dc:c4:e3:8f:6e:ef:75:1e:b5:69:b6:c0:f6:d5:
e6:13:7f:4f:41:aa:f5:07:98:99:3e:ae:1e:a9:34:
5c:a2:ca:39:77:70:6d:53:28:b1:a9:bf:31:e0:e1:
e8:8f:c5:38:75:f9:5a:f6:07:d4:1f:a1:13:ba:c4:
0e:aa:da:86:bf:f8:96:d3:8f:8b:8a:60:84:5f:aa:
11:33:a6:1c:b7:e5:71:f2:11:12:59:8e:07:4e:5f:
af:4d:9a:65:f9:6b:41:db:24:3f:d1:08:5b:f0:45:
0a:25:01:78:b3:24:2b:9d:a9:06:cc:18:6d:30:50:
58:79:a7:4c:aa:e2:7b:06:ce:6e:81:db:57:2f:63:
79:97:28:6f:3b:56:b1:07:f8:31:03:04:12:24:a8:
e8:fc:b2:44:1b:de:52:92:e5:bc:be:96:20:ae:8f:
a6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:67:B1:F5:3B:38:FC:88:EA:0A:9F:66:B3:4F:E0:13:C0:FC:FC:B3
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/rGex9Ts4_IjqCp9ms0_gE8D8_LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.10.132.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:af:ce:40:fe:5f:ee:2b:57:ee:16:ab:b5:f4:94:84:99:16:
d9:a9:aa:5f:f0:65:56:25:71:4f:0b:f9:3b:81:b1:ac:fc:d4:
20:d1:3b:52:21:1a:c0:ca:42:7a:fe:63:83:e6:9f:a3:43:6b:
0e:9c:d7:e3:da:8f:bc:f5:8e:84:26:53:ed:d3:8f:2c:80:47:
e7:3e:08:11:51:ef:8e:d4:3a:fd:b3:48:3c:f6:17:eb:24:ea:
4f:af:65:3c:81:01:9c:b8:b8:09:a5:a0:84:36:85:3a:fa:ea:
0a:40:ba:31:b6:6c:91:80:5a:d5:42:c1:d6:2d:6c:eb:2e:c9:
ce:d7:15:98:48:dd:95:8c:38:0c:2f:53:29:c9:87:f4:d6:ab:
2f:1b:c3:53:41:37:35:2b:5e:35:62:b3:52:09:65:85:dc:90:
b0:aa:f6:4c:05:3f:9f:84:d2:13:d3:86:a5:5d:9f:bd:40:d5:
79:36:2c:c5:75:d6:b9:28:45:55:cb:b7:e3:8f:72:d3:5e:c4:
fd:df:61:6f:dd:22:86:8d:d7:aa:cc:77:50:16:75:4c:02:4d:
08:ac:77:fb:80:a5:40:16:f9:86:0c:a5:74:c9:a1:83:36:42:
50:dd:2b:95:b2:ec:8d:96:e7:9a:79:27:6d:85:d7:08:39:0a:
60:07:5c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:10 2024 by rpki-client on console-fra.rpki-client.org