Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/ebbaXdv6WhlasHH2B9MzCz1Od9k.roa
File: ebbaXdv6WhlasHH2B9MzCz1Od9k.roa (raw, json)
Hash identifier: R55aryNH/f6jFyVasu9RFeltV7Yehoy/nwNC03DZjQY=
Subject key identifier: 79:B6:DA:5D:DB:FA:5A:19:5A:B0:71:F6:07:D3:33:0B:3D:4E:77:D9
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 0189253F935C66F992810218377E696B0BFE
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/ebbaXdv6WhlasHH2B9MzCz1Od9k.roa
Signing time: Wed 05 Jul 2023 08:51:10 +0000
ROA not before: Wed 05 Jul 2023 08:51:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202103
IP address blocks: 176.39.0.0/19 maxlen: 20
92.52.128.0/18 maxlen: 20
31.134.64.0/19 maxlen: 20
176.39.48.0/20 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:25:3f:93:5c:66:f9:92:81:02:18:37:7e:69:6b:0b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Jul 5 08:51:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79b6da5ddbfa5a195ab071f607d3330b3d4e77d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8e:2d:e9:6b:b6:a2:c4:ae:05:83:b2:b9:e1:
63:b9:60:76:0a:64:49:8c:1a:0e:63:3d:a4:00:b5:
cb:e4:59:24:20:3d:96:b7:27:5b:59:06:21:f0:e6:
1b:4a:97:8e:0d:22:49:b2:dd:e1:e5:06:8d:8c:0c:
ad:14:68:fd:3f:2c:58:35:23:6d:b8:f8:d2:44:d0:
46:c6:68:5f:7e:34:25:df:13:cd:e4:e2:fe:38:58:
1d:32:fe:75:50:a7:01:fa:6a:b6:ae:72:04:54:cc:
54:27:24:64:26:43:e3:5f:6c:9f:4c:06:21:c4:79:
75:e4:f8:9a:26:b0:13:35:88:3b:1f:8c:9f:93:4f:
28:80:d9:50:44:ca:04:03:a3:d7:cc:a3:82:38:9a:
c3:bf:7e:b1:3e:cc:8a:73:47:76:64:f3:96:95:b3:
34:c0:4a:6c:d3:33:f2:77:64:f6:14:e6:5f:ec:8e:
20:a6:7a:8f:1e:7b:86:dd:ca:0c:3a:19:ed:72:b3:
6f:54:14:44:40:2e:79:e2:0e:58:8d:f7:2d:63:d5:
bf:be:08:c4:f4:aa:8a:9b:33:a6:ba:92:bd:c8:80:
68:e7:9d:64:91:5a:63:f1:56:0d:d2:2f:db:39:e9:
f5:90:a2:79:6d:9e:67:23:b9:fa:94:d8:7a:24:cd:
9e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B6:DA:5D:DB:FA:5A:19:5A:B0:71:F6:07:D3:33:0B:3D:4E:77:D9
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/ebbaXdv6WhlasHH2B9MzCz1Od9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.134.64.0/19
92.52.128.0/18
176.39.0.0/19
176.39.48.0/20
Signature Algorithm: sha256WithRSAEncryption
28:b0:36:84:9a:67:66:d6:ea:dc:54:f1:04:bf:e7:05:a8:dd:
0e:1e:84:8e:e9:7f:da:94:e0:81:80:26:2e:cb:95:2e:35:ce:
16:10:7e:c9:3c:3e:31:db:0c:07:b2:3c:b0:34:ca:45:92:3b:
96:57:7d:5d:ec:35:79:e1:b0:53:8e:e8:8e:bd:bd:1d:36:15:
d4:33:07:d5:f0:3f:88:64:64:83:e5:e9:45:01:2c:e1:ab:22:
08:cc:5b:4d:31:6d:80:11:10:4e:98:31:34:65:35:d0:5c:a2:
87:6c:1f:d7:d7:1d:8f:b3:b7:76:0f:91:a7:f3:70:b7:ce:e1:
70:b5:78:c3:98:a0:bd:9b:5e:ac:63:f7:30:4f:3d:ac:ac:59:
70:a1:95:8a:48:ff:f4:9d:24:a1:34:0b:85:87:34:40:c5:c9:
21:2e:7c:cc:6c:49:1b:0d:77:66:22:cb:ba:e5:99:f0:61:3e:
24:2c:fe:8f:4c:9b:b1:e3:b2:57:e0:a7:c1:47:88:e8:74:18:
c6:54:67:2a:ea:86:14:a0:b9:ff:1a:dd:05:60:d3:9c:6a:4b:
38:e8:ec:63:4a:bf:1a:21:49:92:f9:c2:4c:9d:80:c1:b9:bc:
c8:79:59:68:99:f7:bc:a3:0c:da:22:92:5c:6e:ec:c2:43:86:
6b:34:da:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:51 2024 by rpki-client on console-fra.rpki-client.org