Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/E4aXewvOLX2W4eEzhFn5a33OfEk.roa
File: E4aXewvOLX2W4eEzhFn5a33OfEk.roa (raw, json)
Hash identifier: e2kIRsU00HYWq/WrI1YmWsSlIZ/fFnIyAC33MB+iK8I=
Subject key identifier: 13:86:97:7B:0B:CE:2D:7D:96:E1:E1:33:84:59:F9:6B:7D:CE:7C:49
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 01856F5DDC6B7C471D7E471E186321C56E19
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/E4aXewvOLX2W4eEzhFn5a33OfEk.roa
Signing time: Sun 01 Jan 2023 22:05:00 +0000
ROA not before: Sun 01 Jan 2023 22:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41318
IP address blocks: 195.168.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:dc:6b:7c:47:1d:7e:47:1e:18:63:21:c5:6e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 22:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1386977b0bce2d7d96e1e1338459f96b7dce7c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4e:80:53:f1:eb:6c:14:0d:b9:09:c1:d1:25:
23:83:2a:44:03:af:ed:97:9a:8e:8f:14:9d:0c:a4:
05:65:88:56:e1:be:95:93:f5:c1:eb:01:75:11:a5:
55:f5:28:01:9b:ff:9b:b4:60:8f:bd:ed:38:8c:26:
09:41:f1:25:1a:64:8c:44:97:22:6d:2f:3e:8f:4d:
a0:41:5a:7f:23:09:51:3d:a7:69:3d:6d:6c:67:f0:
f4:7f:46:a5:dd:ea:90:ae:18:4f:b6:b9:77:9b:86:
02:49:87:44:44:0a:7b:52:74:26:22:cf:31:80:ce:
e3:fc:0f:04:e4:35:6d:a4:3c:bb:c5:42:30:3f:ea:
d6:84:2e:e3:0e:91:b1:e9:1e:26:cd:fa:cc:84:37:
f7:b0:a6:ab:2d:96:5c:b8:bf:dd:90:a3:04:4f:7b:
05:79:a3:49:1a:e8:86:54:7c:5a:14:bc:f3:2a:c1:
eb:35:d9:01:f5:3a:1a:b5:18:22:90:5d:0b:8d:47:
1d:b7:9b:6a:5c:28:64:d3:2f:41:29:50:93:fd:52:
19:e8:e3:35:0f:5c:0b:f8:c5:a5:3a:f2:df:76:d4:
31:3b:64:b2:a8:73:bf:15:63:eb:3f:22:97:2c:c3:
52:5d:9b:92:ad:27:c0:19:f9:18:37:39:8e:e7:12:
53:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:86:97:7B:0B:CE:2D:7D:96:E1:E1:33:84:59:F9:6B:7D:CE:7C:49
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/E4aXewvOLX2W4eEzhFn5a33OfEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.168.208.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f8:c9:d0:79:b2:5c:1d:3f:f2:38:fc:c2:03:2d:40:db:bf:
b6:78:a6:be:e1:11:21:c2:28:d0:fe:8e:60:05:0f:7e:be:7c:
7b:d4:ef:87:c6:47:7e:a1:e5:01:23:88:bb:62:6c:48:ae:51:
a8:b5:f7:3e:24:3c:d3:5e:82:c6:63:6e:11:50:0c:a1:f6:ca:
84:c9:5f:50:0e:45:ec:d4:ea:0f:39:a6:9f:c1:07:57:c4:1e:
73:73:f9:6e:ae:33:79:d2:df:29:5a:88:b1:bd:e6:e4:1e:bd:
2c:93:19:8f:71:01:7c:32:29:72:3d:a2:75:7e:23:28:08:39:
86:41:58:31:cb:82:c8:d6:93:1c:11:00:ce:4c:6c:b8:41:26:
ca:73:44:b7:f3:7d:9d:77:f0:5d:fb:59:3d:d8:ba:d0:3a:22:
ba:32:5a:67:66:87:2e:6b:65:9a:81:23:84:1a:b0:1b:ca:cb:
4f:20:f2:79:ee:01:45:03:8c:79:15:df:9a:b0:75:32:96:96:
33:48:9d:b6:d2:25:be:c2:2b:4e:ae:66:53:0b:3c:f4:1c:fb:
8c:a5:6f:2c:bc:a1:ce:f0:98:9a:3e:09:76:ab:e0:34:95:e2:
0f:62:9c:90:63:cf:d0:e3:7b:92:c2:58:5f:dd:3f:86:f3:24:
a6:d8:0d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:44 2024 by rpki-client on console-fra.rpki-client.org