Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/COBVq3M2LmHkNkZJrjuscYgHtgE.roa
File: COBVq3M2LmHkNkZJrjuscYgHtgE.roa (raw, json)
Hash identifier: yW8YbZ6ISnAJPpg86kCxt9NxauWd2KDAV87tt2+trXc=
Subject key identifier: 08:E0:55:AB:73:36:2E:61:E4:36:46:49:AE:3B:AC:71:88:07:B6:01
Certificate issuer: /CN=e5484ab7509bcbbda351e200091742d43366b347
Certificate serial: 01856D9420533A13A76E4067E1A4FC4A7CE2
Authority key identifier: E5:48:4A:B7:50:9B:CB:BD:A3:51:E2:00:09:17:42:D4:33:66:B3:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/COBVq3M2LmHkNkZJrjuscYgHtgE.roa
Signing time: Sun 01 Jan 2023 13:45:02 +0000
ROA not before: Sun 01 Jan 2023 13:45:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42394
IP address blocks: 193.33.85.0/24 maxlen: 24
195.62.92.0/23 maxlen: 23
195.62.92.0/24 maxlen: 24
193.33.84.0/24 maxlen: 24
193.33.84.0/23 maxlen: 23
193.33.85.240/28 maxlen: 28
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:94:20:53:3a:13:a7:6e:40:67:e1:a4:fc:4a:7c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5484ab7509bcbbda351e200091742d43366b347
Validity
Not Before: Jan 1 13:45:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08e055ab73362e61e4364649ae3bac718807b601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2a:c0:b5:57:cb:30:6d:57:0a:28:9f:d7:6e:
54:0e:d6:fc:d7:65:f6:5b:fd:86:6b:28:8b:50:1e:
bb:33:7d:a3:bb:ed:ea:12:74:ba:fb:cc:dc:a9:2a:
94:fd:56:1b:6b:13:4e:4b:10:79:1c:5b:10:bf:04:
2b:11:2e:43:91:6c:1b:b5:40:cc:05:54:40:f2:80:
cb:30:9c:4c:07:c6:b0:ec:0a:02:cc:f5:53:4c:8e:
a8:1e:12:bb:2f:e5:66:3b:65:b9:86:82:c7:f4:3c:
c8:72:30:aa:94:d3:60:8e:20:f8:e3:7f:f7:50:fe:
b7:0a:b3:65:17:25:f9:7b:ba:7e:5a:c1:a8:2b:df:
e2:e5:d7:4d:b2:3a:b3:65:87:70:7f:e4:0f:ac:ac:
85:7b:c5:d4:77:b3:a8:56:8f:fc:c7:1f:a2:23:c3:
d1:b0:46:8c:07:33:9f:04:a7:86:0e:85:e2:19:26:
f0:13:a1:84:9a:c4:ea:81:60:cc:89:0d:24:f9:7b:
45:47:1a:a7:57:a9:66:8b:c3:8c:65:c2:40:b0:c9:
08:a2:a6:5c:39:3b:a6:1c:cd:df:b0:b6:82:4c:91:
0f:cf:9e:0b:19:bb:d2:49:70:12:1c:3b:11:89:c7:
e4:30:e4:9c:b2:43:9a:c7:79:a4:5f:28:61:4f:07:
fb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E0:55:AB:73:36:2E:61:E4:36:46:49:AE:3B:AC:71:88:07:B6:01
X509v3 Authority Key Identifier:
keyid:E5:48:4A:B7:50:9B:CB:BD:A3:51:E2:00:09:17:42:D4:33:66:B3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/COBVq3M2LmHkNkZJrjuscYgHtgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.84.0/23
195.62.92.0/23
Signature Algorithm: sha256WithRSAEncryption
d2:78:95:c5:28:21:d9:fb:f0:7b:61:50:7a:b4:9b:9a:5d:93:
82:eb:af:53:8c:a2:db:da:42:8a:5c:0f:46:69:f7:57:70:20:
6f:81:76:b5:55:f1:f2:6b:8e:14:0d:ea:d0:96:53:9d:af:69:
a5:ac:eb:00:e7:2c:16:28:25:59:7a:88:75:7d:e0:12:f6:e1:
e0:93:6c:df:ac:18:47:ce:78:88:b5:dc:53:90:8c:c8:50:ae:
7b:c0:44:92:80:82:f7:f9:71:cf:d0:9c:a5:73:4d:c0:44:66:
41:96:6f:2d:c7:89:fa:cd:66:64:75:17:7a:d8:d6:ad:12:b6:
12:bc:b8:ae:2c:10:62:4e:f1:ea:b6:bd:36:bd:32:51:be:7a:
fc:b6:76:d4:6a:43:f7:a0:04:49:a1:0a:32:aa:49:15:08:5c:
53:99:00:db:c9:8c:43:fd:6c:6d:e4:f0:1e:25:42:8b:eb:6a:
f0:e3:08:11:7b:d8:01:7f:1e:69:29:58:71:ec:3e:66:96:6e:
a1:3d:23:e4:c1:c8:f9:03:c0:d9:98:b9:57:8c:e1:22:e3:fd:
44:e0:d4:85:ec:52:95:8b:93:38:b9:ef:ac:ba:ac:23:0f:35:
18:e2:c4:51:2c:87:e2:29:f8:36:2a:44:41:f8:f3:47:4b:fd:
8a:4b:0f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 18:21:45 2024 by rpki-client on console-ams.rpki-client.org