Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/EGuDjNiINQqR_yenJR5ebR8XJGM.roa
File: EGuDjNiINQqR_yenJR5ebR8XJGM.roa (raw, json)
Hash identifier: dNcdjD6HYaNcVfpcVMdth0NjkXoQGm8sItjBsjBjpVk=
Subject key identifier: 10:6B:83:8C:D8:88:35:0A:91:FF:27:A7:25:1E:5E:6D:1F:17:24:63
Certificate issuer: /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Certificate serial: 01856F42B2D5DABA206D880C928DFD5B8E89
Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/EGuDjNiINQqR_yenJR5ebR8XJGM.roa
Signing time: Sun 01 Jan 2023 21:35:20 +0000
ROA not before: Sun 01 Jan 2023 21:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32787
IP address blocks: 141.93.0.0/16 maxlen: 24
141.93.16.0/24 maxlen: 24
141.93.17.0/24 maxlen: 24
141.93.12.0/24 maxlen: 24
141.93.18.0/24 maxlen: 24
141.93.19.0/24 maxlen: 24
141.93.32.0/24 maxlen: 24
141.93.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:b2:d5:da:ba:20:6d:88:0c:92:8d:fd:5b:8e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Validity
Not Before: Jan 1 21:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=106b838cd888350a91ff27a7251e5e6d1f172463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:06:78:51:c5:c7:86:0a:28:5d:a6:80:c1:
94:ed:cc:65:43:6a:5e:fe:4c:73:ab:1e:94:df:b0:
f5:27:04:37:98:ff:df:12:b3:7f:1c:8b:4a:9c:f1:
a4:96:5a:d6:28:25:ac:e9:6e:b4:c2:45:4d:77:07:
bf:36:32:f7:41:45:30:f9:6d:a4:c1:b9:8f:7e:41:
11:da:50:b4:e7:bd:44:33:16:d7:c9:04:73:4a:8f:
6f:30:74:a6:63:e5:d4:9f:87:7e:0c:de:f7:c2:58:
a4:6a:70:68:03:97:e4:d8:a1:43:ab:e8:46:59:9a:
80:1f:a3:ce:d3:10:f3:cc:da:5a:80:8a:4d:55:90:
d9:54:7d:16:36:c2:fd:15:d7:f3:93:5e:61:ab:a3:
85:e5:fb:1c:f9:9e:7d:39:f5:c9:af:50:df:2a:2a:
81:f5:31:6f:8f:47:6e:0d:69:f8:ca:8c:90:7b:55:
dd:43:0a:72:af:11:30:dc:17:55:92:9f:34:cb:55:
7e:20:6e:b4:a4:03:ef:1e:92:b8:63:f6:f6:38:a3:
f0:6c:1f:68:47:c3:ca:f0:34:13:2e:41:df:62:e2:
e3:9e:0c:b5:94:86:89:39:a5:70:01:15:da:7d:b6:
13:e2:cf:37:93:24:ca:a7:18:c3:12:5b:0a:ac:da:
4e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6B:83:8C:D8:88:35:0A:91:FF:27:A7:25:1E:5E:6D:1F:17:24:63
X509v3 Authority Key Identifier:
keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/EGuDjNiINQqR_yenJR5ebR8XJGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.93.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:99:9c:3d:5f:d2:71:6f:9d:0f:34:b2:27:0e:c3:af:06:20:
49:ac:55:ce:a8:7a:14:a3:3d:ac:b8:c5:03:c7:b3:89:b6:78:
7c:b7:05:7d:5e:03:4e:d6:d3:c9:36:bb:41:10:01:12:0f:e7:
28:65:71:2b:de:2f:5a:5d:cc:89:51:a0:da:71:d7:7d:92:b9:
dc:36:14:80:43:64:0d:a9:ce:6f:a0:3c:be:75:22:cc:57:11:
14:78:08:d9:5c:d3:79:34:9e:71:fd:e9:20:85:cf:20:d2:fd:
94:c0:2f:07:ee:1f:8c:e3:f3:95:93:be:67:fe:34:3c:54:56:
e5:05:56:70:72:26:d2:16:88:5b:d9:74:1e:78:a3:d7:f8:96:
be:ab:2b:0a:c1:b8:a9:c2:ff:cc:36:91:5a:7c:8e:3e:43:94:
ab:4d:4a:19:aa:4a:3b:d2:71:7e:c2:19:e0:67:ea:96:24:2e:
69:7a:3d:dd:e6:5b:08:91:cd:00:a3:4d:6e:74:8e:3f:e5:26:
ac:14:44:60:23:37:cc:e8:58:a5:85:88:a2:f3:0d:ea:7f:79:
9c:a4:c7:7b:5a:2e:04:fb:24:d4:3f:c3:b2:5d:9f:3a:79:31:
5f:01:6c:cc:95:56:87:79:8e:b3:4a:79:ff:dc:76:69:01:03:
63:0b:00:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:43 2023 by rpki-client on console-fra.rpki-client.org