Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/ERwLzCWFkh9FyRx2peBxcpiDzrw.roa
File: ERwLzCWFkh9FyRx2peBxcpiDzrw.roa (raw, json)
Hash identifier: Rcdb0/T1t/4NJO51j+Ui0aRi03xbfBP0iWgwoQCRGcg=
Subject key identifier: 11:1C:0B:CC:25:85:92:1F:45:C9:1C:76:A5:E0:71:72:98:83:CE:BC
Certificate issuer: /CN=0246e8a76d30c7c0495bc5ce8ee5110feab286e6
Certificate serial: 01856F5DC54304EC5A6D121BAF97C82423E6
Authority key identifier: 02:46:E8:A7:6D:30:C7:C0:49:5B:C5:CE:8E:E5:11:0F:EA:B2:86:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/ERwLzCWFkh9FyRx2peBxcpiDzrw.roa
Signing time: Sun 01 Jan 2023 22:04:54 +0000
ROA not before: Sun 01 Jan 2023 22:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49937
IP address blocks: 193.31.214.0/24 maxlen: 24
193.31.215.0/24 maxlen: 24
185.28.72.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:c5:43:04:ec:5a:6d:12:1b:af:97:c8:24:23:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0246e8a76d30c7c0495bc5ce8ee5110feab286e6
Validity
Not Before: Jan 1 22:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=111c0bcc2585921f45c91c76a5e071729883cebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:42:cb:b5:f6:90:dd:40:d4:77:ba:2a:ec:3e:
35:c0:31:78:ee:a8:c2:1a:37:c2:be:da:9d:11:b4:
63:c0:43:1d:1e:bf:de:9b:12:43:93:86:da:90:b9:
9c:37:0c:52:72:57:8a:e1:fb:a7:dd:58:b7:81:fc:
6e:20:d9:24:12:29:0c:00:4c:62:6e:64:1d:45:c5:
68:4f:3e:47:11:85:da:5e:61:99:6c:0d:45:d0:79:
5b:9f:d3:84:8a:25:d5:fa:da:c8:94:d5:24:cb:28:
e7:a5:9c:0c:45:05:97:af:54:90:08:e5:9d:4d:b2:
99:55:65:48:5f:9e:5f:46:54:4f:e6:36:7d:e6:47:
85:be:d1:e7:72:ea:f6:4c:05:5c:8c:be:52:e9:d4:
f3:24:86:84:9e:99:74:9b:a2:fb:0c:68:0d:08:6a:
19:57:7a:48:2b:d2:ec:3c:e4:d9:b9:eb:94:5a:d6:
5b:b4:ed:30:86:20:52:8b:11:f5:2d:87:05:45:d6:
55:c8:0f:11:73:df:4d:a9:64:01:f2:f6:33:1e:c0:
97:76:13:6b:57:4c:a3:15:98:5e:9f:67:5a:37:5a:
8e:55:b5:d2:c7:d4:72:a2:61:bc:ac:9a:7f:35:5d:
a8:27:89:14:33:4c:99:94:c9:71:ec:9b:11:1e:0f:
ae:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1C:0B:CC:25:85:92:1F:45:C9:1C:76:A5:E0:71:72:98:83:CE:BC
X509v3 Authority Key Identifier:
keyid:02:46:E8:A7:6D:30:C7:C0:49:5B:C5:CE:8E:E5:11:0F:EA:B2:86:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/ERwLzCWFkh9FyRx2peBxcpiDzrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.72.0/24
193.31.214.0/23
Signature Algorithm: sha256WithRSAEncryption
79:1f:a3:83:50:0e:56:ac:d1:ce:a5:3d:27:da:02:86:e7:43:
51:f8:ba:a1:cb:91:38:6b:07:e5:0b:15:9c:f5:d4:a6:e8:94:
2a:47:32:10:f6:7b:42:d6:c2:3c:34:20:16:57:23:df:97:3a:
6f:c3:f1:18:ba:42:c4:b3:ab:c5:0e:2b:46:56:62:00:69:14:
f3:5e:49:5a:20:7b:85:6f:15:11:fe:a3:6d:24:77:53:3f:00:
61:58:19:86:4a:01:7b:e5:db:79:5b:d0:cf:1c:ad:67:ae:c9:
11:8b:12:da:c4:07:dd:08:35:c1:e5:3c:2b:62:96:fd:e7:ac:
35:c0:d8:f8:3d:3e:4d:42:06:a0:53:b2:70:2a:0e:c8:1c:f4:
9c:99:0f:d6:05:a0:a6:a7:62:5f:4b:4a:71:2a:40:f4:bf:47:
7a:e7:38:9b:a7:84:64:09:49:3a:ef:da:a9:a0:0d:02:69:67:
4d:e1:64:72:b6:ee:02:71:3b:ac:90:8b:7a:52:b8:4e:1d:0f:
38:24:4d:c3:c0:35:8d:4d:55:24:8b:8b:f8:d4:5d:2e:16:9c:
4c:47:f3:14:43:8f:b8:85:6f:39:a8:73:8d:a2:8d:1b:a7:44:
38:7b:0b:90:47:28:8f:17:3a:fb:4b:68:6b:20:68:98:ab:4e:
2f:06:42:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:40 2024 by rpki-client on console-ams.rpki-client.org