Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/5izG2EBwePIzEQPEYfqV0-hActU.roa
File: 5izG2EBwePIzEQPEYfqV0-hActU.roa (raw, json)
Hash identifier: lWM7pVywQrX6lVdZhEtVsejixH+t3w3EChTexElMSMs=
Subject key identifier: E6:2C:C6:D8:40:70:78:F2:33:11:03:C4:61:FA:95:D3:E8:40:72:D5
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 0188BF444CFC959D50B0F500600B0A21551E
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/5izG2EBwePIzEQPEYfqV0-hActU.roa
Signing time: Thu 15 Jun 2023 13:35:04 +0000
ROA not before: Thu 15 Jun 2023 13:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8985
IP address blocks: 193.232.64.0/24 maxlen: 24
193.232.76.0/24 maxlen: 24
194.85.16.0/24 maxlen: 24
193.232.226.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 15 Jun 2023 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:44:4c:fc:95:9d:50:b0:f5:00:60:0b:0a:21:55:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jun 15 13:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e62cc6d8407078f2331103c461fa95d3e84072d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:56:d8:97:51:0a:8f:ef:77:3b:38:8e:7f:86:
54:e8:80:4b:46:c1:0a:f0:b8:85:58:4a:0b:77:87:
01:e7:80:1c:db:4e:db:87:51:04:51:ed:7c:9e:cb:
d0:41:06:28:49:93:b3:e3:06:4c:1d:7c:ca:ff:8e:
23:f9:3f:13:38:fe:bf:8a:32:db:76:c5:46:01:5e:
af:2c:31:53:cb:d5:93:5f:63:2a:1c:91:3e:b4:dd:
94:aa:79:cb:b6:8b:76:33:67:17:44:ef:aa:4a:23:
49:66:44:e8:8d:dc:b8:54:2d:0c:42:0f:5d:6b:f3:
7b:56:f2:09:49:4c:bf:83:e7:2e:1c:94:92:1d:3c:
ac:f9:80:e4:c0:d5:11:6f:dc:7d:da:95:ab:e1:f3:
e5:35:95:45:07:2f:65:1f:4f:7c:03:c2:96:6e:6d:
a8:09:c5:3a:c8:3b:0c:6f:be:aa:76:74:49:f9:0f:
82:48:38:1f:10:91:8a:2e:87:82:e2:c4:3f:98:70:
f8:53:cb:17:50:24:df:e1:11:55:3b:6f:c1:c8:f8:
1d:2e:8a:a9:45:76:75:fc:40:33:98:96:37:10:d0:
06:84:d5:09:1c:92:2f:3f:09:39:00:46:ad:bc:78:
fa:1e:f5:d0:d4:bb:50:c7:b9:8f:26:17:9f:6c:a6:
23:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2C:C6:D8:40:70:78:F2:33:11:03:C4:61:FA:95:D3:E8:40:72:D5
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/5izG2EBwePIzEQPEYfqV0-hActU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.64.0/24
193.232.76.0/24
193.232.226.0/23
194.85.16.0/24
Signature Algorithm: sha256WithRSAEncryption
36:42:b4:94:75:4f:19:79:f7:1b:b3:ad:6f:43:e6:95:4a:89:
e1:7f:a5:93:ea:ce:07:19:35:3c:6d:7a:05:5c:25:bf:81:03:
17:f3:1c:8d:a4:34:ad:89:85:97:84:ec:93:10:65:7f:12:9c:
16:9b:ac:1c:ea:d5:5b:fb:6e:6a:b2:38:71:ec:1d:b3:93:21:
8d:04:a0:1a:f5:be:06:20:bc:0e:86:b8:5a:b0:60:4d:6f:1a:
70:35:e0:d0:0d:16:94:4d:e4:f7:86:ca:f0:2d:98:e9:c1:10:
53:46:ab:99:3d:84:2d:16:33:8b:93:f7:84:92:9d:2c:e2:a8:
30:d5:6d:cc:24:40:6d:fc:d1:fa:11:10:c0:3d:58:80:60:1e:
65:1b:45:c7:40:1b:53:5e:d3:73:e3:c2:15:a2:23:20:09:2b:
10:85:ee:42:3e:f6:b7:fc:99:f0:aa:ab:2b:75:df:0c:f1:ba:
e1:07:d9:cd:5e:b2:59:9d:43:b5:7e:52:14:98:43:5a:ed:e0:
dc:86:ab:c0:62:05:39:d6:84:75:15:1a:5a:cb:f8:c9:c0:4f:
91:fd:67:19:87:ce:1b:a1:28:04:73:96:d4:db:60:98:f6:c7:
20:53:36:4f:2e:3f:4c:33:06:dd:91:f0:7b:89:2c:1d:75:ea:
74:3d:28:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:51 2024 by rpki-client on console-fra.rpki-client.org