Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/eHgg3XUPUnyLOa4NEPgMqgT-SWw.roa
File: eHgg3XUPUnyLOa4NEPgMqgT-SWw.roa (raw, json)
Hash identifier: wGTf7NpxSBOwnlQSZ9xn6IwMb9/WzyN1Pi/FZ9gbE6U=
Subject key identifier: 78:78:20:DD:75:0F:52:7C:8B:39:AE:0D:10:F8:0C:AA:04:FE:49:6C
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 01860745A8353F1E8DF2C28647A5B3C51628
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/eHgg3XUPUnyLOa4NEPgMqgT-SWw.roa
Signing time: Tue 31 Jan 2023 10:00:50 +0000
ROA not before: Tue 31 Jan 2023 10:00:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3316
IP address blocks: 194.190.138.0/24 maxlen: 24
194.190.141.0/24 maxlen: 24
194.190.142.0/24 maxlen: 24
193.232.85.0/24 maxlen: 24
194.85.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:45:a8:35:3f:1e:8d:f2:c2:86:47:a5:b3:c5:16:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jan 31 10:00:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=787820dd750f527c8b39ae0d10f80caa04fe496c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:4a:a7:03:23:23:80:ef:2b:6b:2f:1f:e4:
1a:07:e3:49:97:8f:cb:ae:42:f0:8f:69:08:9c:35:
20:05:ea:67:16:2f:08:bd:19:8b:08:fa:82:23:d4:
44:8c:80:2e:73:1c:43:85:e0:17:6f:3c:3f:c2:de:
5a:a9:d2:7c:b1:55:62:a6:c7:47:3b:d2:97:56:32:
3f:f0:b1:44:7e:87:55:ca:50:d6:fe:0c:52:2e:97:
84:89:1c:9e:58:be:e9:da:d4:ca:ef:8c:13:c9:71:
b1:4f:2d:4a:67:db:6d:61:6b:5f:d5:44:d0:28:71:
90:c1:2b:f7:20:ab:32:0b:c3:81:39:c4:db:08:12:
84:eb:84:5d:42:b4:a0:77:80:44:77:6a:36:59:0a:
9c:fb:a2:69:95:da:37:72:81:c9:87:98:0f:4e:85:
7d:8d:15:69:9f:70:72:f3:b8:b2:e6:ea:9b:62:13:
09:17:b2:94:2b:aa:df:eb:ef:9f:d1:a5:e5:7c:e6:
bb:90:00:1e:66:87:18:a0:f0:c6:8c:ab:a7:db:45:
27:5d:c2:3e:44:20:da:35:f5:e6:5c:2c:ef:ae:5b:
88:1a:ba:0c:08:9f:71:f5:8d:b1:3b:a2:05:5d:cb:
53:cb:a0:fe:41:38:49:78:b8:e8:c9:c2:5b:c5:67:
80:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:78:20:DD:75:0F:52:7C:8B:39:AE:0D:10:F8:0C:AA:04:FE:49:6C
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/eHgg3XUPUnyLOa4NEPgMqgT-SWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.85.0/24
194.85.105.0/24
194.190.138.0/24
194.190.141.0-194.190.142.255
Signature Algorithm: sha256WithRSAEncryption
be:f4:8a:46:39:50:11:a3:31:34:6b:2a:ae:55:2d:44:1f:8a:
ad:d5:b2:e9:b6:c3:bf:66:4d:52:c2:5d:81:db:03:c6:c4:c2:
c5:cf:f1:a7:86:fb:cf:7f:e9:2e:c7:0c:a5:55:d8:2a:6d:5e:
b2:3b:93:47:6a:e3:ba:20:b9:33:61:27:59:3c:3a:59:98:99:
03:3c:1f:99:2e:bb:b1:89:4d:bc:a1:f9:80:6b:20:74:fb:d0:
24:6e:c9:3b:fc:14:b0:96:fe:71:9b:1c:01:d4:21:63:a7:79:
d3:f7:e6:26:17:bf:7b:0d:9e:32:3d:13:cc:dd:5c:53:97:a3:
7d:b8:cf:51:33:6f:56:e4:00:f2:26:25:a5:87:9a:47:f4:7a:
31:8b:20:ea:e1:65:88:59:eb:97:63:83:e4:40:f5:60:84:72:
15:2b:76:b4:a4:76:b5:1f:4c:c5:5b:22:28:db:eb:65:9d:91:
c4:34:37:d9:3a:b9:2f:9d:17:a1:ba:30:83:99:5d:ed:57:8c:
68:07:6f:ff:9b:1b:fb:4f:b9:6b:5e:75:b6:94:ea:3d:a9:34:
86:ae:02:18:6a:65:6c:f3:01:83:94:38:23:b9:ec:65:64:a3:
9c:75:22:90:c7:54:5f:9d:27:45:36:b9:1c:78:74:29:03:13:
eb:a5:07:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:37 2023 by rpki-client on console-ams.rpki-client.org