Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/rEfGYA-t90_e-raN-ycW-32j19w.roa
File: rEfGYA-t90_e-raN-ycW-32j19w.roa (raw, json)
Hash identifier: bboVQTWhsXt8vd/EhDBTeEEePt5EieN9Oybzz/JFuao=
Subject key identifier: AC:47:C6:60:0F:AD:F7:4F:DE:FA:B6:8D:FB:27:16:FB:7D:A3:D7:DC
Certificate issuer: /CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Certificate serial: 018A0385A44381E49859E9F0C78ECCF63706
Authority key identifier: 8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/rEfGYA-t90_e-raN-ycW-32j19w.roa
Signing time: Thu 17 Aug 2023 12:43:24 +0000
ROA not before: Thu 17 Aug 2023 12:43:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59877
IP address blocks: 185.61.176.0/22 maxlen: 24
193.39.0.0/22 maxlen: 24
31.223.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:03:85:a4:43:81:e4:98:59:e9:f0:c7:8e:cc:f6:37:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Validity
Not Before: Aug 17 12:43:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac47c6600fadf74fdefab68dfb2716fb7da3d7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1c:34:9a:9b:c8:a0:a1:ca:e0:6a:4d:19:a4:
35:45:38:9f:bc:a1:c9:b1:e4:a5:94:bf:10:e8:45:
16:5a:f0:48:9d:08:ac:4c:41:c6:95:23:6b:99:59:
d8:02:7c:20:44:06:1b:d7:81:6c:e5:c8:5e:56:1e:
83:da:db:aa:2c:0a:dc:20:b3:b8:9a:50:c7:1d:c3:
f1:34:a2:dc:cc:49:e8:fb:8a:2d:b2:65:16:d5:ab:
26:11:0f:4e:28:13:50:ca:7e:a9:3c:d8:c3:9d:8f:
d2:f1:0c:44:8e:e2:e8:33:5c:f3:b8:bf:19:f6:ab:
c1:14:37:ec:bb:bf:d8:a8:ce:77:5d:6b:ba:93:b5:
09:27:be:46:94:d9:d3:58:42:e8:7b:70:f1:ef:0c:
82:e3:b0:a9:da:b9:1a:4a:6d:67:23:f7:35:55:22:
50:1c:d8:1d:60:2a:55:4c:3f:ab:00:00:c5:70:6f:
6f:12:23:a1:88:9c:d7:c2:64:4f:4a:f1:f4:3b:64:
91:3a:54:20:63:e4:c0:0a:ea:b3:35:9e:3c:eb:19:
f0:5c:8d:ea:33:92:7a:15:2d:6c:2a:0f:11:ce:3e:
a1:1e:6b:89:32:a0:5a:3b:03:39:bb:c0:86:2b:c3:
ed:1f:2b:d8:36:f2:bf:4e:cc:4b:75:12:4d:34:e3:
1f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:47:C6:60:0F:AD:F7:4F:DE:FA:B6:8D:FB:27:16:FB:7D:A3:D7:DC
X509v3 Authority Key Identifier:
keyid:8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/rEfGYA-t90_e-raN-ycW-32j19w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.190.0/24
185.61.176.0/22
193.39.0.0/22
Signature Algorithm: sha256WithRSAEncryption
75:8b:f2:a5:65:5e:f1:c8:eb:31:9f:d9:8d:e8:42:3d:57:8d:
63:6d:29:1c:e0:cb:38:b2:89:48:66:fd:f1:61:56:cb:f0:51:
75:26:2a:b1:64:8e:a9:58:4a:91:a9:37:e7:f4:bc:2c:b5:a0:
c6:cf:26:4c:db:b9:4c:27:d5:e5:83:bc:c0:c7:bb:e2:14:bc:
b7:dc:73:c6:0e:70:a1:8b:51:4a:18:18:62:5d:2f:6f:8c:0c:
2a:46:e4:42:f0:f1:e5:95:2a:06:1e:eb:55:fa:5f:33:46:b3:
b2:93:dd:28:2d:3b:3c:4b:9d:09:21:9d:69:51:7a:49:75:f0:
d1:00:ca:ce:05:6a:e3:d4:f0:5c:09:5f:78:99:74:be:44:f2:
80:ce:01:26:c8:e0:d9:5e:82:b2:d5:86:5e:86:40:1b:c7:6f:
eb:37:ab:5c:fe:da:1a:4d:5d:00:bc:3e:5b:04:f2:ba:b8:3d:
cb:d3:9b:4e:d2:82:e2:38:df:6e:14:b1:0c:cf:e6:c9:45:7d:
34:ce:81:54:b0:83:45:1d:b6:e8:38:98:e9:80:e6:41:af:56:
cc:db:2f:a0:64:eb:e3:30:58:80:cb:ac:0d:59:9d:76:53:8b:
a0:15:e2:5a:ac:08:93:ac:7e:78:39:e2:6e:47:0f:29:d2:a0:
a2:00:d3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 17 15:11:06 2023 by rpki-client on console-fra.rpki-client.org