Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/t7OzO2gFj51zDEO33--Jn49PzwY.roa
File: t7OzO2gFj51zDEO33--Jn49PzwY.roa (raw, json)
Hash identifier: SMzNbb4NkCezpzIaci9eKTSbkvqm0SsRN4FYhOVPqUk=
Subject key identifier: B7:B3:B3:3B:68:05:8F:9D:73:0C:43:B7:DF:EF:89:9F:8F:4F:CF:06
Certificate issuer: /CN=e15c506035fa8dd6091b43a4e889767fcdcc48f1
Certificate serial: 01856F1D9F1338FCA091BAFB795C0143553C
Authority key identifier: E1:5C:50:60:35:FA:8D:D6:09:1B:43:A4:E8:89:76:7F:CD:CC:48:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VxQYDX6jdYJG0Ok6Il2f83MSPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/t7OzO2gFj51zDEO33--Jn49PzwY.roa
Signing time: Sun 01 Jan 2023 20:54:50 +0000
ROA not before: Sun 01 Jan 2023 20:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202709
IP address blocks: 193.25.196.0/24 maxlen: 24
193.25.194.0/24 maxlen: 24
193.24.36.0/24 maxlen: 24
193.25.223.0/24 maxlen: 24
2a0f:76c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 30 May 2023 07:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:9f:13:38:fc:a0:91:ba:fb:79:5c:01:43:55:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15c506035fa8dd6091b43a4e889767fcdcc48f1
Validity
Not Before: Jan 1 20:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7b3b33b68058f9d730c43b7dfef899f8f4fcf06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fb:38:51:25:28:de:83:dd:78:ab:e9:22:ac:
6f:d5:6f:6c:ed:09:d8:f8:01:0a:51:05:8d:e0:e9:
4a:b3:d1:97:77:67:6f:31:b2:ec:a5:f6:35:c5:11:
96:88:79:dd:cf:a8:87:06:e8:5d:5c:75:d6:73:05:
cb:13:0b:ad:7f:4c:97:db:18:d3:ec:36:eb:14:25:
91:6d:ee:e4:0f:74:e8:40:7e:c3:c7:f5:e3:f2:d2:
04:23:5a:62:bc:e7:e8:76:4b:38:2e:d2:55:22:6c:
65:f6:8f:cd:e0:a5:93:f5:f6:45:a8:e5:24:be:12:
2a:17:cf:9f:58:84:b2:af:f3:e9:c8:0a:3b:0e:0d:
3e:b9:46:75:38:28:de:f3:fb:74:db:3c:9e:67:31:
c2:f3:1c:f4:d9:5e:d4:1a:db:d5:62:12:2c:8a:87:
e6:de:31:52:a7:02:79:45:d7:76:97:76:26:d3:44:
fc:72:05:ad:8b:c9:66:37:22:b7:fb:ca:36:e3:2a:
76:93:bb:02:2f:6b:a5:0c:d9:b5:c0:83:76:db:0f:
d4:a7:4c:83:06:4d:fb:e7:10:25:e2:89:15:62:81:
d9:f6:5f:c8:f0:b0:21:ba:c3:e5:8a:30:96:22:e4:
52:6e:f3:73:ec:1f:99:20:3f:6b:2e:08:31:2f:1b:
58:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B3:B3:3B:68:05:8F:9D:73:0C:43:B7:DF:EF:89:9F:8F:4F:CF:06
X509v3 Authority Key Identifier:
keyid:E1:5C:50:60:35:FA:8D:D6:09:1B:43:A4:E8:89:76:7F:CD:CC:48:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VxQYDX6jdYJG0Ok6Il2f83MSPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/t7OzO2gFj51zDEO33--Jn49PzwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/4VxQYDX6jdYJG0Ok6Il2f83MSPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.36.0/24
193.25.194.0/24
193.25.196.0/24
193.25.223.0/24
IPv6:
2a0f:76c0::/29
Signature Algorithm: sha256WithRSAEncryption
94:9e:3f:86:e5:3a:0e:e0:9a:98:75:73:54:40:39:65:dd:31:
ff:2b:9f:09:a7:5c:2f:8a:bb:a2:69:5b:09:78:eb:1e:06:cb:
5d:76:3b:f2:29:c0:ab:9b:b7:b3:83:09:14:a1:ce:fe:3c:a2:
20:ad:23:af:dc:4a:d8:e7:74:60:a4:d1:ab:93:67:85:51:cd:
6c:0d:ee:34:07:65:7c:c7:24:b4:d6:ce:e9:70:c9:ea:78:93:
32:16:a8:fb:cc:f7:75:3d:a8:49:ae:de:59:c5:53:0c:59:d7:
96:49:ba:83:1c:e9:a1:07:80:0b:d4:77:cf:a1:e1:fa:d2:8a:
11:46:60:50:65:0a:37:62:51:ed:32:65:7d:04:0e:25:28:89:
e1:81:72:d5:52:15:7f:c4:79:d6:0b:d9:5a:14:5f:86:a4:cc:
bc:8f:52:19:d9:ab:b9:3c:ee:f5:cb:03:28:a9:47:16:81:98:
4b:ce:6f:3e:0e:25:2c:12:6c:e3:44:43:db:94:40:6c:34:b2:
9e:84:c6:e2:7e:5f:95:a3:09:40:00:c5:e8:97:23:5e:2c:21:
9c:c7:a9:01:bc:09:a4:7a:ec:fc:8d:73:50:f6:73:50:93:6f:
cc:f3:c0:c7:bf:f1:08:e7:70:94:1b:44:c9:0c:1c:e4:c2:b8:
ea:73:cd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:18 2024 by rpki-client on console-ams.rpki-client.org