Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/E-Zu7qRY0P5P-Eo6y2B9sjfrnCw.roa
File: E-Zu7qRY0P5P-Eo6y2B9sjfrnCw.roa (raw, json)
Hash identifier: i9YG1NOkgxJy3oltXiN1McKyCqaGoexmXGPyzrMXIFw=
Subject key identifier: 13:E6:6E:EE:A4:58:D0:FE:4F:F8:4A:3A:CB:60:7D:B2:37:EB:9C:2C
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 01856D13D7FB6E4B2629A235D1CF9A70D06F
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/E-Zu7qRY0P5P-Eo6y2B9sjfrnCw.roa
Signing time: Sun 01 Jan 2023 11:24:54 +0000
ROA not before: Sun 01 Jan 2023 11:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44375
IP address blocks: 193.178.200.0/22 maxlen: 22
93.126.0.0/18 maxlen: 18
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:d7:fb:6e:4b:26:29:a2:35:d1:cf:9a:70:d0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Jan 1 11:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13e66eeea458d0fe4ff84a3acb607db237eb9c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:59:27:74:d8:8c:b4:dd:b0:22:7d:49:4a:43:
0d:f4:da:61:2b:f6:c5:5e:a7:08:8a:97:ce:2d:1a:
47:17:f4:5c:74:df:40:70:9c:ee:15:86:f9:26:83:
66:87:f9:1c:d8:c6:e8:ba:db:bc:e2:81:48:f0:cb:
43:cc:cb:16:bd:cf:0b:9a:43:08:ae:77:65:9b:35:
58:01:f4:a3:e5:47:50:50:dd:a6:18:a6:aa:35:ad:
30:21:02:6c:56:22:73:d0:34:6c:18:2f:48:ba:c4:
47:44:64:2b:cd:5a:c4:41:7f:2f:9c:ff:90:5f:87:
93:b4:9d:34:77:a5:d4:e0:99:6d:91:7f:78:dd:df:
37:7e:bd:bb:f1:ee:14:89:0a:17:e3:ad:6d:d0:89:
0d:52:26:34:5b:54:bd:99:99:49:4b:c9:43:16:51:
ab:6a:4a:fa:86:2a:e6:d3:07:46:55:f0:09:76:a6:
a4:2c:70:68:95:a3:8d:10:c6:11:75:9b:3c:e9:03:
bd:c1:9c:60:8e:59:fc:57:96:7c:a0:37:ff:ea:cc:
af:1f:32:a8:85:f4:17:f4:85:11:bf:e6:11:17:e4:
64:0d:37:44:2c:a3:5d:17:b6:3e:c3:f9:89:0c:d3:
c4:f5:c4:8d:40:48:ab:45:11:e9:65:eb:f3:65:a9:
01:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E6:6E:EE:A4:58:D0:FE:4F:F8:4A:3A:CB:60:7D:B2:37:EB:9C:2C
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/E-Zu7qRY0P5P-Eo6y2B9sjfrnCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.0.0/18
193.178.200.0/22
Signature Algorithm: sha256WithRSAEncryption
af:84:2a:6d:dc:29:fc:d6:0e:26:8f:ee:5f:e6:33:b6:ff:57:
60:4d:d5:bd:73:e9:cd:18:85:55:08:db:4b:f0:62:f0:5c:f1:
ac:5c:c8:e8:2c:b3:ec:bc:25:23:d2:6c:b9:0f:3c:40:4c:d7:
b0:0d:4b:0b:89:a0:6a:f6:ac:8b:a3:ec:c6:60:5b:52:20:87:
00:ca:8d:21:6d:62:ca:b5:bd:f8:ba:66:69:cd:03:c4:91:ff:
00:11:5c:65:e3:ec:da:6c:8b:16:9f:e9:cc:e3:9e:c0:ef:4f:
33:af:e2:84:2a:33:2c:01:47:45:15:5d:0b:d1:a2:fe:7d:d6:
5c:d1:0d:c0:ef:d5:34:7e:96:17:0a:20:73:aa:97:4d:d6:e5:
08:7d:f2:9e:85:47:4b:d7:12:93:b2:b5:7b:32:48:3f:0c:5e:
02:a8:19:6d:78:c4:4c:1c:8f:d9:a8:9d:02:f9:36:f7:30:4b:
d5:f7:3c:31:07:8c:d9:f0:d3:a5:1d:d0:46:4c:6e:b1:f8:3d:
22:4a:d7:58:6a:60:2f:d2:78:f5:07:d7:4c:3f:20:00:d6:94:
cd:77:90:9a:cb:bc:f5:9c:a0:3f:1d:38:c9:94:4d:be:4d:b7:
1f:1f:54:2c:6e:a6:30:51:d2:69:97:27:36:65:8b:bb:67:68:
9c:93:18:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:00 2024 by rpki-client on console-ams.rpki-client.org