Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/M-XwFyb1j33MpWvM4wKuYrOGwUk.roa
File: M-XwFyb1j33MpWvM4wKuYrOGwUk.roa (raw, json)
Hash identifier: fpSmZDaGJZN2eNlGTb2QPAq56Q5i7RxyIlAl5gnlwXw=
Subject key identifier: 33:E5:F0:17:26:F5:8F:7D:CC:A5:6B:CC:E3:02:AE:62:B3:86:C1:49
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 01856D93EC5A0D6766BD331624CDDC0B99DF
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/M-XwFyb1j33MpWvM4wKuYrOGwUk.roa
Signing time: Sun 01 Jan 2023 13:44:48 +0000
ROA not before: Sun 01 Jan 2023 13:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48156
IP address blocks: 193.211.44.0/24 maxlen: 24
194.137.237.0/24 maxlen: 24
195.165.77.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:ec:5a:0d:67:66:bd:33:16:24:cd:dc:0b:99:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Jan 1 13:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33e5f01726f58f7dcca56bcce302ae62b386c149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:de:43:fe:95:58:50:fc:bc:8e:18:f5:45:7d:
9a:66:cf:f4:e0:9b:b0:64:07:ad:eb:08:bd:ab:65:
dc:b8:73:7a:dc:10:fe:34:b8:69:b8:20:32:4c:64:
a6:f5:20:ae:cc:4a:8d:00:22:50:eb:b6:ca:55:e4:
23:da:e1:59:f7:d9:3b:ec:a3:ee:e2:0c:47:d2:17:
5d:ea:e9:a6:d4:b8:4e:22:98:ec:4a:fb:44:c9:dc:
27:a4:a4:53:25:70:4c:55:da:16:fe:94:a3:36:fb:
fe:74:f4:25:74:43:fc:ab:de:95:b7:67:0e:9a:40:
fa:bc:e7:a3:1a:0b:f8:0b:06:06:6e:8a:76:b2:b5:
e0:03:b7:fc:8f:10:1a:aa:ef:0f:af:39:b1:eb:a9:
36:cd:5e:ad:77:d2:31:29:4a:3e:cc:23:8f:6b:c6:
ed:18:26:e0:a8:c6:a9:76:9f:58:b1:0b:50:cc:8e:
9c:b1:49:a5:62:31:ed:00:31:c8:79:95:65:f7:bb:
b3:03:29:8c:a4:2d:44:93:5e:23:74:2d:41:da:96:
c4:4f:a4:a7:3a:01:2d:87:42:c6:dc:b6:a6:2f:16:
7e:de:18:27:9b:d3:52:87:16:84:55:95:dd:47:d4:
8b:fd:8a:ad:a6:c7:71:ca:b9:2e:06:59:2e:40:6e:
1d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E5:F0:17:26:F5:8F:7D:CC:A5:6B:CC:E3:02:AE:62:B3:86:C1:49
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/M-XwFyb1j33MpWvM4wKuYrOGwUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.211.44.0/24
194.137.237.0/24
195.165.77.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:51:c0:72:4a:a2:bd:81:63:cf:66:a0:a6:e8:c0:3f:87:d5:
af:1a:b3:3f:99:33:65:ea:33:a0:07:a5:cb:64:91:92:21:73:
7a:67:0a:9d:f5:e1:be:a1:a5:6b:bd:8b:3c:1e:36:3a:08:8c:
9e:46:4e:90:8c:20:61:7c:d5:b6:e4:77:7a:fa:99:fa:d8:8a:
06:cd:01:5b:85:a7:78:62:5b:af:d0:8f:06:4f:7e:fe:f5:f0:
bc:08:9b:e8:3e:c8:d0:40:b1:2f:01:73:37:14:1a:8f:df:c5:
64:b8:d7:ba:fd:68:54:8c:78:75:5b:46:eb:21:cb:b1:76:89:
82:3d:bb:58:7d:9f:b0:c4:e3:1c:e4:60:4f:a3:42:34:9d:b4:
f9:ce:73:3a:24:97:c0:fb:66:8a:a5:76:94:26:cf:c6:f5:51:
c6:b6:f4:cc:c2:7b:f4:f2:ff:0b:6b:fd:d1:13:a9:b0:48:87:
08:3d:8b:a9:41:93:dd:ef:1a:ed:3b:07:6f:d7:34:06:37:ad:
0e:5d:4f:52:fb:26:3c:29:4e:04:10:b4:08:55:3b:40:af:27:
0f:c5:1e:41:37:df:31:d0:80:1d:75:b2:01:d5:80:ca:ac:21:
a3:54:d3:9a:0a:07:6c:3b:fa:8d:19:3a:d4:9a:96:36:83:e4:
f4:2d:60:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:12 2023 by rpki-client on console-ams.rpki-client.org