Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/ieOcQyxXuePv09iIm-Fta4YhUSw.roa
File: ieOcQyxXuePv09iIm-Fta4YhUSw.roa (raw, json)
Hash identifier: EW6E9CERinMx8jZab0kgoXX7ccYcq0Rw4+zmkUKUWcc=
Subject key identifier: 89:E3:9C:43:2C:57:B9:E3:EF:D3:D8:88:9B:E1:6D:6B:86:21:51:2C
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 018570CBD06F2B3332398FB552C1EEE894CB
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/ieOcQyxXuePv09iIm-Fta4YhUSw.roa
Signing time: Mon 02 Jan 2023 04:44:43 +0000
ROA not before: Mon 02 Jan 2023 04:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2865
IP address blocks: 193.44.172.0/22 maxlen: 24
193.44.76.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:d0:6f:2b:33:32:39:8f:b5:52:c1:ee:e8:94:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jan 2 04:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89e39c432c57b9e3efd3d8889be16d6b8621512c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:03:5c:31:b9:18:47:b9:06:57:d8:3e:6e:f7:
ef:bc:9e:18:e7:73:43:6f:97:31:eb:03:ca:44:d3:
3b:26:a5:94:ad:ec:13:9e:7c:85:54:4b:b6:3e:2f:
51:35:62:c4:84:40:c7:78:02:9d:df:b8:d7:bc:b3:
ca:75:60:d5:99:da:5f:80:ca:6f:d0:a5:5e:fa:28:
fc:71:e6:9d:61:df:b0:6b:01:37:e0:41:93:7e:02:
eb:7b:7a:91:f9:c6:54:b8:f3:d7:d4:bc:4f:4f:65:
08:28:05:1b:c8:19:69:94:c6:eb:94:45:ed:d6:e8:
c8:0d:0a:d5:be:4c:35:f4:da:d5:38:d8:07:e7:71:
1b:28:b7:55:12:bb:b1:39:91:12:2f:03:df:51:0e:
3b:ba:92:29:b1:eb:06:1e:61:46:fb:c4:1d:e8:09:
48:2a:1b:bb:8b:e5:38:05:a0:2d:e9:9c:8a:dd:54:
c9:84:59:dc:dd:f1:62:05:b2:b2:6d:b1:51:75:c3:
3a:59:70:60:d0:64:48:7c:21:1e:e9:3f:c3:16:01:
f0:9c:29:17:c5:08:d9:b7:6c:9a:95:d3:5d:24:2c:
25:21:67:4a:4c:ee:c9:c8:7f:03:61:e4:25:bb:89:
5e:a2:8c:24:05:0f:c7:cf:f0:28:43:eb:77:33:94:
35:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E3:9C:43:2C:57:B9:E3:EF:D3:D8:88:9B:E1:6D:6B:86:21:51:2C
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/ieOcQyxXuePv09iIm-Fta4YhUSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.44.76.0/22
193.44.172.0/22
Signature Algorithm: sha256WithRSAEncryption
48:50:8e:3f:4a:09:70:d7:89:14:c3:91:6a:f6:2f:f6:88:2b:
9f:84:60:d5:aa:db:52:31:31:e8:6f:63:2e:a2:5a:d2:5d:fc:
18:06:92:c1:7d:ad:4f:e1:2c:7d:b3:eb:43:4c:7e:7f:d6:da:
d3:6f:08:42:1c:4a:4e:98:f6:15:1d:f3:50:99:20:77:d2:1f:
d5:2b:53:da:83:c1:b9:e8:c7:a7:1d:0d:11:a2:4e:2e:9d:d8:
ec:43:cc:65:53:d2:23:01:df:57:d5:09:e6:be:20:0a:32:90:
69:3b:eb:f0:db:4d:4a:2b:fd:da:25:c8:b4:ca:ba:12:cb:ce:
d6:48:96:5e:fc:d9:73:b6:20:54:42:e9:49:57:d0:59:04:f2:
96:b4:27:e2:17:01:e8:34:71:c7:de:43:5e:79:c0:d7:8c:41:
0d:66:df:c6:2b:65:32:00:fe:74:b8:2e:ff:d6:e1:68:31:4c:
26:1e:63:61:48:f2:70:47:db:f5:62:65:60:a5:49:49:cd:eb:
c6:b9:bd:11:1b:c1:9d:d0:03:d3:0b:2f:04:f0:8c:a9:10:d8:
3e:a1:54:69:50:93:74:ad:c2:92:bd:99:d0:cd:74:8a:b0:a2:
ef:cc:ab:78:d5:39:68:9a:6f:a8:af:a0:aa:e1:d1:63:82:eb:
08:47:71:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:41 2024 by rpki-client on console-ams.rpki-client.org