Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/eXqfmiN16di-Ehw0d9Pjvm3fV5g.roa
File: eXqfmiN16di-Ehw0d9Pjvm3fV5g.roa (raw, json)
Hash identifier: Mi4YRXupz6PjAfuxuvOH14210Fd6hbIqdTs3gdu/adU=
Subject key identifier: 79:7A:9F:9A:23:75:E9:D8:BE:12:1C:34:77:D3:E3:BE:6D:DF:57:98
Certificate issuer: /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial: 0189F8CC07421787AF9C512EC61F728CAA30
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/eXqfmiN16di-Ehw0d9Pjvm3fV5g.roa
Signing time: Tue 15 Aug 2023 10:44:28 +0000
ROA not before: Tue 15 Aug 2023 10:44:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200070
IP address blocks: 193.29.206.0/24 maxlen: 24
212.237.229.0/24 maxlen: 24
194.0.14.0/24 maxlen: 24
194.0.12.0/23 maxlen: 30
185.43.134.0/24 maxlen: 24
2001:678:10::/47 maxlen: 64
2001:148f:fffb::/48 maxlen: 48
2001:678:1::/48 maxlen: 48
2001:148f:fffd::/48 maxlen: 48
2001:678:f::/48 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f8:cc:07:42:17:87:af:9c:51:2e:c6:1f:72:8c:aa:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Validity
Not Before: Aug 15 10:44:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=797a9f9a2375e9d8be121c3477d3e3be6ddf5798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ed:7e:93:e2:8a:83:91:45:01:09:86:22:b3:
36:95:32:14:bd:57:5c:22:99:c8:4f:56:70:72:db:
5d:22:ad:27:f3:82:3c:c6:41:33:99:3e:71:57:0f:
d5:e8:74:da:2d:c2:85:a1:ba:9d:67:aa:f7:b8:a5:
99:ad:87:e3:93:a3:3d:31:a5:4a:49:82:8d:bd:26:
9d:bf:94:06:49:bb:cf:f6:38:90:71:fa:ab:30:b5:
92:4e:5e:c9:ee:ef:78:39:dd:6e:c8:23:e0:5f:7c:
6c:d4:77:be:fc:f1:d1:08:d6:e3:d6:78:c7:a8:80:
d2:5f:31:49:34:27:0a:f5:db:ac:9f:57:7b:55:48:
dd:65:8e:2c:05:03:a9:7b:56:0d:51:eb:03:72:50:
e8:6d:52:3c:ba:93:44:e5:28:05:fb:bb:2b:e1:9e:
0a:97:1c:93:8f:bf:9a:d5:da:9e:d9:a6:42:5b:65:
ed:54:84:6b:82:2e:a6:8f:f2:17:de:94:15:8d:f6:
59:f2:6f:ed:7a:6f:2f:08:7b:55:4b:d5:0d:f0:a2:
99:d5:69:a7:6a:0b:af:1c:1a:d1:cf:9e:76:cb:d4:
22:8e:ea:3a:2a:56:bf:1f:a3:48:da:65:ce:e6:f0:
ce:69:9b:ab:8e:b3:b5:03:a5:85:cb:f5:67:fd:1f:
ed:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7A:9F:9A:23:75:E9:D8:BE:12:1C:34:77:D3:E3:BE:6D:DF:57:98
X509v3 Authority Key Identifier:
keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/eXqfmiN16di-Ehw0d9Pjvm3fV5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.134.0/24
193.29.206.0/24
194.0.12.0-194.0.14.255
212.237.229.0/24
IPv6:
2001:678:1::/48
2001:678:f::-2001:678:11:ffff:ffff:ffff:ffff:ffff
2001:148f:fffb::/48
2001:148f:fffd::/48
Signature Algorithm: sha256WithRSAEncryption
10:bf:9c:dc:d7:85:96:77:63:7c:6f:c1:bd:45:e4:48:2c:25:
80:26:f7:f1:99:39:c2:6b:0a:6c:f6:20:63:6c:6f:52:88:23:
1c:a7:01:64:43:94:b1:34:39:f4:d7:f7:24:2b:1c:69:0b:b8:
36:5c:6e:cb:0f:eb:de:9b:5f:0d:16:fd:e7:13:e5:b6:ca:f7:
78:6e:6b:8c:dc:f6:75:41:23:6e:43:d4:41:73:91:3b:5f:2f:
7f:fc:63:2b:d4:b9:75:2e:fc:5a:de:08:fb:7e:fd:ec:86:a2:
b4:a1:84:2f:07:36:d3:7d:ff:c6:49:ca:86:17:ae:41:14:69:
12:27:64:27:16:d2:7a:f3:ee:f5:4f:cf:72:89:bc:60:3c:b7:
0b:37:90:06:4e:e9:ba:6b:6e:56:28:e5:35:37:b5:0e:5a:21:
f6:4e:d3:3d:bd:17:47:73:74:e7:df:cc:cc:ba:91:47:15:b8:
3e:6b:7c:37:6a:ea:a7:aa:1e:a4:af:58:8e:69:90:e1:50:16:
ff:9b:a6:bc:c0:98:65:65:59:a8:bd:75:b4:65:4e:20:ad:e6:
2b:19:3d:8b:2c:2a:2e:ed:cb:2b:39:40:95:34:e3:b1:60:25:
43:34:35:12:84:ee:94:ac:7b:97:85:27:b2:b3:56:a1:cd:d8:
e2:35:33:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:33 2024 by rpki-client on console-fra.rpki-client.org