Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/5EyFuyjjSH4MckKJJJ85ofh3klE.roa
File: 5EyFuyjjSH4MckKJJJ85ofh3klE.roa (raw, json)
Hash identifier: 0nmjcFzBMG+MhIa4WzJv4t592mJT+ujVni0/53dcIBY=
Subject key identifier: E4:4C:85:BB:28:E3:48:7E:0C:72:42:89:24:9F:39:A1:F8:77:92:51
Certificate issuer: /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Certificate serial: 01856C6F2CDF455856AB10AD89FE2CA7F6CC
Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/5EyFuyjjSH4MckKJJJ85ofh3klE.roa
Signing time: Sun 01 Jan 2023 08:25:03 +0000
ROA not before: Sun 01 Jan 2023 08:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210788
IP address blocks: 193.41.47.0/24 maxlen: 24
193.41.82.0/24 maxlen: 24
2a0f:7ec0:100::/48 maxlen: 48
2a0f:7ec0:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:2c:df:45:58:56:ab:10:ad:89:fe:2c:a7:f6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Validity
Not Before: Jan 1 08:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e44c85bb28e3487e0c724289249f39a1f8779251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8f:02:f2:2e:43:d7:c9:6b:83:31:6d:d0:34:
ad:8d:97:7b:1d:09:5e:b5:b3:72:e6:03:41:20:d1:
e6:ce:99:e0:ed:bb:f0:bc:d7:d1:7d:40:5a:df:2d:
71:cc:7b:55:91:31:e0:87:19:91:df:4c:21:37:cd:
ec:86:77:30:fc:e4:00:bc:79:41:e5:93:ad:da:07:
20:ee:c1:f1:10:7b:3f:81:e1:6f:cb:cc:17:3b:70:
f0:36:12:a5:88:66:5b:4b:0a:21:32:e7:4b:19:9b:
b7:2b:e2:55:a4:eb:d9:00:e9:2e:df:6b:34:a4:41:
1a:d1:52:14:24:51:97:9c:ea:fb:89:6e:14:36:96:
9b:27:d9:5f:5d:be:d2:53:f4:33:be:91:3c:6c:f1:
cc:76:70:be:8d:33:1f:9e:b1:0d:f2:d8:13:83:71:
1d:0d:07:e3:31:84:ce:85:92:b8:96:77:a0:72:82:
34:e5:18:89:8a:25:d5:44:9a:af:9d:4e:97:59:a1:
4c:27:e7:c3:7e:2b:f9:ae:da:12:1e:63:1c:b7:d2:
6a:f6:a1:67:1c:7a:ed:e7:d5:99:6c:1f:f0:a8:49:
58:f1:e3:3d:43:d4:8e:95:cb:62:4d:49:3e:f8:76:
e4:e7:23:a6:a4:98:88:1c:d8:61:ec:b5:cb:e8:59:
e9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4C:85:BB:28:E3:48:7E:0C:72:42:89:24:9F:39:A1:F8:77:92:51
X509v3 Authority Key Identifier:
keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/5EyFuyjjSH4MckKJJJ85ofh3klE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.47.0/24
193.41.82.0/24
IPv6:
2a0f:7ec0:1::/48
2a0f:7ec0:100::/48
Signature Algorithm: sha256WithRSAEncryption
30:dc:21:3a:f8:a9:23:a9:58:10:a7:a5:d9:32:0f:48:7f:50:
14:47:80:2b:47:64:dc:e4:74:67:44:db:72:24:05:31:8f:f1:
50:53:b0:0c:08:7f:60:2e:f3:9a:d0:69:fc:86:72:8a:91:a2:
aa:ad:e0:93:45:67:8c:e4:a5:a5:e8:83:a1:e7:71:8e:6f:0a:
5b:f3:22:67:48:99:7c:9d:ef:2f:cb:57:bb:e9:e1:cf:6b:50:
5e:bb:37:97:3f:f8:c9:71:d8:8e:c2:33:f1:7d:06:21:e9:87:
41:25:e9:0c:79:64:8e:f5:03:2c:db:67:1a:07:4d:7e:44:ff:
70:93:91:30:9d:e0:af:20:f9:0f:ac:6c:c7:86:62:ff:70:c5:
41:70:c6:47:de:02:5e:4c:90:7c:9f:65:bd:57:62:4c:b3:5f:
6d:ae:5c:f5:44:3d:7a:93:4b:2b:bc:99:78:80:62:52:f4:8b:
75:c4:13:2a:6c:9c:ca:dc:ec:e2:0e:18:cd:37:eb:00:12:72:
28:a2:fb:42:bf:13:5b:77:4f:22:24:c0:67:90:02:9a:58:07:
9d:47:54:92:2f:86:a2:bb:65:ae:73:1d:ef:48:c1:e0:4c:37:
eb:4d:f9:cd:0e:46:ce:7e:c2:f3:44:a6:e2:b5:de:f8:79:55:
bb:f9:6d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:36 2024 by rpki-client on console-fra.rpki-client.org