Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/EDOhcqdeEknl-39T9Zh9YyhKN8c.roa
File: EDOhcqdeEknl-39T9Zh9YyhKN8c.roa (raw, json)
Hash identifier: vT2zHr5aDaYikP6GQZLp/Ai5KxAUp1Ylt9cxhmIyTjI=
Subject key identifier: 10:33:A1:72:A7:5E:12:49:E5:FB:7F:53:F5:98:7D:63:28:4A:37:C7
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0185F3DA4CF6556453E8628FD35B16C64DDA
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/EDOhcqdeEknl-39T9Zh9YyhKN8c.roa
Signing time: Fri 27 Jan 2023 15:30:48 +0000
ROA not before: Fri 27 Jan 2023 15:30:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 193.42.54.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:da:4c:f6:55:64:53:e8:62:8f:d3:5b:16:c6:4d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 27 15:30:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1033a172a75e1249e5fb7f53f5987d63284a37c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:03:0d:b8:30:73:d3:3b:45:b0:36:7c:24:37:
e5:54:60:9f:37:1e:b3:42:35:72:ee:67:47:ab:b0:
12:e7:09:d2:ce:d0:45:a1:11:14:c8:a6:03:b6:a4:
7e:5e:21:9f:ee:51:db:e2:02:5c:f1:91:08:12:5a:
95:50:de:87:47:f3:52:a1:8b:c3:e5:0a:a9:08:fc:
1c:1f:f3:83:15:5e:bb:d8:b4:bb:ab:c4:5f:6c:14:
b1:70:e3:e6:b4:72:99:90:53:4f:08:ee:1c:1b:ce:
e3:06:94:5d:9c:d0:a9:4a:03:f3:de:43:6b:fd:88:
be:7c:a8:5c:9f:88:f8:61:2a:20:b8:02:1f:54:e9:
83:f7:1c:da:b8:58:26:41:44:6b:85:d2:f5:be:f7:
23:e4:06:fe:5b:bb:82:55:fc:c6:66:d0:19:58:aa:
cc:67:51:c4:39:95:57:61:f7:54:82:f5:de:40:72:
9e:b0:9e:d1:ba:c2:3e:25:48:fe:1d:cc:d8:c9:7c:
e2:1f:46:69:2d:0a:dc:40:bd:d5:64:48:cd:32:54:
68:39:6f:e4:6c:77:75:71:0f:bd:5e:d4:d0:dd:3b:
46:4b:02:f8:bc:42:b6:7f:f2:1f:75:95:1b:6c:66:
f3:53:35:9b:0d:47:e3:1a:0f:29:ef:df:5f:ad:29:
52:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:33:A1:72:A7:5E:12:49:E5:FB:7F:53:F5:98:7D:63:28:4A:37:C7
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/EDOhcqdeEknl-39T9Zh9YyhKN8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.54.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:4c:38:27:bd:1e:cb:16:f6:57:9b:f6:43:39:27:11:02:50:
ec:ec:3a:dd:df:59:23:ef:f8:f3:c9:61:51:dc:fd:cb:29:7c:
26:85:79:91:79:32:c0:b6:6f:93:35:80:bb:24:b9:b0:3c:95:
85:35:c5:10:39:d5:dd:1a:8f:ad:3a:33:40:18:9b:76:5f:7b:
48:9b:6d:ac:91:99:b9:2a:65:90:7e:a8:55:98:2d:eb:8c:f8:
a2:f9:7b:cd:2f:42:03:a9:26:b5:d8:f9:e7:5e:c9:dc:75:48:
7a:d1:e8:09:21:b6:48:88:00:10:ba:39:0b:83:26:ac:3f:4f:
eb:a6:6f:e0:01:d6:f8:83:76:e1:a9:c8:90:02:07:52:1c:ea:
91:02:f3:4e:cd:e3:1a:46:ae:08:69:2a:db:16:01:38:dd:09:
34:f6:ac:28:88:f5:52:73:45:c6:57:1f:35:6d:15:58:fa:4b:
9f:fb:2a:35:d2:0e:b2:60:09:1c:ba:6b:63:b0:46:9f:6e:83:
ff:6c:8a:e5:e2:ce:8c:11:f3:e1:dc:09:d8:68:11:bd:d8:a6:
25:ee:a0:96:07:54:85:02:a9:08:1b:42:2e:dd:c8:88:80:ee:
74:d8:33:e8:8c:11:35:51:09:ac:80:e4:1e:e1:94:49:59:60:
9d:a5:15:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:58 2023 by rpki-client on console-fra.rpki-client.org