Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/4a-T3_wjxTG1C1MTsgRjDey1QXY.roa
File: 4a-T3_wjxTG1C1MTsgRjDey1QXY.roa (raw, json)
Hash identifier: 9ukoFGYvPDsuno940g4LXsObpRbnRYxrmMqcrInzCuw=
Subject key identifier: E1:AF:93:DF:FC:23:C5:31:B5:0B:53:13:B2:04:63:0D:EC:B5:41:76
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01898955C44D3465D1B1C9802270ED97349F
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/4a-T3_wjxTG1C1MTsgRjDey1QXY.roa
Signing time: Mon 24 Jul 2023 19:17:26 +0000
ROA not before: Mon 24 Jul 2023 19:17:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 185.192.246.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:89:55:c4:4d:34:65:d1:b1:c9:80:22:70:ed:97:34:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jul 24 19:17:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1af93dffc23c531b50b5313b204630decb54176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:e2:ad:e6:85:07:5c:b7:1e:63:0c:6e:38:
b6:c7:53:85:f7:0b:78:c2:e5:53:e7:2d:60:15:56:
8f:ba:42:49:24:c6:15:5e:f0:60:33:9f:ab:2a:94:
90:c3:14:ef:3a:4e:7b:0a:e7:ba:ca:9b:ab:07:31:
9f:bd:fb:46:15:0c:e7:36:8b:8f:bc:88:ec:58:cc:
2d:23:12:04:f2:41:b6:43:51:8e:8e:b5:22:9a:61:
9f:37:00:04:8c:ba:6d:fb:85:f3:f4:46:54:06:9d:
fc:24:07:03:83:7c:8a:7b:ff:b9:41:d5:94:99:3f:
aa:fd:ea:b3:c5:28:2c:df:07:6f:6b:b4:f8:81:d4:
0c:d4:24:fd:5e:8f:01:5f:f9:e3:d6:b6:3d:91:f3:
e6:1c:58:0d:42:5b:83:48:1a:ee:c2:d9:06:f7:df:
16:e1:c3:85:37:fa:ac:1e:9d:e6:0b:cf:5b:46:67:
f0:1e:cc:7d:bd:b6:d6:4b:6c:25:ef:20:fc:02:f6:
dd:9b:f6:1e:d2:09:e6:51:04:2b:b1:59:fd:da:66:
f4:a9:af:9f:40:60:04:17:1c:dc:d7:60:b8:ce:93:
bc:c8:1f:48:0c:0b:02:86:25:29:47:0c:b3:67:1a:
cb:4f:82:76:f9:f7:6e:e7:6b:a2:b3:f6:a5:4e:2e:
b2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AF:93:DF:FC:23:C5:31:B5:0B:53:13:B2:04:63:0D:EC:B5:41:76
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/4a-T3_wjxTG1C1MTsgRjDey1QXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.246.0/24
Signature Algorithm: sha256WithRSAEncryption
29:a1:f4:a0:42:68:f7:9d:11:35:1e:d0:a2:95:47:78:37:46:
05:70:f3:04:9c:16:63:26:4e:23:49:67:a2:75:46:75:9b:a3:
0b:c3:bf:72:c1:2d:e4:88:34:fb:b9:f3:dd:ae:e1:a2:c3:db:
9e:93:fb:90:9d:4b:42:40:9e:af:91:f0:1e:ef:b0:58:eb:51:
4d:f4:1a:d4:86:d7:c8:00:d3:77:d7:9f:37:aa:6f:e7:8e:26:
6f:db:76:f9:33:58:61:de:ab:d5:29:0a:28:38:5f:4e:9f:77:
bc:26:e1:99:2e:46:e4:be:d6:dc:71:19:32:76:b6:53:ea:ff:
2d:00:a3:e0:4c:d9:49:7c:c5:0e:9a:af:21:9a:53:16:4b:bb:
5c:db:f1:4a:c2:43:ed:8a:1a:b2:42:3d:89:f0:32:9a:d9:17:
4d:85:8f:1e:d7:1d:ab:13:b8:4e:6c:bf:6c:30:f3:26:98:bc:
21:94:ba:e7:05:24:1d:d7:0a:a2:1e:0a:a1:70:f5:e2:2e:d7:
b1:29:16:ae:a1:5e:eb:e4:67:6e:7f:92:f5:f0:c2:dc:78:11:
93:5b:42:3d:f4:de:33:14:0a:68:d8:0b:57:5f:e1:1d:28:83:
d0:15:ab:b7:ee:be:ae:10:c6:3c:92:ac:44:89:44:fc:a4:f3:
98:3b:50:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:41 2024 by rpki-client on console-ams.rpki-client.org