Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/tIoe3_7D7SP0gV5nCK3FKVi5Q0A.roa
File: tIoe3_7D7SP0gV5nCK3FKVi5Q0A.roa (raw, json)
Hash identifier: uo14U8y7h7BFxZ4wk/Rsf51490ZeH4b9tb5/wbp8fUI=
Subject key identifier: B4:8A:1E:DF:FE:C3:ED:23:F4:81:5E:67:08:AD:C5:29:58:B9:43:40
Certificate issuer: /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial: 01869CE097A335DBA9B835A5D21DFAD0FD26
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/tIoe3_7D7SP0gV5nCK3FKVi5Q0A.roa
Signing time: Wed 01 Mar 2023 11:13:29 +0000
ROA not before: Wed 01 Mar 2023 11:13:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47536
IP address blocks: 193.105.29.0/24 maxlen: 24
2a12:79c2::/32 maxlen: 32
2a12:79c0::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:e0:97:a3:35:db:a9:b8:35:a5:d2:1d:fa:d0:fd:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
Validity
Not Before: Mar 1 11:13:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b48a1edffec3ed23f4815e6708adc52958b94340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:5a:9e:70:e5:2f:41:b0:0c:c5:83:f1:79:
76:be:ee:a2:27:17:35:7d:31:25:15:f3:c6:ab:e9:
c0:5c:3c:d0:e8:0d:8f:5c:fb:5b:d9:d4:4b:77:9e:
7d:f0:31:da:d9:89:59:b6:ad:b0:12:1c:eb:db:c4:
34:e0:77:17:bf:d4:d4:99:c8:25:42:a7:93:a3:f4:
c9:12:8c:f7:69:b2:17:e2:3f:ef:39:f7:48:91:4b:
90:60:05:88:e8:07:67:fb:cd:6e:21:06:4f:3e:89:
c7:04:74:02:32:0c:f8:a4:2c:ed:51:64:08:5b:3f:
65:05:09:c0:35:47:b2:69:bf:13:5e:47:0d:23:e9:
16:df:de:d2:e4:5f:9f:ef:18:4d:d3:75:a5:c6:e3:
d0:96:49:dc:89:61:be:4c:92:24:11:57:ca:bc:66:
b5:f4:c8:68:02:79:5c:b9:ce:9d:89:5c:ac:45:ce:
26:3e:f5:8e:1d:78:61:3d:cb:07:bc:5c:28:7d:47:
47:21:2a:57:1c:1e:d9:e6:fe:e6:a6:7a:d6:c0:48:
b9:4e:50:2f:44:89:c4:09:2e:a1:bf:f4:dc:65:98:
cc:d4:6e:9b:6a:7e:2c:41:83:f3:cc:19:2a:d5:d4:
a1:b4:91:80:de:89:5b:d4:be:97:3b:c3:d9:1e:4b:
53:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8A:1E:DF:FE:C3:ED:23:F4:81:5E:67:08:AD:C5:29:58:B9:43:40
X509v3 Authority Key Identifier:
keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/tIoe3_7D7SP0gV5nCK3FKVi5Q0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.29.0/24
IPv6:
2a12:79c0::/32
2a12:79c2::/32
Signature Algorithm: sha256WithRSAEncryption
59:da:4b:60:a1:07:ba:1a:34:e2:18:db:da:00:ef:15:f0:56:
b3:e2:f2:47:2a:34:25:aa:5f:8b:00:9e:19:57:c3:5c:d9:61:
21:1c:86:a6:56:eb:c5:e1:30:0a:23:76:c1:02:57:e2:77:d4:
f4:5b:22:cf:35:ed:db:44:43:11:49:8e:bc:b3:02:bb:88:45:
fb:f0:a8:b1:0b:3c:26:43:a7:88:3c:d0:4c:c2:80:ad:b1:84:
fb:f2:d7:55:8c:19:6e:33:10:12:8e:86:21:46:bb:94:23:fe:
f3:a9:d3:6e:99:f0:c2:78:e7:12:7f:95:f2:85:7d:bc:97:99:
59:e9:d7:49:56:c0:15:07:05:f4:e9:76:38:96:6c:66:da:31:
5e:88:fc:40:90:56:33:3c:e6:fe:16:6e:1c:ee:08:69:1e:d1:
84:a2:45:f2:de:98:53:34:6b:61:26:ce:bf:cc:71:7f:5e:94:
63:83:ed:ea:58:3c:b7:91:6e:0b:af:c5:39:3d:e7:67:c7:e2:
0b:48:4d:6b:45:1f:61:b4:b7:25:ac:63:5f:92:35:5d:7c:aa:
a5:77:c0:ad:71:42:0b:9a:33:69:92:cc:35:19:45:7e:cc:de:
21:55:a6:4f:1a:7e:18:62:ff:0c:ef:3d:92:a6:98:31:f2:da:
cf:8a:7f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:25 2024 by rpki-client on console-fra.rpki-client.org