Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/Rv2HdyGNcdtpuLUf6Ph5KfLrCEQ.roa
File: Rv2HdyGNcdtpuLUf6Ph5KfLrCEQ.roa (raw, json)
Hash identifier: Mm4JBSINw8lf6faW7hsL98Kxbnok8FilKtXNE8m4yhM=
Subject key identifier: 46:FD:87:77:21:8D:71:DB:69:B8:B5:1F:E8:F8:79:29:F2:EB:08:44
Certificate issuer: /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Certificate serial: 018B80CD8A90C76091DBCD36F9DDA48FCA99
Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/Rv2HdyGNcdtpuLUf6Ph5KfLrCEQ.roa
Signing time: Mon 30 Oct 2023 13:37:15 +0000
ROA not before: Mon 30 Oct 2023 13:37:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204555
IP address blocks: 193.176.100.0/24 maxlen: 24
94.125.143.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:80:cd:8a:90:c7:60:91:db:cd:36:f9:dd:a4:8f:ca:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Validity
Not Before: Oct 30 13:37:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46fd8777218d71db69b8b51fe8f87929f2eb0844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:81:22:80:df:ee:ff:ce:16:a5:02:a2:0d:bd:
5b:a5:00:12:bd:f0:f9:65:fc:03:e3:9a:cb:3d:cd:
63:af:38:0e:f7:4e:5e:05:13:0a:d0:6c:4b:fd:d3:
08:65:81:26:06:54:e1:8f:86:3a:42:30:79:92:69:
40:5e:5a:19:a5:ab:74:6d:5d:dc:82:c3:e4:ad:8a:
0e:a2:92:f3:df:1c:17:bd:89:79:1b:d5:59:2a:27:
80:26:df:19:48:d6:17:df:0a:78:0d:87:e8:32:81:
11:88:e9:05:d7:c4:d6:bc:81:03:cc:dc:c8:8c:f0:
2e:22:44:6d:0d:76:85:c1:0b:75:e1:16:0f:b2:1b:
0a:64:9b:b2:88:a9:b8:61:45:10:ae:06:67:37:2e:
9a:ec:c5:ae:25:21:7f:ca:a6:43:c9:1f:90:c8:c1:
f6:66:23:bd:a4:f2:de:f6:c0:5e:bf:17:3c:52:fa:
52:f9:47:d1:f2:8a:46:7f:9c:e9:a7:26:c3:1c:83:
5a:75:aa:6a:f2:e9:00:1b:93:69:a4:8f:35:e2:a1:
18:06:b5:76:a9:ef:4c:fa:ad:eb:39:f7:53:51:df:
1e:93:ce:de:cc:20:1e:53:a3:23:59:05:1f:f1:98:
c4:44:5c:fe:b7:d6:f7:cc:63:5c:72:fc:9d:bd:a6:
1a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FD:87:77:21:8D:71:DB:69:B8:B5:1F:E8:F8:79:29:F2:EB:08:44
X509v3 Authority Key Identifier:
keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/Rv2HdyGNcdtpuLUf6Ph5KfLrCEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.143.0/24
193.176.100.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ef:f7:7a:28:7b:3a:5f:9a:87:0c:9d:51:f7:66:5f:5d:1e:
a8:8e:83:76:07:60:55:1d:4e:44:12:6b:76:ea:54:c9:b4:49:
4e:ad:2b:51:eb:22:7d:9d:ca:d5:e1:b6:f7:68:27:08:38:72:
7a:06:d8:b6:bc:9d:ce:2e:f8:db:1b:1e:7d:ad:fd:a0:75:08:
e3:48:73:8f:d7:40:c4:2d:6c:87:d7:c4:9f:e3:a9:c3:3e:0d:
25:0d:cf:ad:66:d2:2d:df:c1:d6:46:35:cf:30:4f:f3:b0:b3:
79:a0:0b:c6:5c:c9:68:99:8d:aa:a7:fa:58:84:fd:9a:90:13:
69:87:ab:01:a8:6b:9c:96:c0:93:ab:c0:8c:bc:a9:82:63:0a:
40:52:92:da:c1:c1:18:e2:fa:93:80:93:32:16:20:81:0b:06:
7d:90:ed:d3:f1:bd:d9:ca:27:c6:20:36:bc:05:40:32:dd:d6:
d4:2a:78:53:96:a4:49:56:95:f5:ff:02:99:ab:de:0b:12:7b:
f2:59:42:55:a2:e3:0f:47:f7:e6:1f:6b:10:ee:3a:94:55:81:
b5:cd:3b:ca:f4:9a:0a:aa:30:95:95:bd:0e:42:2d:ae:ff:68:
98:c5:d1:52:aa:92:71:37:a5:12:cc:91:a5:c6:89:49:f0:ec:
36:86:11:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:31 2024 by rpki-client on console-fra.rpki-client.org