Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/fE-U0xTOyqzfGrfWgmgVzLJ9w6Y.roa
File: fE-U0xTOyqzfGrfWgmgVzLJ9w6Y.roa (raw, json)
Hash identifier: 8GId18bwI0ZDJ28Z1NQNaGiHbhZpCZSNtUTgxUU6DGE=
Subject key identifier: 7C:4F:94:D3:14:CE:CA:AC:DF:1A:B7:D6:82:68:15:CC:B2:7D:C3:A6
Certificate issuer: /CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9
Certificate serial: 018572310D638003FBFEAE7965D7C215F4E2
Authority key identifier: E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/fE-U0xTOyqzfGrfWgmgVzLJ9w6Y.roa
Signing time: Mon 02 Jan 2023 11:14:55 +0000
ROA not before: Mon 02 Jan 2023 11:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31712
IP address blocks: 83.142.32.0/21 maxlen: 21
185.108.56.0/22 maxlen: 22
95.128.8.0/21 maxlen: 21
2a04:4100::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:31:0d:63:80:03:fb:fe:ae:79:65:d7:c2:15:f4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9
Validity
Not Before: Jan 2 11:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c4f94d314cecaacdf1ab7d6826815ccb27dc3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0f:c4:ca:c7:a4:cd:4e:ca:99:99:12:50:09:
6f:d1:dc:41:00:d8:e9:be:22:0e:64:07:5c:c9:66:
c4:4e:fc:cd:66:99:d9:e1:7c:74:c1:a1:3a:65:c7:
05:3f:00:96:4e:66:63:37:89:0e:56:66:f9:54:c7:
0e:68:ab:3f:ca:d6:75:d7:8e:e4:e2:ee:77:db:9d:
8f:33:64:85:46:6d:65:53:69:9f:0e:0a:5e:b7:6b:
19:8a:61:ec:8d:b5:0c:37:60:6b:04:10:d9:cd:bd:
d8:38:92:75:7e:8c:73:24:62:d6:98:a7:96:e0:3c:
08:b4:9a:4f:f7:6f:01:a8:d4:7c:ad:18:f2:21:14:
9e:94:bc:a6:05:be:6f:b3:a3:ce:6c:97:7b:04:e1:
36:38:98:27:f5:90:ce:f3:90:8e:91:ff:4a:5a:80:
45:40:37:2f:1c:d4:4d:39:ce:6a:58:6d:af:2a:59:
de:bc:a5:d8:7f:d0:af:76:36:b2:ce:dd:7c:9d:0b:
7e:1e:a1:9c:dd:05:1f:1c:60:93:45:b4:b0:09:c1:
1e:97:a7:48:51:88:c2:a9:7b:d7:c0:a4:21:7f:50:
78:1c:af:2c:78:f3:24:c6:e2:44:b2:15:03:01:63:
50:5c:93:45:5b:d5:ce:78:34:32:25:20:a0:78:9e:
e1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4F:94:D3:14:CE:CA:AC:DF:1A:B7:D6:82:68:15:CC:B2:7D:C3:A6
X509v3 Authority Key Identifier:
keyid:E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/fE-U0xTOyqzfGrfWgmgVzLJ9w6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.32.0/21
95.128.8.0/21
185.108.56.0/22
IPv6:
2a04:4100::/29
Signature Algorithm: sha256WithRSAEncryption
b1:cc:c1:b6:fa:f2:33:f1:7e:72:fc:74:5d:dc:c4:dc:a0:01:
c9:31:e3:12:da:85:53:0d:40:fd:b4:ad:d5:2f:d1:34:9a:36:
20:35:cd:d8:e7:26:69:7d:93:d4:50:12:6b:fe:4c:3d:7a:33:
ae:c9:fc:d4:56:04:85:34:7f:d6:3b:db:9a:fa:ff:c1:75:02:
70:95:f6:0e:47:77:f4:b9:88:8a:41:79:f5:7e:04:29:b9:db:
a5:22:3c:77:61:fc:58:1c:0d:2e:23:bf:81:8e:54:e6:6f:68:
34:1f:7f:e9:49:2c:55:90:43:8e:82:73:03:76:fa:f9:e9:e6:
46:aa:f4:1e:3b:7d:b0:fe:8f:52:b1:2e:dc:98:9b:6b:48:2a:
7e:d7:71:4e:6a:98:3f:ea:3e:17:9d:50:f0:99:50:e7:8a:ec:
15:aa:b2:55:4a:e7:f6:ee:13:63:70:34:2f:f7:79:7d:cd:1f:
85:e0:e0:8d:a4:34:97:38:7b:b9:87:47:c8:6f:ac:34:ce:0e:
09:da:e2:d6:60:80:ca:06:f9:cd:12:e6:19:61:98:a6:9d:7e:
5e:29:62:75:91:8e:e1:d1:16:67:09:b9:ab:cc:ed:57:c1:ae:
fd:68:33:d9:b1:3f:01:90:de:91:32:53:2f:c9:ca:6f:00:77:
85:ca:97:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:17 2024 by rpki-client on console-ams.rpki-client.org