Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/Cv9j6lD4Jec9B83B5hn_MI6bPi4.roa
File: Cv9j6lD4Jec9B83B5hn_MI6bPi4.roa (raw, json)
Hash identifier: h6e4oe0Ju48RFzTnysspNDOvJxFPTJcvDPPiwCpen4I=
Subject key identifier: 0A:FF:63:EA:50:F8:25:E7:3D:07:CD:C1:E6:19:FF:30:8E:9B:3E:2E
Certificate issuer: /CN=e8b6e8499ffe31e1f6d6780d03017e83473f2d3c
Certificate serial: 018C5B5CEF7A5DF1A7213571B3491D68D7FB
Authority key identifier: E8:B6:E8:49:9F:FE:31:E1:F6:D6:78:0D:03:01:7E:83:47:3F:2D:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/Cv9j6lD4Jec9B83B5hn_MI6bPi4.roa
Signing time: Tue 12 Dec 2023 00:11:06 +0000
ROA not before: Tue 12 Dec 2023 00:11:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210949
IP address blocks: 193.42.101.0/24 maxlen: 24
193.42.103.0/24 maxlen: 24
193.42.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5b:5c:ef:7a:5d:f1:a7:21:35:71:b3:49:1d:68:d7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b6e8499ffe31e1f6d6780d03017e83473f2d3c
Validity
Not Before: Dec 12 00:11:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0aff63ea50f825e73d07cdc1e619ff308e9b3e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d4:af:a9:a0:6c:68:dd:72:30:54:62:62:ab:
21:13:60:82:57:21:50:f9:8d:95:aa:f6:06:b1:54:
3d:24:9e:ba:ce:13:03:71:4b:75:a3:3d:50:93:7d:
d7:31:1d:b3:a8:98:20:cf:3c:82:72:29:04:af:d2:
cf:bf:41:c4:88:6b:48:97:ca:dd:86:02:d7:1b:76:
8a:37:39:b3:59:69:0c:73:64:21:22:12:a6:fe:7f:
62:d8:53:a2:1d:b2:80:5e:ca:2c:1d:92:6b:6f:bc:
62:84:70:c4:55:5b:a3:59:62:dd:b3:ef:d1:3f:75:
a4:9b:3e:b6:ab:02:f2:da:4c:d4:2d:13:4b:98:65:
b9:ed:25:d8:e8:1d:2b:c5:46:91:03:ab:8a:0d:31:
e1:a5:04:fb:c0:d2:d7:8e:ee:f6:61:d7:91:31:d5:
91:da:bc:a0:13:a8:f4:14:9c:27:a1:f3:10:0d:32:
77:bc:96:e1:d6:bd:b0:12:84:62:a5:05:1e:f3:02:
3e:dc:8b:1a:0e:57:61:94:c4:5e:7b:44:b2:eb:64:
56:2b:e4:b0:3b:16:0e:74:db:26:71:b4:9a:7a:03:
d5:db:d1:8b:06:c6:0d:f7:24:45:00:08:a7:6c:16:
64:99:b5:ca:d6:7e:82:ba:d6:6a:20:dc:90:4e:49:
60:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FF:63:EA:50:F8:25:E7:3D:07:CD:C1:E6:19:FF:30:8E:9B:3E:2E
X509v3 Authority Key Identifier:
keyid:E8:B6:E8:49:9F:FE:31:E1:F6:D6:78:0D:03:01:7E:83:47:3F:2D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/Cv9j6lD4Jec9B83B5hn_MI6bPi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.101.0-193.42.103.255
Signature Algorithm: sha256WithRSAEncryption
8d:9a:3e:ef:07:73:44:d6:7f:dd:57:56:48:2b:c8:7d:7d:28:
b9:93:9f:ff:92:37:03:a3:59:db:a3:86:13:3b:88:78:d0:0d:
4d:8f:cf:1e:9c:64:ad:d7:2a:d0:17:b4:42:98:2c:81:5d:29:
54:dd:90:30:92:11:b0:ca:ba:65:72:41:73:cf:3c:43:65:d4:
ea:c1:41:91:3e:03:54:9b:ff:76:3e:cb:c0:53:52:b9:5f:d8:
41:5a:55:6d:52:0e:9e:2a:a9:b4:96:b2:40:41:9d:9a:66:e7:
86:df:a0:90:6a:bb:19:da:0b:17:e6:b1:52:55:48:89:74:12:
5e:85:15:33:8a:a0:9a:8a:4b:89:7f:49:f6:8b:4b:d9:ec:89:
20:74:26:d9:0e:7a:02:d9:ee:2d:04:8a:2e:64:39:14:2e:a7:
bd:62:88:f4:68:a8:84:05:c6:21:96:24:e6:b0:d4:6e:17:75:
aa:81:30:87:99:16:3e:19:a0:36:81:6c:bb:dd:8e:e9:55:93:
0a:94:9a:53:32:7e:c1:52:2e:c1:1c:13:a4:27:19:88:54:1a:
c5:12:cc:8f:ab:ee:53:13:a7:24:12:8b:29:81:b3:d2:88:3e:
18:57:51:89:5c:c4:a7:aa:a5:03:55:86:4a:44:fb:11:1c:b1:
48:cd:39:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:22 2024 by rpki-client on console-ams.rpki-client.org