Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/qN-kqsj2jarWpC_LBoQ63qFt5PU.roa
File: qN-kqsj2jarWpC_LBoQ63qFt5PU.roa (raw, json)
Hash identifier: UZPlDjN+2ceuNOQI82GRdJoyaRAaEvpAua9GKhyIhA8=
Subject key identifier: A8:DF:A4:AA:C8:F6:8D:AA:D6:A4:2F:CB:06:84:3A:DE:A1:6D:E4:F5
Certificate issuer: /CN=eec3131976aea27d171c6c267a98d3f382a61a2a
Certificate serial: 018571D7DAF58961DC33386C4D360F2BC9E2
Authority key identifier: EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/qN-kqsj2jarWpC_LBoQ63qFt5PU.roa
Signing time: Mon 02 Jan 2023 09:37:29 +0000
ROA not before: Mon 02 Jan 2023 09:37:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15943
IP address blocks: 193.102.58.0/24 maxlen: 24
193.101.120.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:da:f5:89:61:dc:33:38:6c:4d:36:0f:2b:c9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec3131976aea27d171c6c267a98d3f382a61a2a
Validity
Not Before: Jan 2 09:37:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8dfa4aac8f68daad6a42fcb06843adea16de4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fe:b3:c9:26:15:91:a6:50:1e:2a:83:9b:00:
fa:2c:ad:b5:35:32:c2:c6:fb:e8:2c:1c:e9:40:87:
32:9a:fd:1d:8f:cc:72:e8:32:7e:f9:00:08:99:3c:
28:f9:38:e7:96:84:3d:79:04:84:75:e9:47:95:a2:
fc:19:51:20:a2:f3:00:ae:c6:a0:df:8d:c8:e8:06:
6c:7c:75:81:91:6c:82:89:60:5d:5b:6a:1e:80:8a:
1e:2b:5d:09:d5:a0:9c:90:61:27:32:7c:7f:d5:06:
d7:31:7a:71:28:2d:82:8f:c1:6c:a2:5c:35:b5:c3:
91:c7:c7:ab:d5:08:7a:e1:76:2c:e8:34:c6:42:13:
be:b0:93:c0:33:d0:cd:8a:74:2e:39:d0:df:eb:e9:
44:da:74:71:9b:79:28:f9:98:51:c6:5b:26:37:8c:
b2:eb:b3:db:98:a5:45:10:6b:58:8d:9b:9c:5b:85:
01:d6:49:d5:c9:88:2b:a7:77:78:2b:77:ba:3d:5a:
38:2e:47:2c:3d:3d:41:f7:cc:8a:8c:e3:7e:0d:e6:
46:89:37:53:26:37:5e:6d:71:b0:e2:9b:ed:f8:c2:
38:b6:95:7c:13:e1:07:82:48:68:8e:4a:98:18:f0:
d5:63:56:b8:06:ab:ab:19:43:b8:f2:fa:b6:7b:8c:
a7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DF:A4:AA:C8:F6:8D:AA:D6:A4:2F:CB:06:84:3A:DE:A1:6D:E4:F5
X509v3 Authority Key Identifier:
keyid:EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/qN-kqsj2jarWpC_LBoQ63qFt5PU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.101.120.0/23
193.102.58.0/24
Signature Algorithm: sha256WithRSAEncryption
48:0c:50:46:77:d7:6f:eb:27:8b:da:ee:cb:f0:b9:d8:31:f5:
a2:54:63:3e:a6:d8:3e:a2:bf:08:a4:9a:d0:93:87:e3:21:73:
c0:79:ff:36:69:d3:ea:06:96:33:40:77:c1:15:0f:8e:a0:29:
14:13:f3:54:49:ff:9e:9d:37:fa:08:0b:3c:53:87:3a:8b:e7:
2e:44:43:ee:ae:b6:06:a2:3a:4e:cc:25:06:41:b6:59:40:9f:
e4:58:e3:ec:73:7c:1c:71:4e:b8:17:92:1d:2c:c4:34:b4:ac:
64:52:91:2d:9a:98:91:af:34:37:ca:45:ed:e2:62:97:f8:69:
0d:cc:9c:ec:0c:7c:83:fe:52:5d:a7:a1:72:51:76:ae:d0:8c:
a8:21:9d:06:b0:54:b7:db:e3:de:d0:11:52:52:b0:b8:9d:f1:
8d:33:80:94:af:c9:f6:3e:a4:78:75:bb:7d:40:ce:ac:d7:dd:
c8:6d:80:9f:bd:54:60:6b:c3:57:02:ee:d4:96:a2:f6:1c:fb:
d0:35:20:f5:0d:f6:70:d7:46:5f:14:92:33:14:76:57:c1:0e:
32:93:73:d2:36:a1:7d:48:6d:58:f4:c4:b5:d2:7c:4a:e3:fc:
21:f8:de:e3:81:2b:97:6f:29:34:bd:a4:9b:e5:36:2c:53:92:
ab:f5:c6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:38 2024 by rpki-client on console-fra.rpki-client.org