Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/IRcz7ipu2C9CdNKyR0f7v6vOGfY.roa
File: IRcz7ipu2C9CdNKyR0f7v6vOGfY.roa (raw, json)
Hash identifier: bLhLH8q10JWWGRFGQMg2tLLE/lVYpNBdqWdVhxVvy8M=
Subject key identifier: 21:17:33:EE:2A:6E:D8:2F:42:74:D2:B2:47:47:FB:BF:AB:CE:19:F6
Certificate issuer: /CN=ee0581767af4579e44da977b1082d94b3c7b9298
Certificate serial: 018573439B28B7CEC544AA44903980F4A1E2
Authority key identifier: EE:05:81:76:7A:F4:57:9E:44:DA:97:7B:10:82:D9:4B:3C:7B:92:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gWBdnr0V55E2pd7EILZSzx7kpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/IRcz7ipu2C9CdNKyR0f7v6vOGfY.roa
Signing time: Mon 02 Jan 2023 16:14:48 +0000
ROA not before: Mon 02 Jan 2023 16:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6453
IP address blocks: 193.105.119.0/24 maxlen: 24
195.85.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:43:9b:28:b7:ce:c5:44:aa:44:90:39:80:f4:a1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0581767af4579e44da977b1082d94b3c7b9298
Validity
Not Before: Jan 2 16:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=211733ee2a6ed82f4274d2b24747fbbfabce19f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ef:c4:55:50:87:0e:1c:7d:7c:20:d2:49:ff:
17:26:e3:26:32:c8:16:73:f6:36:b2:a5:9b:26:71:
af:da:68:8d:84:c0:7d:b4:d7:61:65:06:e2:38:47:
a6:38:37:7e:61:3e:0e:28:0a:3d:38:4f:f3:c6:1f:
c6:35:f2:f7:23:6c:dd:06:e9:37:8f:95:6d:e4:a2:
22:97:c0:f8:0b:ce:9f:f2:f9:2a:bb:f6:95:99:fa:
ca:f8:44:05:1e:62:a1:e0:1c:35:89:0e:a8:14:d7:
64:79:50:60:1e:7a:0e:09:79:4c:16:5c:46:6b:f3:
5a:73:b8:0b:44:58:bf:98:c1:7e:fc:fd:f5:07:28:
72:87:ed:37:5a:d6:9b:9c:50:8c:f9:82:41:2d:8a:
55:fc:b5:93:d7:47:d7:bc:ca:d1:94:81:ea:b2:68:
43:73:62:00:25:95:5d:1a:29:d1:2e:8e:a0:cf:a3:
be:39:60:a2:e9:7b:f5:39:be:f5:14:d5:13:8b:70:
da:56:8b:0e:7b:d6:6c:7e:19:02:e2:35:04:93:5d:
e6:d3:d0:b9:dd:74:b4:36:96:33:f6:7c:57:e9:c9:
89:54:80:85:40:7a:2a:3c:ba:c3:03:23:67:e4:ad:
2c:79:55:46:c9:e6:95:44:cd:b3:3a:89:02:78:d1:
5e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:17:33:EE:2A:6E:D8:2F:42:74:D2:B2:47:47:FB:BF:AB:CE:19:F6
X509v3 Authority Key Identifier:
keyid:EE:05:81:76:7A:F4:57:9E:44:DA:97:7B:10:82:D9:4B:3C:7B:92:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gWBdnr0V55E2pd7EILZSzx7kpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/IRcz7ipu2C9CdNKyR0f7v6vOGfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/7gWBdnr0V55E2pd7EILZSzx7kpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.119.0/24
195.85.224.0/24
Signature Algorithm: sha256WithRSAEncryption
85:82:23:97:97:aa:9f:fd:3e:0c:10:45:75:66:6b:36:50:34:
f0:9d:b5:75:3f:58:9d:bb:90:67:0a:4d:22:50:8d:52:98:b5:
de:a3:cb:45:fc:1d:23:3b:f0:08:04:ef:ba:1d:bd:19:c1:ff:
77:5f:c7:17:4a:cd:85:33:b1:07:df:fa:8e:9f:e7:80:cd:a0:
d6:f0:c4:d3:bc:c5:91:cb:3e:80:7b:96:71:30:13:ef:51:4d:
10:20:6b:c2:56:96:2c:ac:0c:83:01:b0:d1:c8:0c:f3:af:ed:
29:07:53:a1:63:90:c0:a8:9c:5d:93:58:36:29:d3:e5:d6:54:
9e:8a:2c:7f:d3:4d:b2:96:c8:9f:2d:c3:6c:86:cf:b5:4b:92:
09:5a:b0:2a:9a:00:a7:27:e1:26:df:2e:00:7c:5c:54:43:22:
fa:29:15:4c:e1:d7:19:67:e4:48:87:80:78:82:5d:d6:fb:81:
50:8e:f8:70:4b:03:e7:f5:b4:7c:37:48:5a:32:f6:dd:21:1f:
f4:1f:ac:b0:6a:e0:16:a1:f0:ae:0d:58:e9:49:b4:53:81:0e:
e0:0f:76:16:43:74:5c:cc:c2:2c:3e:f8:76:7e:6b:9d:61:e2:
ae:61:25:ec:2a:d2:7e:e7:17:50:7a:30:46:5d:7f:2d:9c:1c:
9c:50:4b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:04 2024 by rpki-client on console-ams.rpki-client.org