Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/ETYDAMaHe-DeA9NKMFtvx8WtPxw.roa
File: ETYDAMaHe-DeA9NKMFtvx8WtPxw.roa (raw, json)
Hash identifier: XeOVu+vKUASGrulpmFwCa5VhIXMlyPTBWfOcykFCiGw=
Subject key identifier: 11:36:03:00:C6:87:7B:E0:DE:03:D3:4A:30:5B:6F:C7:C5:AD:3F:1C
Certificate issuer: /CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
Certificate serial: 018BEBF85214059E97365F77CECD996D4862
Authority key identifier: 5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/ETYDAMaHe-DeA9NKMFtvx8WtPxw.roa
Signing time: Mon 20 Nov 2023 09:03:21 +0000
ROA not before: Mon 20 Nov 2023 09:03:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 193.17.53.0/24 maxlen: 24
193.203.110.0/24 maxlen: 24
193.203.24.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:eb:f8:52:14:05:9e:97:36:5f:77:ce:cd:99:6d:48:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
Validity
Not Before: Nov 20 09:03:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11360300c6877be0de03d34a305b6fc7c5ad3f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:38:d9:e2:2d:8e:2c:83:9d:7f:32:56:d3:ab:
70:fb:0e:21:52:bb:40:ac:7e:69:21:8c:9f:e0:f0:
d4:a6:84:9c:8f:68:42:ad:ea:e1:b1:d3:26:75:55:
f9:2b:c0:74:62:35:06:85:2f:d2:92:8b:db:9b:de:
5b:e5:ea:84:e4:c6:37:e5:44:0b:0b:77:cf:bc:ce:
c8:3b:a9:f1:04:35:6c:91:6b:75:cc:16:3a:d6:d5:
20:e3:85:11:68:ef:25:13:65:91:e5:3b:b1:3f:be:
87:31:7d:30:ff:0a:e4:ed:30:d7:d5:7e:3e:a6:ca:
38:53:24:33:e0:d8:98:19:d7:db:d8:6d:03:67:d0:
d9:cd:8a:11:fd:d3:bc:fa:8a:bc:0e:f6:ec:c7:e5:
ee:c2:c3:ba:c0:f2:e9:99:32:4c:9c:8c:8d:05:da:
14:d1:41:28:1f:49:79:f0:cc:38:67:99:92:6f:11:
71:da:7f:11:2d:db:de:41:27:46:77:77:73:82:4b:
c3:89:1f:a5:ab:75:af:aa:72:ee:ce:c8:e9:06:83:
46:9d:ce:9f:0e:fa:24:af:fa:6f:de:9e:48:cb:c5:
09:09:82:2c:e3:34:d0:4c:72:10:83:81:72:eb:9d:
64:58:38:5b:33:70:82:67:c6:80:b3:88:82:f8:68:
6d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:36:03:00:C6:87:7B:E0:DE:03:D3:4A:30:5B:6F:C7:C5:AD:3F:1C
X509v3 Authority Key Identifier:
keyid:5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/ETYDAMaHe-DeA9NKMFtvx8WtPxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.53.0/24
193.203.24.0/24
193.203.110.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:bd:ef:39:c3:d7:c4:96:0b:c5:28:e9:dc:f7:fe:e5:94:2f:
b5:29:70:9c:8b:38:07:04:e2:ed:ef:a6:77:8c:82:48:fc:49:
35:8a:fb:df:50:07:48:a7:0f:32:d8:d0:8f:4e:ed:33:6e:59:
ad:61:c2:b8:96:24:7f:96:56:f9:61:ad:08:97:85:6a:0c:bd:
b6:82:c8:d8:e4:b6:5e:6d:a7:0a:80:3c:0e:2f:04:fc:02:9b:
3b:7e:9d:47:c7:36:58:46:4e:ff:b3:2e:47:1a:ab:5a:9a:e1:
87:49:3b:03:cd:37:da:ff:53:af:7c:28:45:d0:69:85:77:ef:
19:b2:29:77:54:d3:bf:7a:5c:9b:ae:5b:e9:ad:88:2c:ce:df:
cc:aa:bd:38:c1:77:aa:fe:64:f0:0a:93:a7:d6:44:66:93:49:
61:b3:d5:de:6d:fe:8d:99:38:94:41:38:86:6f:75:1b:5f:65:
e9:46:7e:b3:37:60:4f:38:73:b6:04:d5:57:d5:9d:43:01:0d:
7c:35:cf:af:67:d9:aa:96:d9:43:9c:a2:5b:35:b4:77:6b:d3:
cc:f1:35:9c:a3:1b:a0:03:51:29:07:f2:69:c4:54:43:01:c2:
6e:80:ef:16:5e:47:4c:51:81:0b:d2:66:1a:36:f1:4d:95:eb:
b2:2f:7a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:18 2024 by rpki-client on console-fra.rpki-client.org