Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/MeI7LUaem5W9TC7q6rvlgnyjdXc.roa
File: MeI7LUaem5W9TC7q6rvlgnyjdXc.roa (raw, json)
Hash identifier: Jv0owvyk35tHON4UayV32zYahOd0mo235cvp/phirnM=
Subject key identifier: 31:E2:3B:2D:46:9E:9B:95:BD:4C:2E:EA:EA:BB:E5:82:7C:A3:75:77
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01856FB119D46089909782F73A17AECD928B
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/MeI7LUaem5W9TC7q6rvlgnyjdXc.roa
Signing time: Sun 01 Jan 2023 23:35:55 +0000
ROA not before: Sun 01 Jan 2023 23:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 18530
IP address blocks: 84.39.202.0/23 maxlen: 23
84.39.200.0/23 maxlen: 23
92.246.68.0/23 maxlen: 23
92.246.70.0/23 maxlen: 23
193.31.32.0/23 maxlen: 23
193.31.34.0/23 maxlen: 23
2.56.22.0/23 maxlen: 23
2.56.20.0/23 maxlen: 23
195.38.0.0/23 maxlen: 23
195.38.2.0/23 maxlen: 23
194.93.52.0/23 maxlen: 23
194.93.54.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:19:d4:60:89:90:97:82:f7:3a:17:ae:cd:92:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 1 23:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31e23b2d469e9b95bd4c2eeaeabbe5827ca37577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:65:4f:23:78:7c:47:4d:3e:d7:6c:c6:44:
3a:81:fc:a0:8c:c2:0f:14:de:61:b0:db:fa:44:38:
f7:c9:ef:27:08:75:ac:d1:9f:63:2b:3b:4f:63:9d:
0c:a4:44:25:37:40:4b:45:8e:33:f6:c2:6d:ea:c0:
ac:10:1c:42:b0:f6:e1:57:2f:8e:5c:26:ac:fa:80:
62:c6:88:90:4b:b4:c2:0b:7d:24:df:e1:9a:f5:fa:
b6:5d:97:1d:16:0a:ea:1e:d9:2b:a0:eb:6e:5b:1a:
4d:a3:6e:29:00:2f:cd:ef:5b:15:2e:00:f9:0a:db:
4d:bc:82:ee:a7:76:44:2f:f5:b4:2d:a0:1e:8b:c5:
b0:b8:fe:13:04:93:11:eb:17:ef:4b:a4:2d:b1:0f:
1a:e1:ae:1c:ab:19:f1:b5:a2:4e:37:ed:8c:b2:2b:
33:d4:a4:61:11:61:26:10:be:5f:39:48:39:cc:81:
94:23:a7:7e:c4:31:13:39:73:af:b7:13:7c:99:6a:
6d:49:62:31:39:e6:74:9b:b3:6b:b9:7b:6d:f4:94:
50:aa:f6:ef:b1:b3:ff:f5:2a:b6:cc:4d:c9:30:70:
4e:59:fc:e5:cf:85:15:af:0b:16:42:b3:81:43:24:
da:98:cf:53:ad:5e:dc:93:98:da:17:c3:20:a0:92:
af:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E2:3B:2D:46:9E:9B:95:BD:4C:2E:EA:EA:BB:E5:82:7C:A3:75:77
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/MeI7LUaem5W9TC7q6rvlgnyjdXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.20.0/22
84.39.200.0/22
92.246.68.0/22
193.31.32.0/22
194.93.52.0/22
195.38.0.0/22
Signature Algorithm: sha256WithRSAEncryption
13:55:d5:30:aa:01:c2:c6:70:6f:94:1c:57:8d:4f:a6:af:ca:
1f:63:0a:78:b4:0b:5f:f8:1f:2c:64:46:0d:f1:13:62:ce:e5:
af:3e:c9:1f:5e:94:7d:6d:d5:1e:80:26:4c:94:97:4a:04:62:
5d:46:dc:77:74:84:6b:37:b4:52:9e:12:81:2c:e9:79:00:82:
f8:fb:93:df:c6:7f:90:03:3b:5e:d1:3a:bc:62:40:0a:e2:29:
eb:6f:f6:bd:32:db:0d:88:e7:7c:d1:7d:9c:e1:ce:d1:4d:f9:
ef:13:4f:7e:50:0b:69:d0:fe:73:15:0b:c8:3d:6d:79:d9:50:
c8:2e:a4:c6:99:e7:6f:a2:33:e8:e4:5f:25:5d:3a:0f:4a:00:
ff:c3:f4:e4:d7:b4:ba:fa:48:11:c0:4d:99:82:2e:72:58:9c:
d2:bd:3d:3b:39:7e:80:e5:5f:9c:e1:01:61:6f:10:62:79:34:
b9:43:4f:5c:7b:79:c7:00:81:f4:d2:9a:e2:82:4d:51:10:82:
fe:52:df:76:ea:f5:11:f6:1d:e4:40:e3:51:e3:6b:4d:10:bb:
9e:2c:0e:96:d5:b2:02:d1:cb:ac:dd:1c:8d:29:27:09:8c:af:
da:32:55:2a:bb:9d:bc:03:bb:d0:9b:5b:d2:97:d9:92:c7:a9:
2c:3f:e5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:42 2024 by rpki-client on console-ams.rpki-client.org