Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/TrbLUMZFhKwlDHfmO1XJL4K7-wY.roa
File: TrbLUMZFhKwlDHfmO1XJL4K7-wY.roa (raw, json)
Hash identifier: 742zrzNaKHGTeyaF0cdPFaHo5uB4n6AghBxvn4b58Nc=
Subject key identifier: 4E:B6:CB:50:C6:45:84:AC:25:0C:77:E6:3B:55:C9:2F:82:BB:FB:06
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 0186E0108F7F7603B9EBAFB0D3A6097EDB34
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/TrbLUMZFhKwlDHfmO1XJL4K7-wY.roa
Signing time: Tue 14 Mar 2023 12:20:27 +0000
ROA not before: Tue 14 Mar 2023 12:20:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 171.22.248.0/23 maxlen: 24
185.244.10.0/24 maxlen: 24
194.116.248.0/22 maxlen: 24
193.42.224.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e0:10:8f:7f:76:03:b9:eb:af:b0:d3:a6:09:7e:db:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Mar 14 12:20:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4eb6cb50c64584ac250c77e63b55c92f82bbfb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0e:f0:40:f9:6f:6b:f3:09:f9:b2:ec:14:3d:
68:47:8f:8f:75:77:42:d4:30:52:21:f5:69:98:c6:
e2:83:37:7f:40:69:ed:cc:c1:e1:60:12:3e:1a:5a:
b6:ac:07:3e:ec:f2:c8:9f:53:33:64:fb:ea:cf:d3:
84:2b:9b:00:c9:03:8d:f7:e2:0f:db:1f:d2:04:d4:
1e:1c:18:f2:c0:e3:b4:ba:38:f1:bd:50:2e:cf:dc:
0d:3f:5c:38:dd:02:36:52:54:eb:48:51:19:8f:72:
34:e6:d0:fd:ac:7c:28:1b:ca:b1:63:5d:a9:ac:c6:
91:3c:06:e5:95:16:30:69:2a:d1:0e:6c:d1:85:e0:
f5:94:92:ed:54:dc:45:c0:06:5b:bf:87:4e:d6:bd:
21:86:14:27:ce:78:55:2b:3a:6a:a5:b3:75:ff:a0:
be:d3:57:15:92:ac:0c:42:c2:c5:24:be:45:94:6a:
6d:d5:f6:87:af:df:e4:dd:6a:f9:54:51:09:56:7b:
52:b0:2b:1e:a3:c0:b4:39:ed:4c:6d:a5:12:d8:4f:
75:21:c7:5c:51:9b:9f:ea:8c:d9:65:96:df:7f:f3:
70:85:8f:f2:f9:f5:18:1b:4d:65:e2:ed:5b:d9:e2:
e0:f5:d2:b5:bf:de:06:0f:35:12:87:44:56:8b:1e:
d8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B6:CB:50:C6:45:84:AC:25:0C:77:E6:3B:55:C9:2F:82:BB:FB:06
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/TrbLUMZFhKwlDHfmO1XJL4K7-wY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.248.0/23
185.244.10.0/24
193.42.224.0/22
194.116.248.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:36:16:0d:d9:ef:05:ac:82:8e:c4:3e:85:1c:a0:b7:22:83:
18:b7:b3:da:49:b0:97:e1:1d:4d:f3:da:16:8e:06:c0:e2:2c:
1f:83:3e:ff:24:ea:a2:1a:cb:5f:90:4d:b0:73:3d:b6:33:8b:
8e:b8:b0:77:47:a6:93:c1:3a:c5:1f:10:87:8c:18:8b:13:bc:
bb:72:8f:84:0a:7c:b1:04:cb:ec:c8:82:78:64:90:29:63:9c:
fc:2b:ab:0e:55:c9:c0:c5:9b:63:bb:b3:75:16:c8:be:8c:96:
9b:6c:7c:72:6a:32:92:a5:f8:54:d0:71:e0:c5:c0:1d:9d:19:
5d:ad:a3:e5:bb:84:b5:de:7e:98:5f:a2:d4:5a:63:e9:64:79:
33:cb:41:4d:91:a3:c5:c0:16:31:c4:42:46:42:d9:6d:84:94:
12:7e:7a:93:38:5b:0c:a8:ed:e0:c0:09:56:be:68:46:19:42:
d5:75:2e:e7:12:9a:5c:50:39:47:d7:9f:8f:b1:93:95:fa:42:
cc:1d:b0:96:30:fd:dc:5a:36:cb:cc:19:0c:88:10:db:9e:6d:
46:8c:5e:2f:f0:de:8d:a0:82:2e:48:44:c9:33:01:c2:b4:87:
4c:1e:74:5f:10:25:2f:88:27:33:95:b0:9e:7a:94:44:e1:5c:
f8:d9:87:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:19 2023 by rpki-client on console-fra.rpki-client.org