Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/7VeAb2wD1zBk3lHLsCBfayEtrAU.roa
File: 7VeAb2wD1zBk3lHLsCBfayEtrAU.roa (raw, json)
Hash identifier: TSKK2y9c9yY1A1q8sMj6/+G3xRpRiisr88TY+ZEx/zU=
Subject key identifier: ED:57:80:6F:6C:03:D7:30:64:DE:51:CB:B0:20:5F:6B:21:2D:AC:05
Certificate issuer: /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Certificate serial: 018AAC6450F7CE4696ABB7806EFA4034167C
Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/7VeAb2wD1zBk3lHLsCBfayEtrAU.roa
Signing time: Tue 19 Sep 2023 07:42:50 +0000
ROA not before: Tue 19 Sep 2023 07:42:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1759
IP address blocks: 193.143.104.0/21 maxlen: 21
193.143.101.0/24 maxlen: 24
193.143.100.0/24 maxlen: 24
193.143.99.0/24 maxlen: 24
193.143.102.0/23 maxlen: 23
193.143.112.0/22 maxlen: 22
193.143.118.0/24 maxlen: 24
193.143.116.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:64:50:f7:ce:46:96:ab:b7:80:6e:fa:40:34:16:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Validity
Not Before: Sep 19 07:42:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed57806f6c03d73064de51cbb0205f6b212dac05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:35:c9:7d:d6:e1:22:85:fc:1f:25:95:03:
67:d9:b1:9b:b2:6f:2f:88:e5:87:f9:37:5a:42:2b:
a5:a9:db:01:c1:1d:66:65:55:8d:9b:e5:ce:21:9e:
99:aa:21:e0:ec:02:f4:2d:5e:a3:8b:09:9c:0d:61:
70:4b:4b:28:93:bb:41:52:1e:c1:da:60:cb:97:22:
c1:da:95:b1:f0:7a:6a:03:bb:8b:c4:31:50:9e:4b:
94:02:05:48:28:e2:e0:8a:52:ab:36:71:b6:18:65:
cd:5f:44:cf:d7:c4:6e:cb:77:ee:1c:bf:02:70:14:
91:cb:32:62:3c:c4:34:b7:e4:dd:e7:9a:9a:c8:d1:
e8:10:27:e7:34:f4:f6:eb:16:89:d9:80:31:90:1c:
4d:70:13:0f:a5:28:53:42:5d:17:02:b1:83:8b:84:
56:0e:3a:10:f8:05:a4:11:2e:75:69:3c:d8:04:d0:
b1:cc:e4:0a:63:63:00:77:85:ff:8a:b1:aa:f2:9c:
65:9d:d9:57:ef:06:89:17:bf:6e:2f:4b:a9:37:3a:
02:82:88:bb:8f:e2:4c:49:e8:a6:91:27:39:9e:b9:
8c:73:4a:b9:95:ab:14:00:c4:d9:16:f5:04:c4:1d:
72:12:d4:c4:1e:3c:63:d7:e6:bc:c1:01:8c:dc:f6:
6e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:57:80:6F:6C:03:D7:30:64:DE:51:CB:B0:20:5F:6B:21:2D:AC:05
X509v3 Authority Key Identifier:
keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/7VeAb2wD1zBk3lHLsCBfayEtrAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.99.0-193.143.118.255
Signature Algorithm: sha256WithRSAEncryption
4c:2b:23:8f:d5:59:1d:f0:ad:7a:02:e2:57:a5:20:f9:9d:f6:
01:11:2c:43:ad:60:c8:7b:64:d0:22:9c:29:db:6c:85:03:22:
ea:a5:c5:c1:ee:72:e0:92:61:a5:f8:da:f9:80:94:d1:1e:43:
53:68:67:cc:35:60:d6:30:05:7f:f6:c5:ca:b1:fa:8a:0e:b3:
f9:29:a2:75:e6:0b:7b:59:68:7d:72:7a:aa:d6:a1:f9:dc:de:
83:ab:08:b7:e7:e6:d8:a0:51:88:8e:91:5c:ab:e8:6a:f2:bd:
80:84:3d:1e:96:b3:ef:d4:12:05:9b:a8:22:c8:af:94:11:75:
f4:1c:52:f8:19:f2:8f:0b:34:51:d7:86:a6:90:10:9f:07:a5:
90:0d:3c:44:01:a0:12:ec:b6:3b:c2:77:7a:33:65:6e:ce:63:
da:bd:7b:73:e8:d4:b1:53:c0:98:33:e8:49:83:d1:ad:19:e3:
b1:88:92:fd:7a:db:93:a3:30:bd:a9:14:2d:07:8f:b1:41:4a:
2a:8d:0a:e1:de:c7:2f:7c:a4:55:ab:a0:85:d4:4a:69:13:72:
dd:dd:ae:6a:b8:a7:0b:90:5e:a1:6a:87:f7:0f:8c:b0:08:f5:
ec:c8:db:34:b7:e2:22:64:d2:d4:4b:7a:40:39:c0:c3:c6:86:
07:2a:3b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:37 2024 by rpki-client on console-ams.rpki-client.org