Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/o5eqk96ipjotdnMd_74s9ZdsGow.roa
File: o5eqk96ipjotdnMd_74s9ZdsGow.roa (raw, json)
Hash identifier: XYR/7t7pPX+sCTdtu1f4PVON6NOGQvCdH2dO5pt8qkQ=
Subject key identifier: A3:97:AA:93:DE:A2:A6:3A:2D:76:73:1D:FF:BE:2C:F5:97:6C:1A:8C
Certificate issuer: /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Certificate serial: 01856D0AC6FE3C518AE4046F6769F5F5B85C
Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/o5eqk96ipjotdnMd_74s9ZdsGow.roa
Signing time: Sun 01 Jan 2023 11:15:00 +0000
ROA not before: Sun 01 Jan 2023 11:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29240
IP address blocks: 193.143.99.0/24 maxlen: 24
193.143.100.0/24 maxlen: 24
193.143.100.0/22 maxlen: 22
193.143.104.0/21 maxlen: 21
193.143.112.0/22 maxlen: 22
193.143.116.0/23 maxlen: 23
193.143.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:c6:fe:3c:51:8a:e4:04:6f:67:69:f5:f5:b8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Validity
Not Before: Jan 1 11:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a397aa93dea2a63a2d76731dffbe2cf5976c1a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:29:35:36:90:19:50:b7:9d:e6:dc:94:c5:8d:
8e:37:18:47:7f:73:2a:d0:f8:b1:3f:9e:19:4a:86:
9e:41:a2:99:91:7e:cc:f5:e7:5c:77:6f:da:f7:c7:
bb:a8:1b:67:89:ad:c6:66:0a:fb:2c:ca:eb:50:6e:
9a:54:21:00:5b:2c:83:8a:a4:3d:1b:bf:2b:54:06:
69:2d:4d:22:bc:2f:82:a6:51:9f:4d:3d:e7:26:42:
68:a1:3d:3f:25:91:dd:c4:16:aa:0d:2b:30:95:ef:
6a:29:fe:62:16:7a:1e:96:49:47:94:c7:59:7d:95:
7d:75:5c:34:6a:de:f8:d6:c8:d1:0c:62:11:ac:61:
90:31:f4:24:a0:87:f8:20:59:ed:75:1f:ce:f9:11:
eb:fb:da:4b:f6:01:91:71:22:f5:80:fa:d0:3a:1c:
54:9f:69:e7:98:80:11:b6:9a:4a:63:fe:21:19:69:
56:8e:52:f8:64:1c:83:a5:1e:ef:39:6c:30:34:d4:
cc:07:62:08:ee:74:d8:53:83:a5:7e:e5:e7:b6:65:
48:ba:51:c0:93:3f:e1:a1:96:0f:50:66:dd:91:53:
a4:8a:2f:b7:7e:44:1b:08:18:a9:16:da:e6:ec:07:
21:0c:f3:98:11:73:54:55:f5:89:1e:b5:be:72:cf:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:97:AA:93:DE:A2:A6:3A:2D:76:73:1D:FF:BE:2C:F5:97:6C:1A:8C
X509v3 Authority Key Identifier:
keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/o5eqk96ipjotdnMd_74s9ZdsGow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.99.0-193.143.118.255
Signature Algorithm: sha256WithRSAEncryption
89:99:8a:86:53:bb:97:18:c8:7c:6c:c5:9a:4f:6b:cd:9f:8e:
14:ba:fd:ee:a4:6d:73:dd:d5:18:06:ee:5c:ed:ec:dc:d8:96:
76:bc:67:c9:3b:94:0f:bb:6c:3a:a9:06:83:84:2a:7f:a2:3f:
45:20:21:56:18:5a:49:56:7c:26:50:c3:77:d2:63:55:8b:4d:
05:8a:92:78:fe:d1:7c:50:98:15:29:e9:c8:91:f8:5e:03:24:
8d:f0:a9:c4:0f:a4:e1:a3:1c:14:1e:31:5d:4d:36:b4:64:08:
62:6c:83:82:fb:1a:ea:f4:a4:92:1b:48:40:dd:46:2c:87:dc:
ca:74:51:51:2d:7b:38:09:42:e5:77:fc:a0:2f:35:b4:c4:b7:
46:28:bb:3e:f9:6e:7a:8a:62:d6:45:b3:46:c8:27:79:4e:fc:
ab:83:35:d3:42:bf:20:4d:59:90:a1:4d:94:3e:ef:22:ca:5f:
63:bc:2c:3b:0e:15:1a:bc:3e:a2:f2:aa:c2:63:cd:70:78:a2:
72:63:48:21:be:46:aa:51:a0:b4:7e:c2:e9:5f:1c:6c:24:0a:
c2:24:fa:af:02:3e:2a:1b:c5:1c:f2:59:fe:57:60:ee:49:3b:
9c:43:dc:bd:60:e4:00:af:7e:2a:73:c9:9a:a4:47:fa:80:3a:
71:0d:e9:bd
-----BEGIN CERTIFICATE-----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Generated at Tue Sep 19 08:24:12 2023 by rpki-client on console-fra.rpki-client.org