Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/Ad_tdsqwS0QUJiuMRPXap4L-Uzc.roa
File: Ad_tdsqwS0QUJiuMRPXap4L-Uzc.roa (raw, json)
Hash identifier: j5Kbxdw56OcsyRmUWqgABosD0YK+HyR0AXZ2qSyRynI=
Subject key identifier: 01:DF:ED:76:CA:B0:4B:44:14:26:2B:8C:44:F5:DA:A7:82:FE:53:37
Certificate issuer: /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Certificate serial: 01857102CAC53D55DE849D6BEE87D4E3016D
Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/Ad_tdsqwS0QUJiuMRPXap4L-Uzc.roa
Signing time: Mon 02 Jan 2023 05:44:46 +0000
ROA not before: Mon 02 Jan 2023 05:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.36.227.0/24 maxlen: 24
193.36.179.0/24 maxlen: 24
193.36.185.0/24 maxlen: 24
193.36.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:ca:c5:3d:55:de:84:9d:6b:ee:87:d4:e3:01:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Validity
Not Before: Jan 2 05:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01dfed76cab04b4414262b8c44f5daa782fe5337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:58:4f:3d:ec:a7:5c:0d:f6:03:eb:0c:65:80:
78:e9:55:13:b9:35:7d:1d:fa:14:5e:75:d5:8a:1e:
a5:68:40:19:14:ce:0a:8c:af:16:23:ba:fe:04:f9:
cf:40:08:5a:fd:03:e3:0f:df:90:08:cd:ae:40:b8:
d3:0d:ad:51:56:67:38:9c:02:f3:bb:36:5e:46:42:
86:29:61:6f:ef:c2:4d:c0:05:40:c6:c1:76:8f:33:
30:6c:f1:13:98:0d:01:b3:17:2c:94:5c:c8:e0:4d:
d6:e5:33:06:5d:2b:f1:78:d0:94:9a:d0:b1:78:7b:
9a:1e:99:55:1f:97:c6:49:02:80:a1:f6:5b:50:7a:
4c:15:70:16:32:b9:77:ac:05:96:bf:78:4c:10:9a:
cd:90:49:8f:8a:1c:52:ee:a3:8b:d0:74:59:3f:13:
e5:1e:47:da:fc:33:0c:3a:1c:2b:e0:03:dc:1f:f6:
dd:a9:89:04:ed:73:89:89:a5:69:ea:6d:01:62:cb:
c3:2c:6f:e7:11:d3:1b:3f:cd:8b:38:03:e3:2e:3d:
a2:fe:84:7a:d0:69:ad:2f:94:df:fc:99:37:b1:e5:
8b:76:d8:a7:46:69:63:80:dd:b6:eb:bd:40:d6:6e:
b8:f2:de:d5:b9:5b:87:7d:c1:be:9b:f6:c5:fb:f4:
f8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DF:ED:76:CA:B0:4B:44:14:26:2B:8C:44:F5:DA:A7:82:FE:53:37
X509v3 Authority Key Identifier:
keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/Ad_tdsqwS0QUJiuMRPXap4L-Uzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.179.0/24
193.36.185.0/24
193.36.187.0/24
193.36.227.0/24
Signature Algorithm: sha256WithRSAEncryption
19:d5:d5:06:ff:5a:7a:9f:6b:a4:06:58:3c:25:9c:fb:56:2b:
d2:9a:ce:dc:fb:e7:f0:8b:24:2e:e5:99:88:24:48:c2:07:7e:
d1:8a:8c:e2:09:29:00:3e:fb:51:87:79:2c:48:23:84:76:da:
93:e6:c4:9e:38:f7:bf:87:ad:1f:a0:a3:2a:b9:e7:2f:86:01:
f4:9b:d6:d6:c5:a7:10:d8:7b:80:12:2e:6b:81:3e:c0:ea:87:
a9:4c:2b:0a:e3:14:61:55:b2:6b:a0:30:0e:dd:fa:78:84:fa:
60:1a:04:92:20:dd:94:3a:58:15:34:67:2b:db:cc:ac:29:bb:
7d:0d:6e:80:6b:72:36:b4:12:4b:03:82:32:0d:59:04:64:0a:
13:f2:e5:89:cd:db:d4:0e:5a:ea:c2:57:3b:5b:3e:08:17:51:
1e:f6:da:1c:a3:6d:81:fb:31:e2:3d:cc:1d:c0:ce:d2:09:03:
03:40:f2:b3:01:72:ec:c7:f9:60:6f:5e:43:72:6a:66:ef:d0:
0a:7e:cf:d6:7a:ee:76:59:6b:5a:fa:15:50:a3:b2:9d:c0:92:
b4:6d:ab:e7:5c:c3:5a:ee:48:9f:83:20:b6:ab:de:99:0b:36:
97:9b:95:f0:5f:a5:38:06:25:76:e0:10:0e:5d:3a:67:41:2b:
b6:6b:98:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:39 2023 by rpki-client on console-fra.rpki-client.org