Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-2hEL69uy-C0XSklOpj_DbMUvZM.roa
File: 1-2hEL69uy-C0XSklOpj_DbMUvZM.roa (raw, json)
Hash identifier: EAtF7TaSSO4JtH7t/FXmIVagZt5vWBAreErjhZsjpFg=
Subject key identifier: FB:68:44:2F:AF:6E:CB:E0:B4:5D:29:25:3A:98:FF:0D:B3:14:BD:93
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAFE8F2105F2E5697B72014B132250
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-2hEL69uy-C0XSklOpj_DbMUvZM.roa
Signing time: Sun 01 Jan 2023 10:05:20 +0000
ROA not before: Sun 01 Jan 2023 10:05:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197942
IP address blocks: 193.234.81.0/24 maxlen: 24
194.103.18.0/24 maxlen: 24
193.180.160.0/23 maxlen: 23
192.36.180.0/24 maxlen: 24
194.71.64.0/22 maxlen: 22
194.71.68.0/22 maxlen: 22
194.14.218.0/24 maxlen: 24
194.71.72.0/21 maxlen: 21
194.71.81.0/24 maxlen: 24
194.71.80.0/24 maxlen: 24
194.71.82.0/24 maxlen: 24
193.183.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:fe:8f:21:05:f2:e5:69:7b:72:01:4b:13:22:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb68442faf6ecbe0b45d29253a98ff0db314bd93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8c:fe:7f:e2:c1:d6:7b:21:72:80:ba:a6:c7:
50:86:da:1d:be:78:cc:92:78:3f:5c:29:17:17:54:
d7:42:66:1e:f3:f5:b9:52:59:31:59:81:48:fd:fa:
c2:68:5e:d1:02:fe:f0:4e:b7:0b:4b:4a:d6:0f:97:
8d:11:a6:26:d4:ec:76:86:46:01:e1:33:68:05:1f:
0b:5c:64:60:f5:ae:8f:4e:cd:cb:66:6c:d6:22:e0:
8f:f8:51:f2:fa:ea:f6:a5:00:1b:31:a4:49:87:74:
e0:9f:4b:20:27:aa:bf:ac:65:21:ce:51:3d:ef:de:
68:57:e9:55:e3:49:ef:a0:c8:94:f9:f6:21:8e:e0:
78:a2:c2:c9:a2:7b:31:8d:f2:76:ef:d3:27:68:e7:
b3:14:d5:cd:ab:fa:4e:6c:06:a9:15:fa:c3:ee:3d:
a4:a5:0e:47:9a:31:41:eb:b5:bd:fb:f1:80:cc:45:
44:62:6c:7c:34:8a:f7:c1:c6:8b:ea:f2:3c:92:16:
ba:2a:a2:fd:5b:57:dd:6a:08:23:8b:9d:16:29:0e:
7c:eb:9b:b8:6f:e5:9a:57:e2:e4:10:fc:f2:78:9e:
c4:4c:0e:84:f4:2c:0d:be:de:59:67:2b:ef:6b:84:
42:4b:00:47:61:73:e8:9f:f8:aa:ca:ca:40:7b:1f:
6b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:68:44:2F:AF:6E:CB:E0:B4:5D:29:25:3A:98:FF:0D:B3:14:BD:93
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-2hEL69uy-C0XSklOpj_DbMUvZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.180.0/24
193.180.160.0/23
193.183.188.0/24
193.234.81.0/24
194.14.218.0/24
194.71.64.0-194.71.82.255
194.103.18.0/24
Signature Algorithm: sha256WithRSAEncryption
86:c8:79:0b:20:2b:bf:ad:c9:0e:f9:63:17:2f:85:34:d2:e6:
f3:f6:2d:77:a8:5f:b2:5b:36:42:44:27:48:bd:cf:e4:4c:bf:
31:39:4b:06:2b:b1:c6:7d:d0:e6:84:c3:41:a9:d1:2c:9f:5f:
3c:2c:0e:76:91:37:06:da:25:25:ec:88:15:87:7a:20:86:69:
e0:b6:fe:9f:a7:18:01:5a:a9:bd:4c:7b:76:90:3d:9d:05:eb:
fa:4f:9a:95:d0:5c:9d:5f:1a:03:5c:f2:7f:4b:1f:99:34:9a:
7a:21:83:48:9f:65:d2:9e:35:1c:89:14:39:b3:27:b3:60:18:
95:d5:78:07:af:a0:6b:06:fc:55:66:37:70:ae:bb:a6:e4:e0:
a6:27:b1:fd:5c:7c:77:05:a1:9f:de:11:b7:73:8a:3c:ec:8e:
59:c9:b7:22:de:4a:2b:b5:1b:da:32:9e:be:20:71:09:5c:c4:
38:bf:71:01:de:2a:f8:d1:c6:1f:73:b1:90:3b:d8:18:82:c2:
83:cf:b9:1f:89:3f:54:54:2d:91:a0:87:71:9a:9a:04:13:f3:
17:2b:0d:21:a2:cf:80:e8:b0:52:57:ed:88:d4:ed:c3:26:f5:
30:bd:37:8c:86:1a:b1:91:2b:db:32:b7:5d:c7:84:8f:6b:51:
c7:2e:e8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:38 2023 by rpki-client on console-ams.rpki-client.org