Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/2rFzdSyIHgIq4B7I2ctlbWp-m_0.roa
File: 2rFzdSyIHgIq4B7I2ctlbWp-m_0.roa (raw, json)
Hash identifier: YL09Jhmht4h87IL0JFXr195034jjvdaY272/o+wAOuY=
Subject key identifier: DA:B1:73:75:2C:88:1E:02:2A:E0:1E:C8:D9:CB:65:6D:6A:7E:9B:FD
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAC7CF66CB360153994114926E2851
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/2rFzdSyIHgIq4B7I2ctlbWp-m_0.roa
Signing time: Sun 01 Jan 2023 10:05:06 +0000
ROA not before: Sun 01 Jan 2023 10:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 193.234.82.0/24 maxlen: 24
193.182.245.0/24 maxlen: 24
193.180.119.0/24 maxlen: 24
193.234.18.0/24 maxlen: 24
193.235.104.0/24 maxlen: 24
193.235.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:c7:cf:66:cb:36:01:53:99:41:14:92:6e:28:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dab173752c881e022ae01ec8d9cb656d6a7e9bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:39:7d:d2:73:64:6a:f2:9c:a3:cd:83:5b:ac:
72:26:40:07:d4:ec:7a:c5:6a:c2:d9:ae:a1:07:be:
16:a0:7f:ab:97:4c:08:08:8f:4f:58:1d:df:8e:89:
bb:e1:09:e8:db:9f:04:7b:46:c0:f2:b7:9e:f1:85:
a4:5c:f7:15:2e:a5:fc:0b:d6:46:5a:3f:69:74:1a:
f9:7a:fb:52:2f:d2:50:d9:b4:18:fb:44:a6:7f:e8:
6c:63:c6:84:07:9a:9c:c3:24:da:eb:67:22:72:e8:
45:02:8f:1d:e1:5a:f5:e0:67:db:03:4b:ef:d8:8f:
16:b9:a2:e3:ed:4e:31:e7:d7:62:5d:1f:e5:7e:60:
fe:be:1e:a2:cd:6b:62:84:bc:ff:50:e9:d7:bc:8a:
af:5d:c9:f9:5d:a9:60:6e:7b:04:b0:31:7b:a7:2d:
47:05:60:b9:5d:64:da:c9:a5:65:34:05:5d:ed:32:
3d:67:0f:28:ce:90:8c:5a:51:8d:6b:ce:cc:10:40:
52:74:2f:98:35:56:49:f4:5e:6f:b9:1e:19:b8:86:
ec:4d:d2:77:7b:e4:cc:9d:69:93:4d:cd:f3:4a:3b:
d0:63:28:37:05:45:64:6c:7d:71:2a:96:8d:c7:75:
f3:17:d1:53:f2:0c:f6:2f:60:15:4c:83:63:b3:72:
d2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B1:73:75:2C:88:1E:02:2A:E0:1E:C8:D9:CB:65:6D:6A:7E:9B:FD
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/2rFzdSyIHgIq4B7I2ctlbWp-m_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.119.0/24
193.182.245.0/24
193.234.18.0/24
193.234.82.0/24
193.235.104.0/24
193.235.106.0/24
Signature Algorithm: sha256WithRSAEncryption
83:90:70:95:08:65:00:4a:b8:41:db:10:cc:9e:74:5d:60:f1:
50:d8:84:20:06:54:b1:27:ff:e7:73:71:20:49:39:20:43:a9:
28:bd:16:40:05:1b:01:7b:06:07:a7:8f:fd:e2:20:43:03:cb:
73:c8:9c:37:fd:43:19:72:a0:38:64:fa:da:25:b0:7a:41:da:
96:90:72:0d:c8:f8:02:4d:f9:32:10:32:e3:41:35:69:27:17:
4f:eb:cf:1c:b7:c6:fa:93:22:f6:eb:b0:a9:44:88:50:0e:89:
08:92:5a:b0:5f:c6:87:7c:d8:44:66:c3:8c:da:1e:52:30:c3:
cb:6e:9f:e9:77:4f:89:a1:77:cc:1e:82:10:b8:bf:37:8f:44:
92:aa:6d:01:b5:11:6e:9f:4b:c4:cd:a3:77:cc:bd:b8:eb:f6:
92:87:25:10:19:3b:c2:50:4b:d3:d1:fb:e0:cf:d2:f9:9a:7c:
58:3d:12:c1:79:5e:a7:53:12:27:04:6c:fe:22:47:d5:2f:b0:
16:e7:5f:0a:49:c6:80:41:0c:96:9e:c9:66:99:6e:4d:f6:75:
49:c7:cf:43:ef:2b:87:69:e4:00:c6:36:7e:1e:65:6f:83:3e:
f1:a8:eb:4a:99:90:29:70:08:24:e6:d3:8d:f3:8b:da:0e:0b:
e2:de:85:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 13:41:50 2023 by rpki-client on console-ams.rpki-client.org