Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_tde4978RdMjGQVk_B0soTuIZUE.roa
File: _tde4978RdMjGQVk_B0soTuIZUE.roa (raw, json)
Hash identifier: O2Omo45XopM8afxnEKJsyhTNO6Mz95s92UwoxolRiac=
Subject key identifier: FE:D7:5E:E3:DE:FC:45:D3:23:19:05:64:FC:1D:2C:A1:3B:88:65:41
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCB0B827C36376CAA7C0B1F8574DC55
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_tde4978RdMjGQVk_B0soTuIZUE.roa
Signing time: Sun 01 Jan 2023 10:05:23 +0000
ROA not before: Sun 01 Jan 2023 10:05:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206013
IP address blocks: 193.180.112.0/23 maxlen: 24
193.180.114.0/24 maxlen: 24
193.180.104.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:0b:82:7c:36:37:6c:aa:7c:0b:1f:85:74:dc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fed75ee3defc45d323190564fc1d2ca13b886541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:de:74:b7:09:69:b8:e9:32:51:66:f6:aa:43:
95:7e:eb:ca:41:ed:0a:e6:a6:0b:e4:32:89:31:b7:
a5:fb:b5:6c:c2:1c:ad:c7:45:50:5f:53:c7:ef:5a:
85:aa:f9:8f:c4:03:df:36:88:cc:77:95:21:93:15:
58:e6:e0:22:7a:f2:38:af:2c:a2:d9:1e:a4:5a:af:
49:5b:1c:de:a9:f6:bb:c9:1e:7e:8c:ea:dc:ba:4a:
f2:61:19:58:e5:b2:95:26:74:c8:bb:b0:5c:f6:70:
93:51:47:25:5b:4f:11:78:da:46:b8:af:d0:6a:44:
53:aa:e7:0a:01:27:16:d2:bf:15:a7:74:a6:fd:61:
b7:f9:71:36:6d:de:f9:f4:2b:da:55:2a:55:a7:cb:
19:bd:18:8d:69:32:bd:b4:75:27:f6:54:41:79:dd:
d1:93:2a:10:01:88:9e:15:79:d7:28:01:d7:39:16:
23:77:78:99:92:4c:4e:e8:6f:9a:c7:5e:37:c9:7b:
13:75:5f:63:8a:af:f3:90:37:4c:b0:34:90:ec:a6:
bc:57:e4:7a:bd:df:66:af:5a:e4:12:a4:87:e9:7f:
54:5e:67:6d:9e:47:33:ed:06:ca:5d:34:84:cf:64:
a4:d7:0d:a7:fe:e0:2f:da:33:b1:e0:cd:01:bc:9b:
6d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D7:5E:E3:DE:FC:45:D3:23:19:05:64:FC:1D:2C:A1:3B:88:65:41
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_tde4978RdMjGQVk_B0soTuIZUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.104.0-193.180.114.255
Signature Algorithm: sha256WithRSAEncryption
4a:04:71:15:6b:e3:8f:1a:82:4f:ac:9f:43:f0:50:28:aa:40:
09:f6:d0:9a:d4:fd:a3:41:ac:9c:02:f6:4b:56:3f:ae:2e:4f:
b6:ae:ed:06:24:bb:f1:4a:2b:29:d0:8a:0a:fd:33:0d:15:9a:
7e:01:2c:40:c1:43:2c:10:b8:df:84:8e:59:cb:f1:05:4b:c4:
62:14:77:37:5f:2f:a2:95:80:24:8a:76:27:19:cd:95:35:94:
8b:8e:1c:88:af:3e:26:9a:15:a4:30:9a:13:2d:cb:ad:6d:eb:
51:92:6e:5d:63:5e:c3:b0:a9:e2:16:c3:d2:90:8d:bb:2b:e3:
c2:5d:84:b6:5c:cb:9f:a7:49:86:fb:f8:de:0b:f1:4d:dc:41:
e1:19:41:77:5b:3d:76:45:2f:2e:70:e3:5c:80:73:f5:1b:1c:
ef:04:94:e1:e0:92:1f:ba:a0:96:75:1e:57:28:b1:13:40:8b:
87:c2:6c:70:a2:37:f0:ad:2a:9e:bf:f4:90:27:0e:71:4d:c4:
0f:46:51:81:4f:ed:08:72:77:6a:94:97:b4:44:68:0a:33:5f:
e7:1c:ea:6c:8a:22:c3:3e:31:b7:6e:3c:5f:f1:da:01:6b:77:
23:62:37:a7:e7:41:77:2c:52:aa:a0:21:9c:dd:b3:e7:cc:99:
42:4b:3d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:53 2024 by rpki-client on console-fra.rpki-client.org