Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/EoN1hk1V3v4ATWkyhoHxIH5BYGE.roa
File: EoN1hk1V3v4ATWkyhoHxIH5BYGE.roa (raw, json)
Hash identifier: Zg2Nefh5m6qvoslVhBnjPOCgbH4/9KtWsj7jXV580HQ=
Subject key identifier: 12:83:75:86:4D:55:DE:FE:00:4D:69:32:86:81:F1:20:7E:41:60:61
Certificate issuer: /CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Certificate serial: 0189B59B8FFC1C0B2743B50307A66552DB23
Authority key identifier: 58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/EoN1hk1V3v4ATWkyhoHxIH5BYGE.roa
Signing time: Wed 02 Aug 2023 09:36:58 +0000
ROA not before: Wed 02 Aug 2023 09:36:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211895
IP address blocks: 193.111.32.0/24 maxlen: 24
2a0f:8cc0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:9b:8f:fc:1c:0b:27:43:b5:03:07:a6:65:52:db:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Validity
Not Before: Aug 2 09:36:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=128375864d55defe004d69328681f1207e416061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9f:81:9b:ac:24:33:5f:30:40:3b:5b:6c:db:
aa:57:37:bc:19:1d:25:f6:0c:42:a7:7d:f4:e3:44:
41:6f:e6:ec:2c:3f:70:5b:bd:2a:42:c5:64:a6:7f:
35:4b:19:c5:30:bd:3a:e7:6d:f8:f6:48:c7:25:d6:
6e:eb:ec:31:ba:e8:01:2b:4d:98:c7:3e:f6:a7:85:
ee:7a:23:d7:5d:f9:d1:e3:6d:62:d4:b1:a5:95:ed:
16:82:7e:bf:e9:f7:3f:e2:fa:8a:96:41:f0:19:be:
99:55:a1:e1:ac:df:1c:ce:a4:0e:1a:5d:20:b6:57:
f6:16:7c:eb:aa:cf:cd:30:50:e0:42:53:be:c9:c8:
a1:1a:3f:54:70:18:52:b7:cb:3b:bf:35:3e:b9:96:
a2:e7:e3:b2:68:df:8b:4c:09:9f:a5:7f:74:68:16:
4d:fd:2e:19:d2:f1:72:2e:fb:c0:1b:92:61:5c:5e:
2d:75:86:ea:0e:dc:e3:78:9e:59:0c:42:0f:40:d7:
49:a0:45:be:14:f4:38:2e:a0:18:e3:de:ba:55:7a:
5e:9a:90:3f:17:8b:72:89:b9:bf:9f:ca:7c:a6:1c:
6c:34:89:97:b4:05:8d:3a:0b:a4:02:34:d7:a3:d6:
0e:f8:e9:7d:af:07:ad:37:f1:9a:39:61:83:6d:53:
1b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:83:75:86:4D:55:DE:FE:00:4D:69:32:86:81:F1:20:7E:41:60:61
X509v3 Authority Key Identifier:
keyid:58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/EoN1hk1V3v4ATWkyhoHxIH5BYGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.32.0/24
IPv6:
2a0f:8cc0::/48
Signature Algorithm: sha256WithRSAEncryption
af:78:6c:70:cb:63:80:d8:f6:21:4f:d2:16:e8:83:d1:6b:07:
ce:24:3c:a3:1d:8a:69:b2:9d:32:f3:d7:4f:8a:c1:4e:63:bf:
ce:b4:3b:e6:45:a2:ff:31:6c:b9:f8:17:b1:d7:3f:53:be:73:
03:d9:bf:d6:9d:50:f4:11:e1:08:a9:e6:47:cd:65:39:6c:f0:
ae:53:df:6f:cc:82:12:56:bb:0d:9c:d1:22:19:bc:54:95:23:
e5:8f:14:78:5e:33:04:11:2a:ca:ec:49:c9:a7:ed:a8:31:55:
d8:de:a1:73:3b:eb:b0:35:aa:08:f4:ff:e0:4e:78:7a:3b:ea:
cc:3c:3f:ba:c0:e5:9b:b4:32:f6:f3:db:22:8d:89:b6:1f:9a:
8f:6b:bb:02:8a:ff:4b:fd:fa:5a:5e:af:ca:bf:9c:98:ac:7c:
8f:5e:f6:27:96:ca:96:5a:11:e9:9f:07:80:8b:19:64:5f:f8:
e2:6d:56:c8:9b:a6:49:18:d0:04:d6:b6:b6:8e:41:d1:9f:d4:
bd:2c:2a:8e:4f:7a:b5:4c:aa:57:c7:71:76:8c:c6:21:ed:86:
44:09:0d:14:2a:1b:81:9a:ab:bb:95:b1:cb:25:cc:c4:3e:da:
82:9f:15:21:0b:f1:c4:01:36:8d:3c:e1:30:79:92:17:ec:fe:
b8:04:64:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:58 2024 by rpki-client on console-ams.rpki-client.org