Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/eLds6TfwaywgNf-ZzvXsBWB2EqU.roa
File: eLds6TfwaywgNf-ZzvXsBWB2EqU.roa (raw, json)
Hash identifier: Gz870LSqAn5UeyIf0faDI7mTJK1rZIetYjsyFWKHjvo=
Subject key identifier: 78:B7:6C:E9:37:F0:6B:2C:20:35:FF:99:CE:F5:EC:05:60:76:12:A5
Certificate issuer: /CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Certificate serial: 01856F14CB3A3F4BBC6E27E0D241426E08C8
Authority key identifier: CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/eLds6TfwaywgNf-ZzvXsBWB2EqU.roa
Signing time: Sun 01 Jan 2023 20:45:11 +0000
ROA not before: Sun 01 Jan 2023 20:45:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39570
IP address blocks: 93.188.4.0/22 maxlen: 22
93.188.0.0/24 maxlen: 24
93.188.1.0/24 maxlen: 24
93.188.2.0/23 maxlen: 23
194.9.94.0/23 maxlen: 23
2a02:250:ffff::/48 maxlen: 48
2a02:250::/33 maxlen: 33
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:cb:3a:3f:4b:bc:6e:27:e0:d2:41:42:6e:08:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Validity
Not Before: Jan 1 20:45:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78b76ce937f06b2c2035ff99cef5ec05607612a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:dc:e3:bd:55:6c:d5:3b:c3:f1:73:ea:b5:ed:
e6:69:9c:54:2a:38:0e:c6:3c:1f:90:b3:bb:4d:70:
21:89:03:51:ca:a8:e9:c2:ff:38:3d:38:c5:5d:97:
a7:24:46:69:8c:fa:ef:69:6c:cf:63:4c:09:f7:63:
a6:11:4c:7e:63:50:16:4d:08:be:96:1a:6a:24:98:
f6:fb:08:ff:c7:09:57:61:e5:d0:0e:85:d4:ca:bb:
93:61:84:9f:99:f8:84:94:f5:96:68:ec:80:18:b9:
ad:9e:e2:62:89:ae:bd:c4:1d:1b:18:e2:2e:79:3a:
77:ce:40:1b:82:51:97:15:32:8c:9f:62:32:38:59:
96:85:39:c0:bd:1d:f7:16:88:53:95:7c:b2:fb:3a:
6c:78:60:1d:5f:f3:05:61:75:cd:d3:18:66:9e:c5:
99:24:02:81:d8:81:2a:4b:77:52:1f:d2:d5:64:d0:
b1:d6:87:7f:6d:14:a0:82:df:e9:6d:5a:da:cc:57:
89:02:b6:6f:7f:45:fa:09:8a:5a:1c:86:10:99:9f:
3f:47:a5:e1:c9:97:cd:aa:a0:ad:dc:01:04:1b:59:
65:60:be:80:4a:d9:6a:1c:f2:de:dc:c6:6d:dc:00:
6f:39:21:5f:40:f6:26:da:22:88:f2:62:27:15:c0:
ec:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B7:6C:E9:37:F0:6B:2C:20:35:FF:99:CE:F5:EC:05:60:76:12:A5
X509v3 Authority Key Identifier:
keyid:CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/eLds6TfwaywgNf-ZzvXsBWB2EqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.0.0/21
194.9.94.0/23
IPv6:
2a02:250::/33
2a02:250:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
21:09:38:87:93:d3:69:8d:cf:b6:ea:30:be:46:78:8f:98:84:
f4:16:af:38:04:e5:ac:b2:ca:96:e1:20:90:f2:d5:6d:fe:d7:
ae:41:6d:3f:2a:ba:73:8e:11:34:30:c1:30:14:b8:32:a9:3a:
d4:69:cf:0f:de:da:8a:3f:f8:ad:7e:e1:c4:5b:2d:d7:05:ac:
58:4b:85:5a:ea:1b:62:ca:b9:51:fe:f8:01:23:ea:3b:54:b3:
53:74:e8:07:11:54:b6:b1:3f:d0:8e:ec:ee:cb:cf:f6:5c:ea:
08:a5:f9:7b:9d:07:f0:60:e3:b4:a5:02:ab:bc:88:45:4a:8b:
d9:45:48:87:e8:f7:0c:59:a7:8d:20:60:85:7d:a2:4d:7c:53:
b1:f6:7e:eb:4d:60:3c:59:c3:1f:ca:1d:b8:43:a4:8a:b1:df:
10:9e:d8:e3:fa:20:a5:5c:22:8e:02:96:4f:01:97:9e:c2:2c:
da:e4:3b:f6:ee:66:1f:87:c5:a6:17:ba:7d:8d:bb:d6:d5:3a:
03:c3:f1:a2:49:77:30:54:20:c9:35:09:e4:e3:84:3b:c6:94:
99:22:66:80:86:96:59:65:88:66:f5:44:d5:ba:67:ad:55:78:
3b:3c:70:e0:e2:17:11:1a:a3:9f:49:07:e8:f7:42:d2:52:05:
db:0b:6a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:36:06 2024 by rpki-client on console-fra.rpki-client.org