Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/DiAHvwMtCTOEjVOJgmd0JOpmiJs.roa
File: DiAHvwMtCTOEjVOJgmd0JOpmiJs.roa (raw, json)
Hash identifier: 1tXX7QW7PlBTJHbmpfP9gdhF+dsTf7wBLCDfSyJ7v2U=
Subject key identifier: 0E:20:07:BF:03:2D:09:33:84:8D:53:89:82:67:74:24:EA:66:88:9B
Certificate issuer: /CN=379cd67c0c18959239358553229e91f543cc5a5f
Certificate serial: 01856BEEB5F00FF57BDBD0AF02028AAD92D4
Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/DiAHvwMtCTOEjVOJgmd0JOpmiJs.roa
Signing time: Sun 01 Jan 2023 06:04:44 +0000
ROA not before: Sun 01 Jan 2023 06:04:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15169
IP address blocks: 193.186.4.0/24 maxlen: 24
2a00:1450:400c::/48 maxlen: 48
2a00:1450:4007::/48 maxlen: 48
2a00:1450:4002::/48 maxlen: 48
2a00:1450::/32 maxlen: 32
2a00:1450:401b::/48 maxlen: 48
2a00:1450:4016::/48 maxlen: 48
2a00:1450:4011::/48 maxlen: 48
2a00:1450:4004::/48 maxlen: 48
2a00:1450:401a::/48 maxlen: 48
2a00:1450:4015::/48 maxlen: 48
2a00:1450:4018::/48 maxlen: 48
2a00:1450:4013::/48 maxlen: 48
2a00:1450:480e::/48 maxlen: 48
2a00:1450:400e::/48 maxlen: 48
2a00:1450:4009::/48 maxlen: 48
2a00:1450:401c::/48 maxlen: 48
2a00:1450:4017::/48 maxlen: 48
2a00:1450:4012::/48 maxlen: 48
2a00:1450:400d::/48 maxlen: 48
2a00:1450:4010::/48 maxlen: 48
2a00:1450:400b::/48 maxlen: 48
2a00:1450:4006::/48 maxlen: 48
2a00:1450:4001::/48 maxlen: 48
2a00:1450:4014::/48 maxlen: 48
2a00:1450:400f::/48 maxlen: 48
2a00:1450:400a::/48 maxlen: 48
2a00:1450:4005::/48 maxlen: 48
2a00:1450:4008::/48 maxlen: 48
2a00:1450:4003::/48 maxlen: 48
2a00:1450:4019::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:b5:f0:0f:f5:7b:db:d0:af:02:02:8a:ad:92:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f
Validity
Not Before: Jan 1 06:04:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e2007bf032d0933848d538982677424ea66889b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:93:81:33:45:a3:d0:c2:76:0b:ef:56:0d:66:
d1:59:40:6a:38:cd:ed:8d:1f:40:5c:fc:af:2a:9a:
73:a5:1d:84:14:06:a6:75:40:05:36:e6:e7:25:22:
ee:83:1d:64:a5:d6:6b:55:b1:5d:ab:09:5c:f4:1e:
a6:d5:76:43:10:08:72:5a:f4:61:18:ed:8b:1e:4d:
1a:b5:02:99:d5:dc:4b:76:0f:97:0f:fc:f0:51:14:
58:47:5b:61:05:d2:e5:18:f3:3d:c2:f1:b2:9b:dc:
89:7f:a5:8f:e5:e0:04:2d:bf:85:d3:20:d2:84:10:
89:9a:2e:a1:c1:0f:fb:ec:9b:10:dc:9e:f4:9f:0f:
89:03:bd:8e:19:73:32:0a:f3:08:80:08:6c:12:9b:
19:b8:b8:ed:6d:2c:ea:04:5e:74:59:51:91:03:a9:
ab:4f:4f:d8:24:ef:0b:cc:4f:d7:8c:01:9c:53:d1:
0d:9f:a9:8a:9a:00:6f:ef:d4:1d:9f:9c:e7:b0:d2:
e6:c0:f6:83:5c:f5:a3:c2:20:2d:97:94:ce:7e:14:
07:b8:03:00:eb:d6:e9:ac:e8:61:16:af:61:53:a6:
a1:53:ad:1f:08:ec:f0:c5:4d:ad:b6:9b:c1:68:e1:
08:09:80:86:5a:5a:08:2c:15:a0:6c:35:08:b1:8e:
ac:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:20:07:BF:03:2D:09:33:84:8D:53:89:82:67:74:24:EA:66:88:9B
X509v3 Authority Key Identifier:
keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/DiAHvwMtCTOEjVOJgmd0JOpmiJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.4.0/24
IPv6:
2a00:1450::/32
Signature Algorithm: sha256WithRSAEncryption
5b:01:be:6e:f1:d6:1f:34:ae:62:ca:45:57:b9:f9:77:58:ce:
2d:2c:1a:21:69:35:80:53:ba:b5:59:d4:12:af:88:bb:41:29:
5a:fc:25:09:21:eb:1f:c9:c6:3c:b0:84:5d:14:fa:1f:6d:e1:
b0:65:6a:9f:77:c6:a7:c8:33:a4:23:8a:f3:7a:16:64:47:2f:
57:0f:e1:0e:8b:6e:33:f9:6e:6b:60:ff:6e:37:2b:5a:40:77:
06:b3:35:62:ef:4f:65:88:39:54:fb:22:8c:aa:1a:8e:a8:99:
b1:89:90:aa:1a:c9:bd:07:da:01:2a:e8:28:8b:19:b2:0b:6f:
7a:11:01:1a:18:58:d6:cc:ba:74:11:4d:cc:70:d6:41:03:f3:
1a:ac:d4:0d:3b:d7:c5:b8:01:1b:32:74:4e:5f:91:dc:5e:3c:
ac:53:69:1d:c6:b5:31:a5:5e:af:73:b6:fb:98:85:b9:15:12:
d5:12:5a:5e:e3:bc:c7:18:b6:8e:b3:cb:b1:80:58:25:1c:a9:
da:3e:14:d7:be:c4:6b:da:b6:04:fe:fa:17:75:96:0d:4b:ad:
dc:af:04:98:77:cd:a9:f2:a8:e4:b4:fc:72:82:25:ab:e3:d5:
92:37:8c:57:6d:16:48:4a:2b:d1:55:9f:66:32:5e:41:70:49:
b5:51:52:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:22 2024 by rpki-client on console-fra.rpki-client.org