Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/Di43uevpLNniPsfsCKojdS2WIKE.roa
File: Di43uevpLNniPsfsCKojdS2WIKE.roa (raw, json)
Hash identifier: ejuCp5vZ1TJjAFgVh+TW+HFan+mfOlwNW1td6Vt/NNc=
Subject key identifier: 0E:2E:37:B9:EB:E9:2C:D9:E2:3E:C7:EC:08:AA:23:75:2D:96:20:A1
Certificate issuer: /CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Certificate serial: 018572D5BCD0BA8F9906975AA6553D67FCB9
Authority key identifier: FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/Di43uevpLNniPsfsCKojdS2WIKE.roa
Signing time: Mon 02 Jan 2023 14:14:48 +0000
ROA not before: Mon 02 Jan 2023 14:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210647
IP address blocks: 193.222.254.0/24 maxlen: 24
2a11:a5c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:bc:d0:ba:8f:99:06:97:5a:a6:55:3d:67:fc:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Validity
Not Before: Jan 2 14:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e2e37b9ebe92cd9e23ec7ec08aa23752d9620a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:41:35:d4:b9:61:8a:9d:a0:f0:3d:43:2c:2c:
3b:59:52:05:cf:45:e5:e6:e0:76:64:17:64:09:90:
05:4a:17:9b:d0:61:3f:be:79:7c:64:bb:c0:07:81:
cf:d4:76:ab:c0:84:93:e0:94:5a:f6:79:8e:ca:8a:
d0:8c:c0:ca:85:31:54:56:a9:5f:a4:12:43:6d:f4:
c6:99:ab:2b:2c:fe:12:2e:12:55:9e:8c:cd:bf:30:
25:f6:e3:2d:2a:6c:2c:f5:8a:7a:18:c2:9f:da:62:
49:1a:1c:82:fa:e9:71:69:64:1e:9c:1f:02:d5:6e:
18:10:ce:cc:78:06:1a:f4:7d:f5:d6:fb:2c:8d:f2:
d2:0a:5b:f3:d2:70:ff:04:32:eb:ab:df:b5:5e:ea:
94:5f:63:ba:59:c4:88:7e:a8:92:a7:35:4c:2c:b9:
a3:ea:ec:5b:a9:a5:56:e1:43:89:69:36:95:3a:6e:
b2:e4:0b:00:e6:e0:b2:8e:b6:d4:a9:f5:51:a1:a2:
5c:c2:9d:e4:c4:1d:31:17:b6:d5:d5:9b:44:fe:3f:
53:28:0c:b8:76:f1:53:cc:78:23:74:b8:82:a5:07:
5e:96:5c:5f:04:28:46:2a:a0:a6:f3:61:a4:30:62:
99:e9:39:4c:3e:e9:fc:63:df:65:01:a8:34:e0:21:
12:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2E:37:B9:EB:E9:2C:D9:E2:3E:C7:EC:08:AA:23:75:2D:96:20:A1
X509v3 Authority Key Identifier:
keyid:FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/Di43uevpLNniPsfsCKojdS2WIKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.254.0/24
IPv6:
2a11:a5c0::/29
Signature Algorithm: sha256WithRSAEncryption
6a:93:72:dc:58:c2:ca:86:94:c7:93:18:30:a8:81:e4:6e:1a:
b6:d4:b7:6f:1a:97:d3:15:74:a2:94:07:73:12:2e:e1:d5:df:
71:5e:42:ab:68:de:d0:19:04:c6:de:b7:a6:d6:bb:2f:18:7c:
5e:d6:f9:01:c7:82:16:f9:fd:6e:38:50:61:da:00:db:05:83:
57:ed:4b:a6:e2:b5:a0:58:b5:67:af:89:28:26:1e:c4:ce:97:
01:a5:03:5a:b8:c6:35:fc:71:d7:a6:eb:2b:39:42:46:92:1a:
f7:3c:7a:b3:0e:50:ea:7c:e8:e2:81:8b:77:22:66:10:fe:91:
18:d6:99:20:a4:b0:d9:4c:cc:54:ff:d9:b9:f7:6d:2c:44:78:
78:e5:7e:10:d8:e0:04:8e:7b:bd:a4:9a:83:49:8a:0d:9f:6d:
06:73:2a:04:39:83:95:60:0c:66:21:a1:9c:c3:a7:26:d3:96:
50:7d:47:73:12:ba:39:39:8a:dd:70:b5:78:4d:e4:14:d0:4e:
12:48:ea:56:ee:95:49:c4:b3:a4:88:66:31:1d:1c:e1:57:43:
62:ee:f9:59:2e:5a:4f:dd:92:d4:c6:a2:7f:9d:85:25:d2:ed:
7f:92:ea:5a:22:9d:d6:74:af:ba:fb:b6:c4:ed:16:26:43:81:
f7:63:73:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:36:09 2024 by rpki-client on console-fra.rpki-client.org