Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/D7T55LIeMjPabfg-_V1O9C7jIFo.roa
File: D7T55LIeMjPabfg-_V1O9C7jIFo.roa (raw, json)
Hash identifier: wffHpmRUs6PUfoa/qI1AILxWIMA6bap/ZqxRHDvi46c=
Subject key identifier: 0F:B4:F9:E4:B2:1E:32:33:DA:6D:F8:3E:FD:5D:4E:F4:2E:E3:20:5A
Certificate issuer: /CN=e5a6794b91b81406412a137870bfde3b170de094
Certificate serial: 0188D359E54031266C6A29634F3870DBDF1F
Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/D7T55LIeMjPabfg-_V1O9C7jIFo.roa
Signing time: Mon 19 Jun 2023 11:11:03 +0000
ROA not before: Mon 19 Jun 2023 11:11:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47693
IP address blocks: 185.41.228.0/22 maxlen: 22
185.43.31.0/24 maxlen: 24
2a10:48c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d3:59:e5:40:31:26:6c:6a:29:63:4f:38:70:db:df:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094
Validity
Not Before: Jun 19 11:11:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fb4f9e4b21e3233da6df83efd5d4ef42ee3205a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8c:c6:d8:68:58:b9:d2:c5:eb:c0:7b:c9:2b:
94:7d:5d:94:c4:81:68:a8:52:bb:1e:a2:8a:54:67:
b7:12:00:d4:48:a6:37:87:5c:25:7e:44:42:b3:cb:
1b:75:75:f2:b7:f2:69:be:fd:9c:b7:8b:ab:82:93:
50:b3:08:f7:03:bf:54:06:32:59:08:14:97:d2:59:
8e:c8:00:1b:5d:6e:a7:56:55:ad:b6:d3:72:13:d2:
57:ef:7e:3d:15:4e:d9:14:6a:8e:da:37:37:72:c3:
5c:fc:e6:e3:cf:a5:e2:4e:c1:3c:88:7e:c1:5b:f5:
d9:a4:de:68:5d:87:e6:96:d7:f2:d5:02:b0:bb:4d:
00:97:36:25:e9:2e:7f:88:f7:99:06:66:8a:14:a2:
65:0c:94:c0:82:b6:29:57:6e:26:50:f9:eb:fd:d0:
64:4c:b3:44:71:66:d1:19:a3:d6:dc:07:08:26:a9:
10:6c:80:41:23:91:9b:af:fe:49:c4:c6:7e:a3:a2:
4c:57:97:85:dd:37:9b:cc:45:a5:bf:45:cd:31:97:
ed:e2:80:52:9e:de:f6:56:86:ee:06:2c:81:94:72:
ec:d4:f0:52:45:cf:ae:83:47:00:a9:d6:44:ad:42:
65:b3:b2:bb:6a:ea:14:18:c0:8c:ca:69:0e:1c:1b:
4d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B4:F9:E4:B2:1E:32:33:DA:6D:F8:3E:FD:5D:4E:F4:2E:E3:20:5A
X509v3 Authority Key Identifier:
keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/D7T55LIeMjPabfg-_V1O9C7jIFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.228.0/22
185.43.31.0/24
IPv6:
2a10:48c0::/29
Signature Algorithm: sha256WithRSAEncryption
5e:ca:c1:70:89:8d:b2:13:87:92:97:82:f6:37:53:11:42:01:
93:1f:fa:04:99:ef:1c:42:82:a9:38:b0:9d:d6:d4:8a:dd:e6:
0d:ca:2e:44:94:de:8c:5e:a6:9b:58:c7:e3:f5:f1:eb:c8:8f:
c0:44:ed:94:b3:30:7d:c6:68:62:df:1f:b7:8f:0e:97:cc:80:
79:6f:28:9d:4d:22:d9:e3:b0:d6:76:70:a9:d7:22:0d:85:3f:
f1:4a:cc:04:05:40:b9:c8:22:31:3e:d1:9e:ae:04:80:8f:3b:
81:06:5f:ae:cf:4e:b2:08:e7:fb:56:fc:e1:76:79:bb:ea:81:
eb:a2:c1:ce:94:2d:6a:f2:f5:df:a4:45:63:e6:a1:2b:01:02:
d7:e9:b3:a5:1e:b5:29:c8:44:7c:a7:30:36:fc:43:68:cb:00:
82:09:71:bd:51:5f:6a:79:c7:0a:b7:87:63:87:a0:e7:00:e1:
0b:ab:26:1e:17:64:d3:02:da:7f:a4:3c:80:b1:0a:75:aa:35:
fd:b4:21:1c:79:a3:42:1b:dd:37:73:5b:53:7b:3c:8f:56:aa:
f4:1d:3c:ac:cc:2c:f7:fd:71:c6:d6:0c:30:b5:b5:0a:35:f7:
d9:ef:f9:b3:16:e6:77:57:41:16:1b:b0:7e:12:39:95:92:ba:
17:63:5c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:25 2024 by rpki-client on console-ams.rpki-client.org