Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/e-bUt3Y9YaszlFFyb9XA3Ix2gvM.roa
File: e-bUt3Y9YaszlFFyb9XA3Ix2gvM.roa (raw, json)
Hash identifier: fh2zlMTrydaSK46EySOJg2wE5QLDTKY3bS3UaK/wZOM=
Subject key identifier: 7B:E6:D4:B7:76:3D:61:AB:33:94:51:72:6F:D5:C0:DC:8C:76:82:F3
Certificate issuer: /CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
Certificate serial: 018617B95F07BAAAC4D9E936241476A14746
Authority key identifier: 1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/e-bUt3Y9YaszlFFyb9XA3Ix2gvM.roa
Signing time: Fri 03 Feb 2023 14:41:09 +0000
ROA not before: Fri 03 Feb 2023 14:41:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201579
IP address blocks: 193.138.195.0/24 maxlen: 24
185.91.69.0/24 maxlen: 24
2a13:2480::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 03 Mar 2023 11:55:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:17:b9:5f:07:ba:aa:c4:d9:e9:36:24:14:76:a1:47:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
Validity
Not Before: Feb 3 14:41:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7be6d4b7763d61ab339451726fd5c0dc8c7682f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c9:d0:44:54:0c:c4:bb:69:17:02:20:6e:cc:
56:40:d7:ff:96:2f:11:08:e1:c9:77:9f:91:62:d0:
83:25:ff:91:72:f7:0f:05:62:06:4b:05:57:b1:96:
19:69:25:87:26:01:d1:16:c7:a8:5b:59:31:c2:44:
d0:41:66:85:4e:1d:05:98:73:bf:db:bd:6d:27:16:
1f:00:a0:79:52:33:9e:1f:ad:be:88:38:be:26:a6:
1d:71:83:02:2f:a3:1a:96:84:db:31:10:2b:71:16:
28:6e:00:be:b2:54:a0:0d:81:0a:4d:a0:e3:7d:28:
2e:75:1a:e7:54:39:7b:c2:d2:c6:26:73:06:78:6f:
67:10:4d:49:1a:bc:4a:a1:41:49:64:c4:a5:db:9b:
04:f2:5d:4c:1e:ed:58:d0:dc:78:0d:66:e4:1f:18:
81:f0:f7:58:b6:61:ed:25:fc:40:48:3a:29:98:7b:
3e:ef:d4:65:e6:86:32:2f:78:e9:06:e9:70:41:69:
9b:c2:e3:3f:d2:c0:b7:3a:77:e8:b3:8e:8a:0a:e4:
cc:f0:3a:37:3e:0f:91:bf:29:09:86:9d:64:24:7e:
a7:a3:49:dd:32:0c:fb:71:13:76:25:42:48:10:cb:
43:92:f1:41:8d:e6:67:ed:1d:ec:68:a0:26:81:84:
46:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E6:D4:B7:76:3D:61:AB:33:94:51:72:6F:D5:C0:DC:8C:76:82:F3
X509v3 Authority Key Identifier:
keyid:1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/e-bUt3Y9YaszlFFyb9XA3Ix2gvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.69.0/24
193.138.195.0/24
IPv6:
2a13:2480::/29
Signature Algorithm: sha256WithRSAEncryption
0b:1b:83:bd:93:75:e8:12:d7:ce:53:74:0d:a4:a8:6f:44:2f:
64:39:76:03:25:d3:f5:55:25:2f:24:91:a6:46:b8:13:0d:0d:
c7:84:cb:39:fe:b4:a3:00:d9:f9:6e:1b:59:8f:35:d9:81:c5:
26:34:80:c6:ac:6b:06:c2:28:77:e1:a1:e0:f9:b4:7f:c7:90:
b5:59:d0:68:98:17:e1:ca:ee:d6:89:84:89:cb:f9:10:d9:71:
f8:7a:7a:ac:3e:39:18:73:77:52:5c:af:6d:3a:67:ab:51:50:
65:ab:e9:5c:18:a9:5f:a8:dc:0e:16:b3:f1:8d:cf:80:df:8f:
ac:38:70:d8:c5:66:da:48:31:6f:63:45:6e:5d:37:96:d5:2b:
e0:5f:69:20:c3:89:c1:ce:56:01:64:7a:2a:c6:26:79:d9:bc:
08:93:3f:a2:56:7b:f7:21:51:67:22:be:f2:2f:25:af:ff:c6:
f3:4a:5f:74:88:fd:43:f6:85:9e:14:74:f1:87:4e:d8:7b:f4:
93:d3:22:25:07:8b:d0:53:92:e8:4b:4d:6b:c9:9f:c0:5d:74:
d5:9c:0e:d7:ce:0b:c1:32:26:de:e2:81:7d:c1:ee:fb:0a:91:
39:70:fb:da:20:e7:49:07:56:be:72:4c:5c:46:fa:47:dd:d4:
d3:d1:1f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:25 2024 by rpki-client on console-ams.rpki-client.org