Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2wBzGoS0fcd1_KU7JR7e0Yywi6E.roa
File: 2wBzGoS0fcd1_KU7JR7e0Yywi6E.roa (raw, json)
Hash identifier: OD9JbVz4a5p5WmX/uy4v5XVbV6obz4nJs9mDCorPmJg=
Subject key identifier: DB:00:73:1A:84:B4:7D:C7:75:FC:A5:3B:25:1E:DE:D1:8C:B0:8B:A1
Certificate issuer: /CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Certificate serial: 018B921D9CA9AA62E5625B72B5A926754CF5
Authority key identifier: D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2wBzGoS0fcd1_KU7JR7e0Yywi6E.roa
Signing time: Thu 02 Nov 2023 22:18:15 +0000
ROA not before: Thu 02 Nov 2023 22:18:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210108
IP address blocks: 194.49.100.0/23 maxlen: 23
194.49.103.0/24 maxlen: 24
194.49.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:92:1d:9c:a9:aa:62:e5:62:5b:72:b5:a9:26:75:4c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Validity
Not Before: Nov 2 22:18:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db00731a84b47dc775fca53b251eded18cb08ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:af:27:4b:ad:dc:61:ff:88:65:3c:11:f2:
b7:09:0c:72:6c:c1:8a:65:75:f3:c2:01:4c:c3:e6:
bf:98:68:ce:90:12:65:35:3c:44:c9:c7:8c:0e:ed:
eb:32:81:c8:1a:17:6f:ab:85:1a:46:0c:32:1d:37:
31:d9:c6:dd:0c:c4:18:3b:50:78:8b:ff:ff:a1:92:
0e:73:62:7c:79:39:81:b8:21:03:50:df:d2:8b:8d:
28:f1:bb:d8:b8:93:74:93:f5:12:c1:56:e9:86:c9:
bf:aa:30:29:bd:a5:bc:79:1a:75:8b:e1:49:35:f5:
37:8a:f2:dd:04:8f:43:00:41:0a:49:7f:a2:d3:0d:
df:1b:fe:ae:cf:4a:db:db:30:80:1e:5e:95:71:3a:
af:52:70:e9:08:d9:2f:5e:20:9e:95:2b:08:fc:0c:
72:bc:ef:43:7f:c1:74:9e:04:7c:dc:08:26:bb:62:
6d:54:1e:9c:71:ce:4f:0a:fe:43:57:bf:eb:84:46:
5b:18:eb:43:bb:d7:db:bb:e2:3e:a9:04:6d:b0:05:
79:31:d5:d2:92:3f:79:41:71:91:1a:b4:b6:f0:5e:
59:e9:53:b5:eb:80:00:86:95:ed:5d:38:aa:01:38:
d3:f1:77:6d:34:b2:c2:03:7e:70:b1:b3:73:b1:5c:
52:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:00:73:1A:84:B4:7D:C7:75:FC:A5:3B:25:1E:DE:D1:8C:B0:8B:A1
X509v3 Authority Key Identifier:
keyid:D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2wBzGoS0fcd1_KU7JR7e0Yywi6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.100.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:37:4a:26:18:26:ef:56:f8:35:1c:b5:75:03:30:d0:e3:9d:
ee:86:e3:96:b1:29:bb:27:ae:df:0c:59:e6:6e:87:69:cb:71:
28:25:58:95:0a:3e:a8:61:b2:a4:06:58:99:47:47:71:bf:87:
e9:8a:40:be:b8:a0:76:ec:15:07:f4:d9:cf:e1:a0:cd:47:12:
f9:07:d5:73:8a:b7:e6:a6:ba:52:44:b2:59:ce:fe:4f:ee:0d:
7f:a6:29:69:54:0f:46:f0:b7:ea:a4:c2:ac:f8:78:ea:2b:ec:
c1:42:fd:7d:6d:64:ca:91:59:f4:18:a7:96:cd:a3:5f:da:80:
90:87:24:0f:22:eb:cb:38:4f:7e:87:53:36:b3:fb:4d:f4:09:
7d:ab:0b:6e:3a:c2:02:f1:5b:09:a7:d5:4c:bc:d9:36:73:7a:
b7:68:c6:c8:f1:3a:9e:5c:ee:37:67:57:66:e4:ea:5e:c0:4a:
48:f9:84:6c:b6:97:ee:60:5a:98:a1:be:0a:a0:21:3e:02:d6:
d0:1b:ce:89:d2:f3:a9:ac:4a:75:65:6b:0a:fb:ee:68:92:31:
3f:d0:a4:6a:69:7e:ad:b6:94:03:76:f3:cc:c9:c3:33:54:2c:
a4:d7:60:01:4e:99:0f:26:16:31:9b:a0:57:a7:dc:09:af:5e:
de:c5:13:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:54 2024 by rpki-client on console-ams.rpki-client.org