Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/SDhIACV0q3WUgqsgYQ5JVKFi2PE.roa
File: SDhIACV0q3WUgqsgYQ5JVKFi2PE.roa (raw, json)
Hash identifier: 2Ml8ffTIRbfs3FKO3ydqeHFU9pryFLY6AMjeBCwbago=
Subject key identifier: 48:38:48:00:25:74:AB:75:94:82:AB:20:61:0E:49:54:A1:62:D8:F1
Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial: 018A64DF91958771BC5AE07FCC5EC4A6B28F
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/SDhIACV0q3WUgqsgYQ5JVKFi2PE.roa
Signing time: Tue 05 Sep 2023 10:24:47 +0000
ROA not before: Tue 05 Sep 2023 10:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210312
IP address blocks: 147.189.216.0/21 maxlen: 21
193.5.16.0/22 maxlen: 22
2a0d:3dc0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:64:df:91:95:87:71:bc:5a:e0:7f:cc:5e:c4:a6:b2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Validity
Not Before: Sep 5 10:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=483848002574ab759482ab20610e4954a162d8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2c:9b:ce:0b:a9:f6:da:f8:0f:54:c9:31:66:
47:d5:9c:1d:4d:18:9c:33:29:ce:46:99:b4:e5:fa:
c7:7c:13:16:63:42:47:eb:4f:12:bd:7a:f6:14:72:
b6:2f:91:46:35:85:b1:c3:f2:32:2e:fe:0c:f7:37:
4b:80:86:f0:e3:37:63:89:da:90:75:8a:9e:e4:4f:
a7:12:51:f9:04:fb:21:46:12:ef:1c:41:ab:43:3b:
87:4c:33:1f:37:c6:e5:57:33:39:5f:f8:b2:ed:06:
41:c3:02:04:43:2a:f1:5c:45:8a:1e:39:81:e3:e8:
7b:a1:1a:56:28:fa:78:b0:d1:2c:a2:2a:b3:5f:38:
2d:27:78:0b:08:90:95:06:8a:32:7c:a1:95:f6:2a:
03:62:9f:21:94:1e:c3:74:3a:4f:fd:cf:a2:49:a9:
7d:b8:ef:3c:33:f6:31:df:71:11:d1:01:71:d9:d6:
83:75:e4:73:44:73:51:9a:ad:b1:66:d2:25:d5:3b:
7a:53:e1:dd:94:99:46:7d:b9:bd:b4:9b:0e:a6:c8:
e6:15:4b:21:05:c3:a7:9f:f7:12:4a:da:ef:71:bc:
6c:6d:c4:7f:2b:48:65:db:fa:86:35:d3:89:24:9c:
e8:ea:c8:86:62:24:55:c2:9f:b8:d6:6c:59:98:74:
88:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:38:48:00:25:74:AB:75:94:82:AB:20:61:0E:49:54:A1:62:D8:F1
X509v3 Authority Key Identifier:
keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/SDhIACV0q3WUgqsgYQ5JVKFi2PE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.216.0/21
193.5.16.0/22
IPv6:
2a0d:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
54:7c:7d:95:f2:db:7e:f3:2b:a2:c4:dc:07:7c:c5:b0:4e:6b:
a9:81:c3:63:14:3b:fb:a9:50:27:6d:9b:6e:b9:4b:e9:af:6b:
bd:43:1b:a4:7d:87:36:86:fb:67:57:f1:38:5c:41:e7:40:43:
fb:2f:5a:38:6b:16:1d:b7:dd:83:14:05:1e:00:d1:0a:14:b0:
0d:e8:05:26:ca:fd:ac:90:21:64:02:16:02:5d:46:ea:fc:5c:
e5:90:13:a1:24:b1:8b:20:9a:7a:82:cd:f2:4b:5e:15:2e:02:
8d:70:00:d8:40:54:c7:13:e0:7d:75:96:5d:7c:76:39:92:47:
4e:3d:ed:46:e8:f5:ad:03:07:5b:63:86:9c:43:73:4b:7a:e6:
2b:96:72:c5:58:73:36:44:6b:de:23:01:78:c4:dc:28:2b:17:
e7:f2:2c:ca:0d:b5:56:91:7e:70:1f:47:0d:62:57:49:32:e5:
07:65:91:34:96:42:4e:79:19:c9:a5:2c:15:4a:fe:4f:5e:01:
8c:36:0d:76:ff:67:e8:44:f1:09:c7:ba:c2:0c:12:32:fd:4e:
af:1b:2a:46:cb:ec:dc:ac:88:9c:b5:4a:45:85:58:54:d2:b5:
48:7b:86:6d:8f:cc:38:c5:bc:d5:51:43:a5:52:23:6b:0f:12:
b3:2a:28:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:45 2024 by rpki-client on console-fra.rpki-client.org