Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/Eu1v5Tz65jvyYTj0Mtr-mac1fRE.roa
File: Eu1v5Tz65jvyYTj0Mtr-mac1fRE.roa (raw, json)
Hash identifier: HD+0O8VyU8pBRz77RTG8JsfFGgxm54hvZKoOtIZhXlI=
Subject key identifier: 12:ED:6F:E5:3C:FA:E6:3B:F2:61:38:F4:32:DA:FE:99:A7:35:7D:11
Certificate issuer: /CN=8fb17426e77745a6887b6e2c8a110dadb7194bc7
Certificate serial: 01856FA72271D428EF1AF2A5BCB48A6AC890
Authority key identifier: 8F:B1:74:26:E7:77:45:A6:88:7B:6E:2C:8A:11:0D:AD:B7:19:4B:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7F0Jud3RaaIe24sihENrbcZS8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/Eu1v5Tz65jvyYTj0Mtr-mac1fRE.roa
Signing time: Sun 01 Jan 2023 23:25:02 +0000
ROA not before: Sun 01 Jan 2023 23:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44574
IP address blocks: 193.238.80.0/22 maxlen: 24
193.227.246.0/23 maxlen: 24
2001:67c:2278::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:22:71:d4:28:ef:1a:f2:a5:bc:b4:8a:6a:c8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb17426e77745a6887b6e2c8a110dadb7194bc7
Validity
Not Before: Jan 1 23:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12ed6fe53cfae63bf26138f432dafe99a7357d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:85:8a:e8:d6:e6:15:97:a8:2a:af:5c:11:65:
b1:17:31:f5:72:12:b1:93:1f:b0:8d:60:7c:f2:e8:
71:29:80:90:eb:78:27:54:1d:50:fb:22:eb:6a:cd:
33:7d:33:13:6e:c5:20:72:5f:b5:2f:b9:f3:8a:04:
6f:bf:c1:a7:fa:2c:93:e4:af:d6:28:42:fd:2a:d8:
44:ae:cf:ae:a5:36:6d:4d:9f:e6:f6:7d:da:1a:f9:
9c:49:4d:c6:ca:84:3a:32:69:98:57:cd:1f:05:f7:
15:97:ef:00:2b:44:67:d2:34:1b:6b:ef:cd:33:50:
8e:4e:9d:42:10:fc:13:e0:3e:7d:e9:70:fb:e3:53:
4a:ce:35:24:af:f6:74:36:8c:db:66:f6:f4:ee:4b:
06:e4:ee:0e:34:c4:9e:7e:27:c5:2a:d8:c1:34:68:
c0:2d:84:5e:51:e3:86:f7:84:31:60:12:8b:c5:c6:
e6:c4:00:d5:6b:c7:63:47:b8:11:dd:65:aa:23:fb:
0a:b7:73:18:92:6a:cd:30:d9:53:c3:ea:1b:e0:07:
c3:5d:64:17:c7:4b:42:3a:02:40:08:01:38:24:2b:
d8:b8:d7:6a:ac:0f:00:40:d4:47:f5:9e:ef:6b:8f:
c0:de:cb:41:9e:ef:e1:12:2f:14:79:e0:12:46:13:
b1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:ED:6F:E5:3C:FA:E6:3B:F2:61:38:F4:32:DA:FE:99:A7:35:7D:11
X509v3 Authority Key Identifier:
keyid:8F:B1:74:26:E7:77:45:A6:88:7B:6E:2C:8A:11:0D:AD:B7:19:4B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7F0Jud3RaaIe24sihENrbcZS8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/Eu1v5Tz65jvyYTj0Mtr-mac1fRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/j7F0Jud3RaaIe24sihENrbcZS8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.246.0/23
193.238.80.0/22
IPv6:
2001:67c:2278::/48
Signature Algorithm: sha256WithRSAEncryption
42:49:01:15:0e:5d:4e:2a:ad:16:83:e2:e3:16:30:71:1e:14:
2b:a7:18:ed:37:de:c3:57:56:99:35:21:6b:a9:9f:51:61:3a:
bf:70:88:e2:2f:0a:d1:2d:65:f8:b9:44:e5:43:50:17:48:71:
b1:92:02:8f:99:40:15:62:78:eb:9b:ac:94:20:85:00:ac:90:
13:0e:70:40:9f:e0:6b:e9:96:0e:2e:c6:f3:c4:7d:8e:21:9a:
6d:a2:73:d5:72:ed:4b:5a:07:1e:29:f8:eb:25:41:ee:47:a5:
d5:69:88:d3:e1:70:09:21:35:ed:0e:75:7e:24:1d:13:00:8c:
a7:97:b3:aa:54:b7:ae:8a:9c:13:0c:c0:c6:62:de:a2:d6:f5:
9e:01:73:cf:82:7b:c4:5f:73:9b:09:e4:4b:08:a5:dd:ea:2b:
49:8a:3a:13:c7:60:72:d2:8a:19:17:78:83:9a:ec:63:c8:e6:
bb:e1:32:e1:02:b5:9b:10:b0:45:81:f7:b9:51:ae:01:45:71:
4d:d5:81:5d:98:9d:ad:fc:0a:72:04:e5:c7:5d:f0:65:bf:ae:
8e:91:46:d9:82:f6:c6:37:8a:91:0a:b5:bf:3e:b7:63:fe:fb:
e9:8c:df:d4:9f:6c:3f:b4:33:4c:3b:2b:f2:fc:d4:d7:91:8d:
ac:0a:96:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:03 2023 by rpki-client on console-fra.rpki-client.org