Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/eSviaXlvF2FBbBGdv7YVPuJMTIs.roa
File: eSviaXlvF2FBbBGdv7YVPuJMTIs.roa (raw, json)
Hash identifier: V/N5QHrQ6/OxoL/onNO5rFieWfbaLo1OOec05m3TYXE=
Subject key identifier: 79:2B:E2:69:79:6F:17:61:41:6C:11:9D:BF:B6:15:3E:E2:4C:4C:8B
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 0187B7DAD46D453B8072ACCAB304062A584F
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/eSviaXlvF2FBbBGdv7YVPuJMTIs.roa
Signing time: Tue 25 Apr 2023 09:59:44 +0000
ROA not before: Tue 25 Apr 2023 09:59:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210398
IP address blocks: 83.217.238.128/26 maxlen: 26
83.231.149.64/28 maxlen: 28
213.130.49.64/26 maxlen: 26
213.130.47.32/28 maxlen: 28
2001:728:1404::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:da:d4:6d:45:3b:80:72:ac:ca:b3:04:06:2a:58:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Apr 25 09:59:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=792be269796f1761416c119dbfb6153ee24c4c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5e:21:4d:f9:69:b3:7c:3c:f9:b3:fe:d3:1e:
38:b8:14:43:39:70:fd:fc:4e:c2:e2:51:c5:e5:36:
64:7c:1c:a3:c5:02:83:3b:1c:ac:b8:5a:a5:71:e3:
b9:72:3d:50:d9:e3:b3:08:0c:28:cb:15:da:62:db:
dd:00:fc:34:ab:c5:7f:f7:cb:07:35:e1:67:9d:91:
54:62:b3:54:ae:91:30:bc:cc:16:8f:78:75:d8:e1:
cb:ed:88:91:79:48:35:91:63:a4:3b:7f:36:a3:15:
78:d7:63:fa:0a:91:f6:ac:c2:15:43:60:ea:50:72:
bd:1c:c8:8f:53:98:70:b3:02:c8:9e:46:a9:9d:5f:
19:9f:cc:07:87:54:20:20:80:2e:1c:3c:42:cf:90:
1f:48:b6:aa:40:6b:26:f7:2a:f3:e9:e2:3e:20:47:
90:77:ca:f6:38:9d:23:d9:28:19:b7:9f:ba:f5:6e:
90:ba:e8:6e:84:5a:22:cc:8f:3f:04:67:1e:02:9e:
cc:ff:e3:a2:f5:8f:0d:48:cf:3e:24:ed:80:66:d1:
17:55:86:b4:ab:14:31:55:7f:da:bf:a1:b3:29:af:
69:dd:f9:1f:b8:a2:dd:6e:ae:4c:c1:8b:96:81:71:
43:42:a0:cd:a7:3a:79:5f:e7:cd:fa:7b:d0:73:59:
fa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2B:E2:69:79:6F:17:61:41:6C:11:9D:BF:B6:15:3E:E2:4C:4C:8B
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/eSviaXlvF2FBbBGdv7YVPuJMTIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.238.128/26
83.231.149.64/28
213.130.47.32/28
213.130.49.64/26
IPv6:
2001:728:1404::/48
Signature Algorithm: sha256WithRSAEncryption
46:1b:ec:b7:bf:0b:58:1c:10:7b:48:32:19:61:8a:67:31:a2:
2b:2f:32:a6:02:e0:a0:5e:d8:ca:f9:aa:de:11:38:d9:48:7d:
49:fb:d0:af:06:10:e9:a3:80:3e:11:23:d9:d0:02:9c:ea:64:
53:6b:44:91:2a:13:f8:be:3c:c1:28:83:2e:0a:51:5a:89:26:
30:1c:7e:38:db:53:43:d7:f5:c2:56:6f:c6:ad:a4:7c:92:4b:
3c:dc:1f:38:f6:a5:ea:01:8a:5a:c3:9c:61:97:7c:f4:7c:f3:
32:ee:6f:f4:98:a5:56:70:de:ae:3f:52:29:2f:6d:90:06:ca:
0b:92:89:04:9d:12:b0:32:e2:af:63:cd:b6:11:38:cb:18:0e:
78:75:3a:20:3e:e5:70:ab:8e:eb:44:b1:6c:80:48:b4:fd:57:
2f:af:f7:d2:be:0a:6c:1b:3f:74:2d:e9:70:7e:cf:36:47:df:
fd:0a:47:47:65:2b:79:e5:71:d8:aa:f5:9d:06:20:f0:b7:14:
7b:99:ea:a5:7f:48:a8:ba:88:d9:17:a8:54:62:0a:84:e8:aa:
5d:4f:07:2b:31:bf:68:b3:71:8f:d8:88:04:a7:35:60:ab:95:
33:33:13:5c:a8:5b:d0:b9:d3:9c:99:2b:17:b7:fd:da:2d:94:
e1:f4:7f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:40 2024 by rpki-client on console-fra.rpki-client.org