Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/eXVWW-Huz47sT-vXw6qkuVltOYc.roa
File: eXVWW-Huz47sT-vXw6qkuVltOYc.roa (raw, json)
Hash identifier: n5pzVCFGH+W86M4l7dtkjkpAhgP5mKuhFPFBYgUR8FU=
Subject key identifier: 79:75:56:5B:E1:EE:CF:8E:EC:4F:EB:D7:C3:AA:A4:B9:59:6D:39:87
Certificate issuer: /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial: 01877520ABE305E9CAD4E90538F8529203E0
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/eXVWW-Huz47sT-vXw6qkuVltOYc.roa
Signing time: Wed 12 Apr 2023 11:01:28 +0000
ROA not before: Wed 12 Apr 2023 11:01:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211286
IP address blocks: 141.39.220.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:75:20:ab:e3:05:e9:ca:d4:e9:05:38:f8:52:92:03:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Validity
Not Before: Apr 12 11:01:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7975565be1eecf8eec4febd7c3aaa4b9596d3987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:65:40:58:97:18:96:2e:0c:bb:f1:a2:d2:46:
7c:76:f3:5b:e3:44:d6:ac:8c:90:9d:9e:8f:b7:8d:
e7:d4:a9:ed:95:12:3f:50:7c:c1:54:75:00:9b:c6:
6a:d6:d9:e0:ba:f5:c0:e0:04:3d:75:c5:84:57:92:
58:8c:d5:12:6f:f9:d3:3c:fd:98:cc:42:45:95:68:
72:9f:75:a5:49:4b:25:a4:85:b9:e8:6d:f0:22:4d:
6c:1d:ee:c7:7c:5e:25:5d:8a:10:47:f0:23:aa:f3:
12:40:dd:5f:05:70:66:74:e4:69:d1:0f:15:8f:69:
13:d7:2c:72:92:2f:36:ea:7f:69:d9:e4:9e:aa:f7:
db:0c:ee:5c:d0:df:fa:1d:3d:03:18:92:4e:57:8a:
ec:68:8a:ce:b0:72:02:fc:02:b1:9d:27:cb:bb:0a:
e5:73:40:a6:a9:d6:b4:3d:c1:1e:b5:64:4f:e4:64:
27:4f:40:18:08:28:5e:71:46:ae:7c:0e:8a:3c:b3:
55:f9:4d:da:c0:ab:f0:fc:3f:d8:58:18:4b:48:3b:
04:b7:21:c0:25:1a:a2:3e:11:f3:12:29:a6:13:c8:
33:54:a5:53:e4:10:d9:f7:d5:60:9a:7a:8d:96:f8:
75:0c:11:28:31:7d:c0:36:d9:9b:59:24:5c:a3:05:
86:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:75:56:5B:E1:EE:CF:8E:EC:4F:EB:D7:C3:AA:A4:B9:59:6D:39:87
X509v3 Authority Key Identifier:
keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/eXVWW-Huz47sT-vXw6qkuVltOYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.39.220.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:30:b5:37:5b:fa:2f:69:9e:8c:83:d9:47:fd:92:90:40:91:
ab:d8:7d:01:a2:b5:98:6f:07:75:54:f8:12:b1:aa:82:85:80:
0e:08:3a:df:29:7d:c9:01:6c:d3:3d:bf:24:ce:d6:91:0b:2c:
8f:fe:f1:3a:02:cc:db:4f:6a:f9:07:e8:3a:7e:a2:57:1a:5d:
ea:a7:2a:9c:91:a3:30:e6:a5:38:1b:e0:57:68:98:9a:0a:79:
e3:6d:b9:17:94:4a:c7:84:1c:e6:69:02:db:c4:15:83:ff:9c:
c0:df:45:20:e1:25:61:38:10:be:62:45:89:0f:bb:b9:93:b0:
b5:fb:82:e6:4b:db:07:be:49:93:27:2b:23:13:19:ef:46:9b:
88:a9:fe:8b:15:6f:67:a6:50:ae:c4:52:b6:ba:cb:21:db:bb:
45:f2:bc:7a:96:42:19:2f:f4:22:18:39:08:38:16:c2:45:5d:
96:a5:b3:69:73:10:30:a6:40:a3:c7:d4:78:38:90:45:a8:05:
f9:9e:a5:56:1a:7d:7d:75:c5:45:e9:13:6c:89:29:0b:15:d5:
82:67:ce:82:6e:5d:52:72:61:ea:a5:c8:a9:41:80:aa:b4:d8:
45:c8:43:20:0a:47:47:78:d6:68:ba:2c:08:9b:8f:8e:42:c5:
db:28:1c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:45 2024 by rpki-client on console-ams.rpki-client.org