Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/M4wrc1NrOSwjwBI4V1EIDd6O54s.roa
File: M4wrc1NrOSwjwBI4V1EIDd6O54s.roa (raw, json)
Hash identifier: G9G5d6Ytv6f/NSpbK54XzJWsUwWdMSwPIZgr6OUQ5Gg=
Subject key identifier: 33:8C:2B:73:53:6B:39:2C:23:C0:12:38:57:51:08:0D:DE:8E:E7:8B
Certificate issuer: /CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
Certificate serial: 018A08541C7450159E1B136843CC997F2CD8
Authority key identifier: 81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/M4wrc1NrOSwjwBI4V1EIDd6O54s.roa
Signing time: Fri 18 Aug 2023 11:07:24 +0000
ROA not before: Fri 18 Aug 2023 11:07:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44431
IP address blocks: 92.43.224.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:08:54:1c:74:50:15:9e:1b:13:68:43:cc:99:7f:2c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
Validity
Not Before: Aug 18 11:07:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=338c2b73536b392c23c012385751080dde8ee78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2d:e1:e2:66:a0:6b:79:e3:a3:5e:59:b8:46:
ff:b6:4d:ca:af:6b:4b:3b:e6:7c:44:84:ad:33:90:
33:f9:5d:47:bb:6d:6e:bc:0f:08:b2:67:c3:8c:d0:
b1:3c:ff:b8:0d:81:4d:67:1a:03:23:d5:de:b9:f9:
b0:0b:36:7e:58:5f:6c:1c:5e:1e:d5:ce:ad:c6:fc:
64:e3:fe:74:ca:0d:4a:b8:c5:9c:4f:07:2c:6f:7b:
d5:e3:fb:54:17:d8:cc:a2:9c:bb:94:cb:29:d5:54:
40:ff:b5:2b:31:57:6e:ee:c1:db:73:02:42:ea:8e:
49:43:18:87:d7:00:37:c6:4e:26:b6:d7:90:80:77:
01:2e:cb:89:30:e8:05:54:7f:b5:4e:64:ff:71:b5:
2c:ad:8e:5d:23:0c:06:35:b0:26:ec:20:33:39:ae:
23:a1:4d:f3:51:fa:5b:57:9d:9b:60:10:89:5f:ec:
8e:91:cb:b0:4f:8d:f7:f0:29:b7:72:6b:7d:b0:43:
06:10:0b:6c:11:1c:dc:c5:b4:e8:1e:d1:81:c2:74:
4d:6d:1c:1d:ef:3d:b8:10:12:6e:61:6a:c4:c7:72:
a4:22:57:4a:05:cb:d8:33:be:b8:36:ae:f4:f2:f6:
15:f0:88:10:5b:4b:ad:c7:fc:5e:ab:0e:c9:f9:53:
44:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8C:2B:73:53:6B:39:2C:23:C0:12:38:57:51:08:0D:DE:8E:E7:8B
X509v3 Authority Key Identifier:
keyid:81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/M4wrc1NrOSwjwBI4V1EIDd6O54s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.224.0/21
Signature Algorithm: sha256WithRSAEncryption
70:ff:30:53:4b:e7:5f:a0:a9:cc:93:f1:25:4c:0b:ab:b3:58:
a7:1c:64:dd:e6:5c:87:08:8e:25:97:e9:67:04:f7:78:28:98:
a2:70:7d:84:d5:9d:41:1c:fb:53:68:7d:98:db:dd:da:fe:86:
66:ad:68:99:99:fe:8c:92:0b:8f:ea:0d:5f:ed:b3:0f:ef:ea:
b8:58:72:33:7e:a1:d6:97:33:2f:c8:85:d6:0c:b6:44:b0:e4:
74:0f:30:49:d3:5b:ef:66:26:b0:db:7d:9f:7a:8d:0a:2a:80:
de:e3:b8:2c:e5:f1:b5:78:34:05:c2:69:e7:c4:88:09:ed:83:
f8:04:d1:70:3d:b7:7c:84:cf:f2:30:71:c4:49:d1:85:ab:58:
26:4d:8c:53:f8:ad:c5:02:64:ef:92:27:86:56:ad:95:68:d4:
e9:53:b1:a8:ef:ab:e3:38:4d:bd:32:b3:2d:09:6b:ef:ea:fa:
6b:0f:82:8d:3e:ce:50:db:02:ba:49:85:47:04:84:7e:65:ba:
66:68:ce:da:04:84:42:3b:e2:0b:f3:38:a4:59:e9:61:e7:47:
fc:c7:89:53:a3:41:4e:6a:ff:4b:74:9a:4f:28:76:63:ee:51:
17:c2:fb:d8:72:02:7a:51:b9:87:d0:55:f6:fa:53:5f:c3:03:
52:e2:57:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:04 2024 by rpki-client on console-ams.rpki-client.org