Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/pOafbyo7s0ZCpyWLU5YM3GGuBuo.roa
File: pOafbyo7s0ZCpyWLU5YM3GGuBuo.roa (raw, json)
Hash identifier: 9B1sJDmggNYOv9U+nkbuFAx9edPKiyKlzUJUjqecKdE=
Subject key identifier: A4:E6:9F:6F:2A:3B:B3:46:42:A7:25:8B:53:96:0C:DC:61:AE:06:EA
Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial: 01880AAA3EB1439B047BA4C78E02CE8A92D3
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/pOafbyo7s0ZCpyWLU5YM3GGuBuo.roa
Signing time: Thu 11 May 2023 11:55:09 +0000
ROA not before: Thu 11 May 2023 11:55:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42947
IP address blocks: 213.181.78.0/24 maxlen: 24
213.181.78.0/23 maxlen: 23
213.181.79.0/24 maxlen: 24
176.57.98.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0a:aa:3e:b1:43:9b:04:7b:a4:c7:8e:02:ce:8a:92:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Validity
Not Before: May 11 11:55:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4e69f6f2a3bb34642a7258b53960cdc61ae06ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:8a:da:10:6a:6a:07:7d:b8:27:6b:3a:e8:
47:e2:38:4f:93:b0:30:24:03:1e:05:c0:47:bb:4b:
c7:81:cb:05:bf:53:02:5a:6d:d6:84:c0:b9:bc:9e:
6b:60:04:24:3a:58:9f:6d:bf:9d:3c:68:68:0b:3e:
db:e1:82:73:b6:a5:a9:24:43:2d:6d:52:a2:5b:bd:
2c:4a:dd:7c:fd:05:a9:9d:5e:02:88:4a:36:80:b8:
a0:2e:aa:22:15:6d:8b:1c:82:87:56:17:6b:cc:6f:
34:43:7d:05:af:3b:c5:21:ab:01:ee:4a:29:59:50:
72:e8:d8:ae:fc:b5:77:11:cb:17:68:06:49:0d:57:
7a:29:37:18:b1:3e:29:9d:be:c6:3a:c2:8f:f8:58:
16:e5:f6:76:7b:c4:0d:bd:16:8f:58:2f:79:46:33:
40:c7:2d:e4:5d:a6:50:d2:9e:0b:e2:e4:c5:82:46:
9e:46:c9:b4:b8:2c:a6:60:ae:c2:a7:41:e9:6a:1c:
91:56:15:c1:61:05:fe:5b:4e:0d:ba:c4:f9:2d:5d:
1e:4f:ed:ad:c2:9b:71:b8:5b:ee:bc:4c:42:60:cb:
1c:e2:24:99:82:b7:5e:9c:33:82:c4:8e:57:06:ae:
41:6c:5d:e1:8f:ab:f3:65:06:8c:1a:ae:0b:72:af:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E6:9F:6F:2A:3B:B3:46:42:A7:25:8B:53:96:0C:DC:61:AE:06:EA
X509v3 Authority Key Identifier:
keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/pOafbyo7s0ZCpyWLU5YM3GGuBuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.98.0/23
213.181.78.0/23
Signature Algorithm: sha256WithRSAEncryption
83:ca:13:07:ab:fc:af:c0:1e:9c:41:97:62:3f:b1:c3:0b:8a:
d9:63:87:4c:48:6b:59:1b:de:63:1b:75:09:2f:13:b6:66:95:
33:94:76:6b:9a:18:06:20:3e:84:5f:3c:5f:e1:8f:11:29:4c:
d2:69:39:42:14:d0:d1:a6:ae:cb:dc:ae:a3:39:b7:87:a1:91:
29:36:55:ad:b4:3a:d3:1f:1a:1e:38:73:ee:9d:5d:86:bd:ae:
76:fe:48:6e:c5:ac:54:5d:c8:54:b9:d8:9f:79:c5:8a:a4:73:
27:6a:df:6d:9a:c1:56:18:cd:d5:5e:35:c6:26:88:37:f3:72:
28:7f:80:21:df:ef:68:d4:d7:9e:1c:88:db:da:c8:74:ee:17:
b3:a3:01:5b:72:ca:8e:b0:d3:a2:19:4d:81:f6:ca:91:f8:1c:
6c:7a:44:72:cd:6e:e2:47:44:53:12:3b:4f:55:e1:e9:a5:3f:
5c:1a:3d:ec:a7:88:39:23:b6:5a:e5:d6:ca:89:61:d4:38:00:
72:50:bf:f7:60:ab:f1:39:13:44:39:0e:03:5a:79:0f:f2:e3:
6b:70:80:2d:28:0b:eb:17:c5:88:28:ea:38:57:38:3d:d6:01:
61:a4:40:4d:fd:29:54:95:c2:27:52:7c:96:58:33:16:15:d6:
0b:07:ec:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:18 2024 by rpki-client on console-fra.rpki-client.org