Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/4LPI2NpTos_J5PUwK1NUN3MI2fs.roa
File: 4LPI2NpTos_J5PUwK1NUN3MI2fs.roa (raw, json)
Hash identifier: b4WgrCkEqVtK4po0lKNFIhvlHWtPJXAfnen2L6i86j4=
Subject key identifier: E0:B3:C8:D8:DA:53:A2:CF:C9:E4:F5:30:2B:53:54:37:73:08:D9:FB
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 01880F21BD69740D5EFDE2B889AF9B347D19
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/4LPI2NpTos_J5PUwK1NUN3MI2fs.roa
Signing time: Fri 12 May 2023 08:44:09 +0000
ROA not before: Fri 12 May 2023 08:44:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35432
IP address blocks: 213.169.149.0/24 maxlen: 24
82.114.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0f:21:bd:69:74:0d:5e:fd:e2:b8:89:af:9b:34:7d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: May 12 08:44:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0b3c8d8da53a2cfc9e4f5302b5354377308d9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:64:7f:bb:50:60:b8:e7:f5:05:7a:08:b1:
3c:d3:65:bd:47:97:d0:86:28:af:04:a0:18:cb:93:
6b:ee:2e:c5:77:30:34:52:50:55:ee:48:83:ef:a5:
6a:e5:f7:7c:f1:dc:4f:24:aa:ff:e4:ad:55:78:76:
ef:97:2c:37:f2:88:97:ad:e6:82:89:4a:79:8e:a5:
71:ff:70:e5:bf:60:e0:1d:6c:f4:7d:15:9c:68:ca:
0c:3d:2a:2a:ae:83:19:76:9c:c9:b2:f8:86:a7:73:
e0:36:d9:5b:3d:f6:8d:75:45:28:db:e1:06:e3:50:
f6:38:55:b9:92:27:1f:bb:3d:0c:8d:dd:44:2d:cf:
2b:77:8f:8c:be:c7:e1:ad:5c:5b:54:6a:e4:4e:97:
c0:7c:f0:cd:bb:69:7b:75:bb:4d:f0:e3:3c:a9:57:
6c:48:aa:2b:02:1d:b6:06:87:32:5f:e5:e3:04:42:
ef:3c:e6:1a:c0:cd:45:30:23:da:2d:4e:f5:74:91:
2f:92:6b:bf:3f:3b:ee:e3:f1:ae:95:0c:45:79:db:
7c:73:8e:a1:dd:5b:00:31:97:ed:b6:8c:3f:11:2f:
e6:14:05:00:57:f5:de:73:34:8c:e6:8c:e4:c3:e0:
45:ab:03:51:56:53:8a:6f:ec:da:eb:f6:88:b9:c3:
c6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B3:C8:D8:DA:53:A2:CF:C9:E4:F5:30:2B:53:54:37:73:08:D9:FB
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/4LPI2NpTos_J5PUwK1NUN3MI2fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.114.51.0/24
213.169.149.0/24
Signature Algorithm: sha256WithRSAEncryption
da:b6:c9:8d:be:79:99:97:f9:cd:1f:1e:d9:90:f3:c8:c3:fe:
ea:ff:81:a9:a9:8f:0f:cd:59:b4:8d:28:54:f0:73:1a:0d:d8:
0a:13:e7:bd:7e:7a:44:ff:09:53:4e:c7:b9:3e:67:ff:82:eb:
a1:aa:03:29:b3:2d:43:e3:75:93:5b:37:e4:4d:b8:60:f4:a5:
02:dc:62:b2:5f:1c:fa:d9:1e:78:1a:b5:b7:26:ea:ec:3d:31:
b3:84:33:f2:f2:e3:46:f6:54:bf:67:70:09:ca:dd:33:d3:d2:
10:7c:62:8f:6c:ff:e8:d6:29:9a:ee:b7:db:36:f3:3b:4f:6b:
02:b1:71:8f:d1:45:84:fb:96:3e:b0:37:d8:43:ad:27:b2:1d:
39:40:55:14:f1:2e:24:d0:32:2f:d1:6b:fb:0a:aa:47:df:0f:
04:2e:78:a8:b4:94:e2:a8:7d:48:2a:f4:ae:a5:71:d5:6e:29:
21:b8:36:7b:4b:a3:25:95:7e:af:d0:3a:dd:32:b5:ce:e2:ba:
15:03:12:95:2c:20:c6:01:12:99:71:16:2e:0f:23:fa:9c:7b:
73:42:4b:a5:e4:4d:93:20:50:e0:26:de:75:b8:16:ca:84:6b:
88:1c:8a:07:1d:bb:6a:de:62:b5:d3:35:a6:94:8c:10:ef:aa:
4b:d8:98:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:53 2024 by rpki-client on console-ams.rpki-client.org