Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/55MO8nAXzK1pM_6xBXPe5S53FCU.roa
File: 55MO8nAXzK1pM_6xBXPe5S53FCU.roa (raw, json)
Hash identifier: G5Idnc/Rvm0G38zGYhodJMKtqNmtOuGH92ZmZHkBps8=
Subject key identifier: E7:93:0E:F2:70:17:CC:AD:69:33:FE:B1:05:73:DE:E5:2E:77:14:25
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01856CE652CE2217F8B2955400AFEE2C6E48
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/55MO8nAXzK1pM_6xBXPe5S53FCU.roa
Signing time: Sun 01 Jan 2023 10:35:11 +0000
ROA not before: Sun 01 Jan 2023 10:35:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31527
IP address blocks: 213.91.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:52:ce:22:17:f8:b2:95:54:00:af:ee:2c:6e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 10:35:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7930ef27017ccad6933feb10573dee52e771425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8f:78:e9:0f:d6:55:0b:9c:4d:77:80:e5:b8:
c2:62:16:d1:c0:e2:d0:f9:0b:a7:18:48:50:f1:7a:
d7:c1:81:87:5c:97:64:10:56:fd:84:8a:42:77:1a:
73:16:0f:25:6d:80:b4:27:ea:5e:8b:bc:73:ad:30:
68:63:32:ce:f1:e7:96:16:b8:7c:e1:b5:e6:3b:20:
71:a7:79:25:15:d4:1f:8e:a8:af:92:26:fd:27:48:
03:c5:47:a7:a4:34:c8:80:f9:41:fa:cc:73:25:28:
7e:fd:8a:b8:05:4f:3a:8e:d3:b6:83:15:84:53:54:
db:03:33:e2:3a:5d:9f:a3:ad:e7:b7:3b:b9:91:ca:
3b:b8:d5:ad:50:84:a4:e6:c8:5c:ec:51:e6:f2:2d:
3d:e3:5e:89:f5:ff:2f:93:6d:d1:0b:a5:cf:97:f8:
be:5d:d6:68:63:fa:f8:47:ed:60:34:6c:ba:01:b4:
d4:96:3b:c9:e9:4f:db:c1:64:70:e9:2d:6d:ff:c5:
0a:ff:56:4d:c1:a0:fd:1e:54:c9:e9:8d:a5:a4:17:
71:de:24:89:04:c5:e7:f7:9b:34:cc:d8:69:47:93:
f1:93:6b:22:87:44:44:f4:ef:c2:1b:76:59:eb:d2:
b9:d6:4b:8f:5d:80:29:fc:61:3a:de:a3:62:7b:cc:
26:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:93:0E:F2:70:17:CC:AD:69:33:FE:B1:05:73:DE:E5:2E:77:14:25
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/55MO8nAXzK1pM_6xBXPe5S53FCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.91.252.0/24
Signature Algorithm: sha256WithRSAEncryption
54:5d:b3:66:7a:50:a3:4a:20:e2:38:86:c3:43:86:8a:f4:46:
b0:64:26:9d:86:fd:a6:10:1e:15:d9:fb:8f:a6:14:48:a3:23:
14:3d:54:07:ae:cd:1b:c5:bc:0b:08:32:27:34:ed:dc:89:e6:
aa:f5:c3:6f:96:92:39:f6:0a:5e:d1:63:e2:fe:10:5d:af:7c:
82:27:64:78:a9:97:e7:df:c5:c9:dc:ec:d6:5f:29:f0:b7:05:
5f:6d:2b:ee:44:64:9f:6a:11:ac:d9:52:d0:48:8f:2d:7a:51:
0a:ee:2e:d7:4c:3b:63:b5:a6:4f:e2:d7:53:de:9b:b3:02:ae:
52:16:33:da:66:6b:3e:04:ae:be:7f:3e:db:d1:da:1d:6d:96:
8d:8b:24:54:45:8d:32:d4:7e:9e:38:d9:61:ea:f6:bd:93:06:
f8:0e:f1:8b:fc:f3:79:3f:1a:98:74:40:eb:17:e2:36:e8:f2:
01:09:76:54:ef:5b:9e:22:f5:09:87:f3:3c:1d:3a:cf:bc:f5:
ad:0a:6e:b0:f1:29:62:10:7c:8c:e6:e9:c9:de:a2:83:66:c3:
c0:e3:cb:38:0c:c0:90:39:ec:27:da:0a:4a:3b:25:db:75:ae:
9c:e4:c6:ba:fd:41:50:6a:2a:11:75:9c:ed:77:87:7e:8b:4e:
d6:9b:4e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:04 2024 by rpki-client on console-fra.rpki-client.org