Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/IPQEJlKwTQHTgtBCOfO47-T66Fw.roa
File: IPQEJlKwTQHTgtBCOfO47-T66Fw.roa (raw, json)
Hash identifier: tuTEkcel/EvkwptmN3VryfDMZmwCp0Z/wSsnbNSc4CU=
Subject key identifier: 20:F4:04:26:52:B0:4D:01:D3:82:D0:42:39:F3:B8:EF:E4:FA:E8:5C
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01856CE6685F2D0E3B7CC4A4B8CD0B31D293
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/IPQEJlKwTQHTgtBCOfO47-T66Fw.roa
Signing time: Sun 01 Jan 2023 10:35:17 +0000
ROA not before: Sun 01 Jan 2023 10:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200475
IP address blocks: 213.91.146.0/24 maxlen: 24
213.91.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:68:5f:2d:0e:3b:7c:c4:a4:b8:cd:0b:31:d2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 10:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20f4042652b04d01d382d04239f3b8efe4fae85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:65:fc:ce:f4:5a:ef:05:b1:aa:e0:21:be:27:
87:62:90:9e:e4:87:48:58:0c:23:43:74:d1:db:24:
3b:7e:d6:82:fd:4a:aa:7b:aa:a9:29:10:07:19:a8:
50:d2:26:9e:c7:51:59:bc:19:86:7a:3d:56:fd:67:
7f:d4:2d:64:cd:75:4c:b5:39:dc:d3:98:39:fc:88:
0f:9e:67:9a:25:cf:a0:fb:40:af:64:75:b5:53:77:
dc:84:87:e1:31:b4:d5:93:46:56:48:f8:26:75:01:
03:7e:e0:07:1e:dd:08:23:2d:9e:f3:6a:c7:95:45:
9b:3e:04:f4:2d:3e:94:67:f4:02:41:ad:18:9b:bc:
5b:13:5f:90:59:4c:3e:89:5e:56:15:c9:55:5c:db:
b0:31:50:2d:93:75:26:f0:14:56:85:a8:38:1d:3f:
ce:9a:8d:f0:35:a6:00:fe:91:8d:91:cc:cc:ce:5c:
b9:30:79:f8:26:18:f4:3d:7d:e5:38:d6:d8:9b:ca:
c4:29:f6:1f:32:7e:27:c7:86:81:fe:68:1d:cf:51:
c1:3e:1f:c3:f4:5f:84:76:04:4e:42:e7:82:c0:a1:
6c:dd:85:b0:1c:9f:46:ef:6b:09:85:5b:72:1e:35:
17:59:27:c5:d8:c1:b6:32:c3:64:6d:7c:47:e3:f6:
64:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F4:04:26:52:B0:4D:01:D3:82:D0:42:39:F3:B8:EF:E4:FA:E8:5C
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/IPQEJlKwTQHTgtBCOfO47-T66Fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.91.140.0/24
213.91.146.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:fc:91:2b:03:b3:b2:33:69:1b:72:1f:55:db:0a:32:b7:a4:
05:72:ff:fa:e0:af:a8:84:41:f4:32:0c:01:00:1b:44:9a:6b:
d7:cd:0a:36:81:27:c9:dc:49:39:b0:64:7b:cc:54:8a:3f:30:
84:3b:a1:74:08:65:d1:15:d4:f4:eb:fc:e4:d3:33:2d:ec:12:
27:f1:c5:44:fc:00:89:3b:1a:d4:0d:ec:82:60:2a:10:da:94:
45:ec:6e:ff:e3:cd:ac:86:3e:38:a4:b3:36:de:a1:e1:65:bc:
ec:a7:96:89:1e:b2:1b:b4:2e:f8:c9:af:a5:36:7b:35:e4:33:
c4:11:49:93:e4:86:fa:56:f3:c3:ff:c4:b3:95:75:fe:95:41:
ae:b4:2b:c2:9a:d5:e2:08:2a:62:bf:17:d2:5f:fd:6b:a7:7b:
04:8a:09:7b:78:39:17:3e:a3:18:3a:c3:78:54:fd:61:14:f8:
d8:7c:3c:b8:c7:0f:6a:49:46:85:ac:29:af:1d:38:cb:f8:b2:
36:cf:20:c9:0d:47:eb:e7:37:1b:63:fb:31:b6:bb:9d:c5:5b:
44:00:27:fb:39:23:da:21:06:a7:0e:6e:4b:d7:50:b4:47:22:
10:78:f0:e0:c6:bd:c5:69:51:af:db:20:ce:1c:d1:f0:57:2e:
ef:68:a2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:04 2024 by rpki-client on console-fra.rpki-client.org