Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/4LvPmBWrz0w7GN31RonopY0gwHc.roa
File: 4LvPmBWrz0w7GN31RonopY0gwHc.roa (raw, json)
Hash identifier: nmxJdhxnFzqq0GSYrMD72/Fz+ODobiRflQXD19tlaQQ=
Subject key identifier: E0:BB:CF:98:15:AB:CF:4C:3B:18:DD:F5:46:89:E8:A5:8D:20:C0:77
Certificate issuer: /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial: 01856D13BAB7E52E20FBD169077A61CB4062
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/4LvPmBWrz0w7GN31RonopY0gwHc.roa
Signing time: Sun 01 Jan 2023 11:24:47 +0000
ROA not before: Sun 01 Jan 2023 11:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4913
IP address blocks: 84.22.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:ba:b7:e5:2e:20:fb:d1:69:07:7a:61:cb:40:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Validity
Not Before: Jan 1 11:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0bbcf9815abcf4c3b18ddf54689e8a58d20c077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:08:74:61:7e:5f:bf:43:86:e9:49:56:c6:ff:
6d:39:66:7e:98:5a:3b:0d:b4:1c:df:10:4d:95:08:
0d:29:19:0c:79:37:13:2e:6a:d5:e8:72:4e:60:c1:
76:de:5d:8f:a9:b7:b3:a1:79:94:cf:f8:33:a9:54:
f4:c4:dc:64:fe:a8:b9:ed:5d:21:79:12:c6:43:35:
05:f9:2c:eb:f8:b1:08:07:05:ca:a9:f9:35:50:fe:
ef:d5:be:5e:28:16:c9:a9:88:a9:6b:ab:69:97:a5:
f3:45:b7:16:9a:4b:69:e3:11:c4:b3:78:9b:37:7a:
5e:16:06:b3:4f:4b:e0:a5:d7:6c:9a:3f:bc:fa:50:
f4:3e:00:ee:c7:7b:e5:0e:ce:60:30:5e:18:54:66:
40:12:95:50:61:52:d8:0b:a2:a1:41:e1:3f:8f:03:
cb:f5:4a:b2:66:d2:83:54:60:08:5e:93:93:d4:5b:
39:40:85:64:b3:78:cc:f7:9b:db:3c:57:2c:f2:be:
43:6c:17:ab:6a:3a:e1:6b:e5:61:43:cc:d9:eb:81:
71:b0:4e:7c:9b:c4:f2:27:fd:af:e9:50:6b:f3:95:
a3:11:c5:47:37:35:ef:74:11:82:9a:3e:a1:86:bc:
0c:78:17:2b:f1:10:ec:67:02:51:d8:3d:1b:26:23:
af:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BB:CF:98:15:AB:CF:4C:3B:18:DD:F5:46:89:E8:A5:8D:20:C0:77
X509v3 Authority Key Identifier:
keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/4LvPmBWrz0w7GN31RonopY0gwHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.22.76.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:2f:53:6f:00:fa:21:6a:d5:f9:12:3e:c8:fb:b6:68:b9:f7:
92:00:2c:b7:be:35:e9:c7:03:24:26:ea:f6:8c:c7:84:34:0c:
a2:2c:33:38:8b:ba:23:3e:9b:af:d0:73:85:77:5f:40:d6:79:
c7:7c:dc:1b:92:74:a9:67:b6:f3:fd:b6:d9:df:e2:4e:ed:f4:
bb:5e:53:e5:1d:18:b5:78:74:a0:60:93:bc:40:8f:0e:1b:f0:
33:94:71:5d:69:de:71:11:52:69:a0:db:df:99:a6:6b:bb:8c:
4d:1e:9e:5e:fa:41:9c:ee:92:f8:c2:f4:01:40:41:17:e2:a6:
06:ea:49:71:59:6c:8f:b1:d3:48:c2:a8:94:21:92:91:30:10:
9c:65:15:25:23:67:2d:77:10:a1:53:3e:d7:ee:ed:d6:8a:2f:
1c:ee:fe:e2:e6:1e:70:1e:84:1c:d3:65:54:82:9c:8b:23:48:
11:cc:9c:d0:3e:1c:79:0c:31:d7:7b:f8:4b:9d:d5:6d:b7:f8:
d6:e9:ef:d7:94:2d:db:a7:9a:09:24:72:23:9d:8b:24:e6:11:
48:d2:b8:d4:d0:70:32:af:10:a5:3d:fd:b2:2b:03:c0:bb:d2:
fe:f1:95:c4:fd:43:88:17:10:4a:88:9e:80:39:cf:07:17:be:
c0:21:a2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:47 2024 by rpki-client on console-fra.rpki-client.org