Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/pQ6N1i3TBDMg0rcuqDiB5Dt1ys8.roa
File: pQ6N1i3TBDMg0rcuqDiB5Dt1ys8.roa (raw, json)
Hash identifier: lT6VIThJRMKNG+AbB8mZzeXgJSTIluLXG4ct7xZVOLM=
Subject key identifier: A5:0E:8D:D6:2D:D3:04:33:20:D2:B7:2E:A8:38:81:E4:3B:75:CA:CF
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018F345D8BDEAF232E65126BA218D6F2A47F
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/pQ6N1i3TBDMg0rcuqDiB5Dt1ys8.roa
Signing time: Wed 01 May 2024 13:34:56 +0000
ROA not before: Wed 01 May 2024 13:34:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204769
IP address blocks: 85.117.241.0/24 maxlen: 24
192.144.34.0/24 maxlen: 24
193.38.248.0/24 maxlen: 24
2a09:ff00:103::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 May 2024 11:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:34:5d:8b:de:af:23:2e:65:12:6b:a2:18:d6:f2:a4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: May 1 13:34:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a50e8dd62dd3043320d2b72ea83881e43b75cacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:80:61:a4:35:03:ca:93:8c:6b:37:a8:78:4b:
dc:e6:f7:7f:d0:7c:17:0b:65:4e:c2:c8:dc:54:48:
59:04:7c:20:c4:12:78:28:e7:18:56:03:ec:d1:3d:
ed:a5:1a:df:11:f8:f3:42:84:56:77:77:79:e8:de:
6c:f0:89:b1:e1:65:2a:3a:cc:b2:77:da:74:a4:01:
86:7f:6f:ba:1a:89:94:f2:f3:8e:52:f3:e0:79:6e:
da:8d:a4:9a:9c:a7:b1:6f:ff:d7:85:6a:19:6f:df:
24:cb:40:aa:ea:ff:7a:cc:1c:32:0f:98:60:54:5d:
b0:4c:89:0e:7a:8e:bb:2c:88:18:b8:24:bc:8d:7a:
7f:2b:bd:b0:95:17:f8:ca:56:f8:66:7c:40:51:2b:
55:0a:77:80:46:1c:ba:63:a0:ff:f5:1b:0a:12:63:
59:80:a5:8f:bd:c5:0e:e7:de:59:b9:05:b4:a5:ed:
94:a4:8d:d1:87:5f:77:09:99:84:42:31:43:9a:c0:
6e:75:fe:22:81:27:3e:3d:b4:25:8e:d6:2a:71:f8:
61:a7:73:37:f5:fc:9d:7f:6e:ee:f0:76:e7:ab:e2:
d1:ab:4a:71:b2:ec:04:b9:67:21:c8:9f:08:27:bf:
7a:a8:8b:13:d7:a6:63:2b:a1:2b:55:8d:2b:81:bc:
26:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0E:8D:D6:2D:D3:04:33:20:D2:B7:2E:A8:38:81:E4:3B:75:CA:CF
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/pQ6N1i3TBDMg0rcuqDiB5Dt1ys8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.241.0/24
192.144.34.0/24
193.38.248.0/24
IPv6:
2a09:ff00:103::/48
Signature Algorithm: sha256WithRSAEncryption
81:a3:aa:fa:00:f2:34:25:41:46:99:b6:25:99:84:ed:5d:8f:
d5:2b:eb:35:41:1a:e0:65:e2:e4:14:47:51:11:6c:1d:cb:4f:
2b:33:79:9f:fa:55:2c:89:22:c6:3c:17:4a:9f:53:4b:80:27:
3b:80:a4:1b:96:76:ff:0b:9c:99:fe:2e:f1:57:1c:b6:01:b3:
b7:da:bd:71:6e:6a:6e:2a:1a:90:14:00:c8:13:c5:71:63:51:
db:be:ff:4c:3f:1c:6c:4c:2f:02:d3:63:be:71:3c:04:39:82:
48:e0:64:c9:6c:1b:6c:c6:85:83:4a:49:ac:28:e5:db:47:a7:
2b:40:69:95:d5:1a:35:a6:4c:db:dd:f6:00:d0:0a:4b:8b:d6:
48:0f:40:42:c1:14:b0:09:1c:53:83:91:eb:ea:25:2b:62:dc:
06:c8:ab:61:86:40:62:b8:17:0b:e9:c7:eb:b5:21:96:5c:03:
6c:31:a9:f6:28:dc:e6:ab:d6:6c:97:b4:1b:43:d7:ea:b7:96:
c0:12:18:72:4d:08:1e:81:22:1a:6e:c2:6e:27:35:a4:16:16:
d6:49:c0:7c:2f:e4:44:a7:83:9e:31:4d:43:8d:77:5b:89:ea:
c8:27:dd:cb:8d:f0:b9:9e:d9:2b:36:a3:aa:2a:20:b3:e0:7f:
b6:45:b6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:56:35 2024 by rpki-client on console-ams.rpki-client.org