Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/3irxGHk49IGq7lL_3NOPYTpLx74.roa
File: 3irxGHk49IGq7lL_3NOPYTpLx74.roa (raw, json)
Hash identifier: LkFmgU5Cxd+1OLqsoze1rCEg3H70BBpekQy5Xmx+gIk=
Subject key identifier: DE:2A:F1:18:79:38:F4:81:AA:EE:52:FF:DC:D3:8F:61:3A:4B:C7:BE
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 0187B7DAD084EA0682786300EEFFC2CD3870
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/3irxGHk49IGq7lL_3NOPYTpLx74.roa
Signing time: Tue 25 Apr 2023 09:59:43 +0000
ROA not before: Tue 25 Apr 2023 09:59:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49607
IP address blocks: 83.217.232.0/24 maxlen: 24
81.19.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:da:d0:84:ea:06:82:78:63:00:ee:ff:c2:cd:38:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Apr 25 09:59:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de2af1187938f481aaee52ffdcd38f613a4bc7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6a:99:d5:b1:65:f1:ff:37:c2:ac:d9:ba:a8:
19:aa:90:2d:53:d4:62:a9:1b:25:a1:02:18:00:81:
fa:0a:2e:27:67:2a:0c:60:e7:a3:2a:bc:51:13:23:
3d:1c:4e:e7:bd:0e:26:ec:eb:8a:49:5f:8d:19:b6:
b2:f8:10:6e:5b:de:f0:26:98:de:4f:72:de:8e:a5:
60:d5:91:60:6c:01:ca:5c:f7:6d:ef:45:4a:39:d1:
b2:73:a5:f7:88:18:61:5e:d4:85:2d:a0:d9:e3:64:
0d:70:14:07:28:27:44:7a:81:6e:81:7a:81:7d:00:
a0:6f:cc:78:b0:96:6c:a8:73:79:e7:70:ac:e1:d5:
f9:7c:58:93:7e:34:64:f5:6d:e8:69:52:b3:6d:da:
ba:12:eb:ec:87:37:e8:01:c2:76:f3:f1:6b:74:7d:
1d:70:64:82:f0:1a:3f:44:80:d8:66:12:7d:32:dc:
5a:32:31:36:70:47:90:a0:14:1f:34:c9:34:dc:39:
98:34:d5:28:ba:a1:9d:91:7d:2f:40:51:f0:84:6d:
9e:ff:a3:28:f4:ea:d4:a5:31:04:75:85:4c:fc:04:
ca:75:c7:62:b5:85:b9:81:d5:bc:b1:13:5d:3f:c1:
c2:98:d1:50:4e:17:d3:d7:02:4a:2e:bf:a6:8d:eb:
3b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2A:F1:18:79:38:F4:81:AA:EE:52:FF:DC:D3:8F:61:3A:4B:C7:BE
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/3irxGHk49IGq7lL_3NOPYTpLx74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.111.0/24
83.217.232.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:23:55:42:01:a5:f4:76:38:a2:69:44:9f:fa:45:4c:5b:55:
10:92:cc:5f:d5:ab:2c:78:fd:53:c3:9e:53:58:3a:78:75:3b:
96:6d:cb:cd:49:67:0b:8a:38:da:3e:41:f7:41:fd:5d:30:cd:
a4:c5:4f:42:65:5e:5f:e7:89:6e:e8:14:33:1a:16:9b:e5:0b:
6c:30:4d:1a:94:ec:e5:0d:64:fc:fe:51:a9:14:18:16:2d:e0:
22:57:66:7f:a0:71:9d:42:a9:08:ff:77:d9:71:08:73:c3:dd:
dc:25:f3:4a:9f:b6:7f:66:f7:26:ef:24:4c:cb:ca:e0:56:2b:
39:bc:b2:4e:d5:6b:4a:ef:f1:ad:f0:1e:f8:b2:98:59:1e:07:
73:80:6d:83:29:25:23:67:b7:79:bb:30:53:93:65:d1:cc:de:
44:52:b1:d1:8f:50:50:b3:02:88:5d:c8:1b:6f:93:fc:c4:a6:
72:8c:7c:31:9b:d1:5e:f5:4e:71:69:23:4b:18:64:0d:18:fd:
64:23:b1:ac:bc:46:d1:59:68:73:05:ce:ce:89:cf:1e:49:39:
42:b2:4d:3a:f9:b1:01:eb:49:34:89:0d:b7:d8:3a:dc:49:42:
ad:97:51:50:fe:58:a3:fd:1f:2c:95:15:53:c3:9b:8e:93:4a:
60:a2:5f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:40 2024 by rpki-client on console-fra.rpki-client.org