Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/sqN2gAEKT3SrX7z45-fotsLd8EQ.roa
File: sqN2gAEKT3SrX7z45-fotsLd8EQ.roa (raw, json)
Hash identifier: sRRGvagh5bWZppre83s+t8L217E5eaa16EfA4iHHEnI=
Subject key identifier: B2:A3:76:80:01:0A:4F:74:AB:5F:BC:F8:E7:E7:E8:B6:C2:DD:F0:44
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 0187B7DACA26C34B6C59B19D7950761AE802
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/sqN2gAEKT3SrX7z45-fotsLd8EQ.roa
Signing time: Tue 25 Apr 2023 09:59:41 +0000
ROA not before: Tue 25 Apr 2023 09:59:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6220
IP address blocks: 213.198.48.0/24 maxlen: 24
213.198.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:da:ca:26:c3:4b:6c:59:b1:9d:79:50:76:1a:e8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Apr 25 09:59:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2a37680010a4f74ab5fbcf8e7e7e8b6c2ddf044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b9:96:b7:e6:04:9f:ba:74:8b:8c:cb:00:07:
32:57:1b:bb:05:35:da:72:8f:e0:e7:6a:47:b5:bf:
f7:df:c5:f5:d1:29:0b:b4:db:1a:ee:1a:65:00:6d:
bf:0f:5b:ba:5e:3d:b8:65:76:e6:a1:f6:b0:d3:07:
4b:30:fa:0b:a3:a6:4d:b5:5b:6e:ae:86:b7:a9:a1:
e5:a6:d3:12:23:cd:49:25:58:48:16:46:66:58:4a:
44:00:26:d8:2a:6f:a6:4e:df:4d:25:63:81:ba:06:
75:c6:25:31:4f:4e:56:c5:aa:6c:3d:58:d8:26:42:
67:5a:78:f1:cc:27:15:13:71:37:f0:5a:b3:5a:f3:
a6:db:b1:79:ab:41:48:a0:d9:74:73:dd:71:c6:da:
73:86:74:fa:a1:31:0f:00:09:54:f4:ff:17:1a:6c:
34:56:8b:cb:64:e1:f7:e1:92:5d:4f:a5:28:af:2f:
e4:0c:c0:b4:77:6a:77:2d:d5:e8:fb:ca:f8:78:28:
a7:89:7f:a3:72:a8:96:3f:49:62:72:3c:8b:9f:f4:
6d:1e:38:88:29:14:7a:dc:a2:e4:85:c5:27:29:d8:
25:2c:0a:66:c7:5d:f6:e6:4c:fe:10:75:87:b5:ae:
7b:df:16:f5:20:b3:c3:3b:5b:e6:14:4f:cf:60:c6:
d7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A3:76:80:01:0A:4F:74:AB:5F:BC:F8:E7:E7:E8:B6:C2:DD:F0:44
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/sqN2gAEKT3SrX7z45-fotsLd8EQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.198.48.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:40:fb:0e:d1:98:22:1b:ff:0b:8b:d7:dd:c6:39:8f:0c:34:
f3:62:f5:46:33:fa:bd:84:6d:83:fe:3f:46:15:cb:e5:01:68:
ad:ee:08:d1:52:fc:d3:f3:7e:67:c7:7a:05:87:f1:2d:35:31:
8b:1a:ad:3f:c6:24:d4:77:fd:20:ab:7a:fd:17:7d:d9:a1:96:
7f:6e:f2:b3:f2:14:15:e3:2c:50:d0:27:24:69:cf:64:69:57:
ea:1b:51:e7:96:23:6a:3b:f4:52:d5:e9:d4:9f:a7:a9:4b:12:
ed:bd:7b:b8:ea:be:bf:2e:9b:ef:d7:4e:24:88:16:6f:4c:95:
68:9f:ac:22:2e:83:c2:ae:3a:90:f9:1c:81:f0:94:7d:32:7b:
ad:c6:e2:dc:1d:a0:40:ab:ea:9c:b7:a2:35:27:be:bc:c9:8b:
d5:9f:52:a4:02:f2:1e:7e:a1:7e:05:9c:f4:0c:dc:78:7d:13:
bc:ef:b0:6d:c0:65:13:9a:16:04:1a:43:08:84:ed:27:f1:16:
d0:b4:62:a4:d2:60:7f:dd:13:dd:9a:3e:ce:56:0c:65:68:00:
03:ce:ee:ab:53:d6:7d:9b:50:ac:e3:aa:d7:05:ba:36:ae:8b:
22:22:8e:e7:bd:53:23:52:30:b3:2a:9d:8a:96:fb:19:53:61:
b6:ff:4b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:40 2024 by rpki-client on console-fra.rpki-client.org