Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/iElrd-cJ9-el0TQ8RSTw87Q4b3s.roa
File: iElrd-cJ9-el0TQ8RSTw87Q4b3s.roa (raw, json)
Hash identifier: 9cX8TuE7s4Ltr64WWkcLxzXKXBbQ7Gln2Jtjil2wt9Y=
Subject key identifier: 88:49:6B:77:E7:09:F7:E7:A5:D1:34:3C:45:24:F0:F3:B4:38:6F:7B
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018570027DEB872F49BFDA8FED7FB4DE88E7
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/iElrd-cJ9-el0TQ8RSTw87Q4b3s.roa
Signing time: Mon 02 Jan 2023 01:04:49 +0000
ROA not before: Mon 02 Jan 2023 01:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34117
IP address blocks: 195.46.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:7d:eb:87:2f:49:bf:da:8f:ed:7f:b4:de:88:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 2 01:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88496b77e709f7e7a5d1343c4524f0f3b4386f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:dc:90:ef:a8:06:ac:fc:2f:86:3e:f7:c7:84:
35:30:ec:93:3b:f3:80:fb:ec:e7:2e:43:b9:40:25:
6b:8f:ee:b8:b7:0e:c7:5d:5c:07:c3:24:df:04:6d:
63:a1:5a:c3:75:80:c9:e5:79:78:ed:4f:f9:a2:6e:
2f:82:d3:72:d5:7e:fe:f8:db:e3:84:07:c6:53:74:
01:35:4d:62:f9:41:70:55:18:f8:f1:95:b8:e7:4f:
f0:f0:b7:e6:b8:db:8f:76:55:d1:79:b7:a0:52:8c:
0c:5f:9f:92:13:b7:39:c9:4e:73:cf:4e:c6:aa:b2:
5d:7a:e3:73:50:41:22:c1:c3:6f:a7:ce:d2:c5:5a:
49:de:02:2a:6b:81:30:d5:e3:e5:e5:c4:27:f1:6f:
d5:a1:47:5f:0f:a6:d6:cf:27:b9:d7:a1:14:4f:fb:
df:9a:13:91:38:c5:82:98:2a:1e:d7:7a:0a:a1:00:
41:71:e0:af:f7:31:24:3c:e3:f7:1c:d4:0f:77:ea:
d6:6f:b5:e4:af:24:7a:b6:fb:ec:2e:74:09:35:c0:
cf:60:4b:1f:33:7b:bf:31:cc:d9:47:5b:d9:8c:22:
56:2f:6f:3a:f3:cb:48:6d:ac:d9:19:f3:e1:39:25:
0c:cc:93:8d:d0:b9:72:63:17:ff:64:d3:14:0e:50:
b0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:49:6B:77:E7:09:F7:E7:A5:D1:34:3C:45:24:F0:F3:B4:38:6F:7B
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/iElrd-cJ9-el0TQ8RSTw87Q4b3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.46.130.0/24
Signature Algorithm: sha256WithRSAEncryption
07:35:33:33:9f:04:5a:7b:09:39:a7:be:ee:dc:1d:48:d8:c8:
a5:2f:c5:32:6b:53:84:b2:50:96:ba:dd:fc:15:ba:91:87:14:
5d:e4:01:3d:5a:94:77:0f:ca:08:d4:f3:94:88:4f:2a:0d:7c:
b8:29:f5:bb:f0:e3:be:e7:df:3e:2f:1b:7e:17:34:8c:87:8c:
c4:84:4c:6e:c7:43:be:66:2a:68:0e:a5:78:c6:87:93:27:be:
dd:ac:c7:6a:eb:13:c5:32:c1:db:22:14:92:20:1d:9d:04:9b:
9c:14:56:8e:23:49:12:bd:a0:2e:5a:0e:cb:64:76:41:a6:40:
7c:6c:95:1d:3e:8a:b0:3a:6d:57:d8:fe:15:b6:f0:3f:d0:f2:
fe:e1:3b:50:10:26:c2:00:ca:2a:ee:75:78:96:5b:35:7d:a6:
a8:49:f3:22:2b:1b:64:21:34:77:a5:f5:e1:d4:03:8b:b3:9b:
10:bc:54:d2:61:11:ab:7a:45:c8:c5:59:ec:d4:4e:ec:a5:70:
bb:55:00:03:e5:59:2b:61:f2:2b:13:b4:6e:17:ca:5e:81:cc:
2e:05:41:0d:39:af:3f:18:bf:64:8f:4b:ba:5d:1f:67:38:7c:
a3:6c:92:14:93:5f:38:e5:e4:73:d3:c3:a7:3e:b2:d5:a9:d0:
bc:fd:7e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:56 2024 by rpki-client on console-fra.rpki-client.org