Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/nE3pc-2gNoXTlCrVc7_9NyWAa8E.roa
File: nE3pc-2gNoXTlCrVc7_9NyWAa8E.roa (raw, json)
Hash identifier: eqhujAKWcFm2b24q9X/1vzhE9ssXBex9XZTnH902xAA=
Subject key identifier: 9C:4D:E9:73:ED:A0:36:85:D3:94:2A:D5:73:BF:FD:37:25:80:6B:C1
Certificate issuer: /CN=49596cecc21dd02677a727ef37f0689546ea5097
Certificate serial: 01856E41CF92D3BB2025BC83BED856648540
Authority key identifier: 49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/nE3pc-2gNoXTlCrVc7_9NyWAa8E.roa
Signing time: Sun 01 Jan 2023 16:54:44 +0000
ROA not before: Sun 01 Jan 2023 16:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49206
IP address blocks: 83.118.224.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:41:cf:92:d3:bb:20:25:bc:83:be:d8:56:64:85:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49596cecc21dd02677a727ef37f0689546ea5097
Validity
Not Before: Jan 1 16:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c4de973eda03685d3942ad573bffd3725806bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:98:de:ac:76:24:02:cc:29:b1:13:8f:bd:48:
d6:e3:2f:9c:ec:2f:4c:07:12:70:f6:b4:6f:98:81:
2e:09:6f:27:e4:47:3c:fc:a5:a9:80:ca:66:ed:06:
17:a4:d5:04:da:34:27:71:59:54:1d:de:31:32:fd:
0a:51:e7:25:fa:c4:21:d9:b6:86:e3:da:40:a9:fd:
e7:26:52:bf:af:99:72:42:86:12:b0:b0:f8:3e:6f:
89:ed:cc:87:20:4f:5e:c6:91:cc:e2:12:b4:04:bc:
c1:25:ae:db:bc:73:c9:9b:65:f5:2a:6d:6b:a5:00:
21:5b:d1:7c:d3:40:51:6d:dd:96:dd:9a:23:b8:aa:
b0:6c:c8:42:80:68:36:ce:3c:fc:8c:81:e2:23:4a:
2f:6b:1d:ac:a5:07:24:30:d0:25:e4:2e:97:44:d4:
bc:0b:04:c0:a0:b4:bc:0e:f3:94:8e:64:f3:88:44:
59:10:a5:b0:05:4c:7d:15:ef:4f:c6:35:93:eb:94:
c0:4f:fa:8c:25:92:c1:0d:0c:7b:ab:f2:65:cf:e9:
4d:fd:99:a7:e6:00:99:83:02:5f:44:3c:73:a4:f2:
85:1f:ea:98:e2:aa:cd:5a:64:4a:34:6f:6c:5c:35:
cf:c8:9e:94:57:cd:56:20:f8:b0:f6:cc:e7:a7:be:
f7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4D:E9:73:ED:A0:36:85:D3:94:2A:D5:73:BF:FD:37:25:80:6B:C1
X509v3 Authority Key Identifier:
keyid:49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/nE3pc-2gNoXTlCrVc7_9NyWAa8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.224.0/22
Signature Algorithm: sha256WithRSAEncryption
53:c9:62:cd:ed:ed:72:c5:f8:66:86:a8:a8:17:26:5c:ef:fb:
fd:f5:da:d8:5a:3d:29:44:53:64:00:ed:73:e4:6c:e5:6c:2f:
d5:43:a9:ea:05:c2:6e:ee:e5:77:1d:21:b4:e0:b6:d0:47:65:
e3:c8:b9:5b:40:f5:59:60:29:5a:e0:81:57:29:86:20:24:c8:
ab:0a:33:23:ac:27:94:e1:d7:50:8b:2d:8c:79:49:34:df:19:
aa:6c:e0:39:03:34:40:78:40:e2:77:b1:86:88:53:c5:99:5f:
2a:15:55:2c:06:5b:5a:b3:8c:58:4f:3a:f6:d8:db:76:b7:f4:
3c:14:20:b4:55:b3:95:70:ef:95:f4:69:18:e3:e3:5d:82:c1:
95:41:ec:32:1b:84:4c:a6:39:b8:98:e7:42:87:9d:af:59:34:
ce:41:66:f9:8b:e7:95:b6:1b:f0:ca:46:cf:13:ab:f6:fc:8f:
d0:2e:cb:12:7c:b9:03:51:e7:95:be:43:7a:82:80:68:ae:65:
95:13:52:61:9a:a0:78:e3:e4:c7:52:5b:2c:60:ae:16:6e:dc:
f4:a2:1f:c4:01:7f:33:2e:fa:fd:51:b5:2f:85:50:10:c8:54:
94:bb:14:38:e2:93:32:41:b3:af:96:60:9f:28:84:fa:e7:1b:
d1:d9:f1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:22 2024 by rpki-client on console-ams.rpki-client.org