Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/4X84atcjosOQbqOmR9wFwd61aNs.roa
File: 4X84atcjosOQbqOmR9wFwd61aNs.roa (raw, json)
Hash identifier: 4yfVA6FGTk8VVncPAw5HRMlR7gLA13pMMcJxmA1NwMo=
Subject key identifier: E1:7F:38:6A:D7:23:A2:C3:90:6E:A3:A6:47:DC:05:C1:DE:B5:68:DB
Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802
Certificate serial: 0190DCEFC30F4C89780799CFCD785A5D901B
Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/4X84atcjosOQbqOmR9wFwd61aNs.roa
Signing time: Tue 23 Jul 2024 00:13:38 +0000
ROA not before: Tue 23 Jul 2024 00:13:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397423
IP address blocks: 185.251.144.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 23 Jul 2024 16:35:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:dc:ef:c3:0f:4c:89:78:07:99:cf:cd:78:5a:5d:90:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8d822165e7f01f722c973967f7554605240802
Validity
Not Before: Jul 23 00:13:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e17f386ad723a2c3906ea3a647dc05c1deb568db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5a:23:15:ff:a9:12:1c:da:a1:4b:93:6e:e0:
68:a8:2b:a8:9f:92:63:9e:22:3e:21:c1:61:ac:0d:
c7:eb:1b:5f:d2:c9:b1:eb:15:f6:f2:76:ae:45:2f:
90:46:2f:7f:a9:df:d3:68:92:07:d1:fa:7e:15:54:
62:11:0d:ee:46:fc:54:ee:d0:03:3a:be:83:b3:a4:
54:c3:ea:6c:a4:d0:d4:57:80:91:1d:72:68:f9:3f:
25:53:59:09:d9:b0:69:aa:43:ec:e3:c5:e5:18:59:
23:26:61:3c:c6:b5:cd:ed:ad:ff:4b:aa:62:e9:75:
e1:f7:6b:08:5d:f0:38:dc:f8:33:47:db:b0:61:1e:
74:18:7f:32:2e:77:b3:39:c9:72:90:24:10:b0:77:
28:a7:eb:a1:4d:a4:cf:03:ef:87:9b:29:ab:2b:11:
8e:e8:7a:f1:f9:b2:86:70:54:02:7d:f5:44:f5:03:
f0:59:d9:ec:db:c0:22:8b:36:93:45:21:d3:d6:26:
26:87:6e:c6:4e:92:b7:7b:7a:30:3b:96:9d:69:0b:
01:5e:b4:e0:2f:5c:8e:7a:1d:fd:54:32:dd:a2:55:
a0:56:a4:f4:de:c6:d8:5d:5a:11:b2:dc:45:ad:3a:
d7:63:af:f7:3a:ae:a9:50:c9:66:69:b2:9b:69:ed:
8d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7F:38:6A:D7:23:A2:C3:90:6E:A3:A6:47:DC:05:C1:DE:B5:68:DB
X509v3 Authority Key Identifier:
keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/4X84atcjosOQbqOmR9wFwd61aNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.144.0/22
Signature Algorithm: sha256WithRSAEncryption
22:a1:8d:0b:27:4c:bf:af:f4:69:d4:de:b6:a4:5d:04:61:9e:
e9:14:59:a9:d6:f6:23:30:79:ff:e3:b5:9d:2d:c0:eb:51:19:
14:23:e3:5b:cf:84:71:90:bf:da:4c:02:f2:27:cb:60:e0:85:
99:a6:a3:bb:72:ea:d6:84:c7:30:7a:84:c9:a2:12:84:45:6f:
dd:fd:ae:27:b7:e3:ca:b5:7f:5f:66:be:31:15:0e:ca:39:1c:
2c:ca:4f:94:a6:e4:46:6f:e9:50:74:b1:a5:6f:ca:cf:d5:45:
39:e3:ac:6b:7e:8c:15:be:af:ea:44:6f:49:60:25:a5:23:c3:
86:e6:56:93:c1:9b:38:08:da:eb:af:79:e2:09:23:e3:a4:85:
68:b7:c0:2a:e3:08:80:31:f8:22:f8:5d:d2:f4:ca:a5:50:e8:
27:7c:aa:8b:a9:6b:92:a8:92:b9:55:3e:48:ef:a4:a0:ca:1a:
db:36:14:ae:b2:4d:cb:a3:a8:a8:7e:6a:5a:f8:fc:f7:3e:44:
34:41:e5:b0:11:35:27:41:7b:1e:7e:a3:cd:e1:5d:9a:60:66:
9c:9f:e5:26:a9:9b:3e:95:09:0e:94:e4:06:7b:0b:50:5b:53:
dc:9f:f5:d3:6f:d7:74:c2:0f:b5:d2:f5:64:4b:77:fc:7c:58:
1b:7b:f9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 19:32:02 2024 by rpki-client on console-fra.rpki-client.org