Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/4fJXZ61_uG6QaRB2mcPKSXIknbU.roa
File: 4fJXZ61_uG6QaRB2mcPKSXIknbU.roa (raw, json)
Hash identifier: C/m1P3OicbpGBQHLFsyVar7wqgwmPV41pWXqEBDgfMA=
Subject key identifier: E1:F2:57:67:AD:7F:B8:6E:90:69:10:76:99:C3:CA:49:72:24:9D:B5
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018D64F5A483B33204C49F8D206C535F27C4
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/4fJXZ61_uG6QaRB2mcPKSXIknbU.roa
Signing time: Thu 01 Feb 2024 13:57:16 +0000
ROA not before: Thu 01 Feb 2024 13:57:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207783
IP address blocks: 85.120.144.0/24 maxlen: 24
194.102.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Mar 2024 16:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:64:f5:a4:83:b3:32:04:c4:9f:8d:20:6c:53:5f:27:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Feb 1 13:57:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1f25767ad7fb86e9069107699c3ca4972249db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:2e:b7:ca:09:ad:1b:c3:ca:18:c7:11:dc:
42:85:48:48:f4:9d:72:97:ab:25:0d:7c:77:4c:d4:
e3:89:b8:03:04:0e:7f:d4:f2:02:ad:b3:a1:da:59:
54:be:ee:96:76:26:af:03:5e:17:7e:a2:55:20:dd:
a8:a0:ce:82:03:e6:15:9c:27:d5:d8:a8:8d:d7:24:
40:b2:1b:da:32:97:6b:41:fc:62:29:b6:44:e0:e1:
57:55:52:10:df:b3:cb:0f:85:8a:3d:06:7f:5e:22:
60:3c:c1:4e:8e:e9:14:31:d9:7b:0c:a4:74:ed:cb:
1f:12:65:37:be:b9:cc:5a:cb:6d:8e:8d:b2:b9:64:
b7:a8:03:c5:4e:a2:93:95:bb:5e:b7:dc:3a:85:20:
fc:16:62:09:d9:83:70:1a:e2:1c:66:7f:d3:bc:52:
c3:85:0f:99:5c:da:b7:dd:ea:54:be:ed:0e:90:f2:
67:15:65:8a:b1:f1:3f:69:10:72:eb:ea:b4:c8:f6:
a4:3b:4a:d0:b1:63:98:2f:f9:bb:df:c4:af:61:10:
6a:89:d6:7e:86:53:c6:3e:41:50:65:79:07:4a:d2:
e1:bc:e1:3d:3c:cd:d7:e7:d8:4d:08:12:b7:9f:75:
ef:20:e8:df:a7:e3:04:fa:44:90:fc:63:f5:87:cc:
35:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F2:57:67:AD:7F:B8:6E:90:69:10:76:99:C3:CA:49:72:24:9D:B5
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/4fJXZ61_uG6QaRB2mcPKSXIknbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.144.0/24
194.102.170.0/24
Signature Algorithm: sha256WithRSAEncryption
83:53:9f:58:48:35:74:df:c0:1d:e5:37:5e:a9:54:bb:e3:1d:
6a:b6:29:30:75:60:4f:db:aa:a6:bc:ca:5a:25:2d:ba:59:e1:
ca:79:34:cd:f4:12:25:88:05:c3:98:88:40:22:f2:59:80:bc:
b7:c8:4d:20:60:11:00:25:32:d3:a1:e1:29:9d:79:3b:a4:f5:
6d:87:6c:87:7f:6d:98:32:81:de:a8:40:53:b1:cd:24:b3:7b:
14:6a:df:47:cb:9d:c9:de:ec:02:fa:f6:35:9f:6e:aa:b0:84:
45:97:f4:48:ad:e1:f2:56:83:16:4f:57:4b:2d:08:e8:a0:4e:
d5:fc:88:cb:a7:29:3d:14:ac:ff:da:d9:cf:95:6c:b9:57:a2:
41:f1:a1:0d:07:ab:47:12:d3:8c:1f:8c:d0:6e:be:8f:a8:b5:
73:9a:0e:4c:11:a1:ba:0e:63:43:c1:e2:e3:cf:ff:35:2c:8d:
4e:67:e7:ec:be:f6:df:6a:e3:d3:3c:af:e4:31:c1:30:de:00:
48:c7:63:17:d4:86:e7:e9:56:fa:cc:e7:ea:6c:ac:b4:8c:a9:
ba:b4:72:10:19:fa:c0:7f:97:8f:4e:20:50:86:4e:06:e6:ae:
6e:eb:92:39:c7:be:f2:29:6a:77:b3:bf:64:27:2f:ea:69:06:
da:38:22:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 10 18:14:52 2024 by rpki-client on console-ams.rpki-client.org