Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/456eac-65df-4dd1-bf9c-0103a899c2de/1/4LEt6yY9BsUlFUkCupIvlbirmKk.roa
File: 4LEt6yY9BsUlFUkCupIvlbirmKk.roa (raw, json)
Hash identifier: LHjCkPhHses2zfqz2CxjtjNtKwK2EXG7Qbl5GlL+6ck=
Subject key identifier: E0:B1:2D:EB:26:3D:06:C5:25:15:49:02:BA:92:2F:95:B8:AB:98:A9
Certificate issuer: /CN=99fad2527eafa95215a8fed67a27fad3cfb2d37f
Certificate serial: 0190EDC00CE8AECC435F649871F9ED8656AF
Authority key identifier: 99:FA:D2:52:7E:AF:A9:52:15:A8:FE:D6:7A:27:FA:D3:CF:B2:D3:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfrSUn6vqVIVqP7Weif608-y038.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/456eac-65df-4dd1-bf9c-0103a899c2de/1/4LEt6yY9BsUlFUkCupIvlbirmKk.roa
Signing time: Fri 26 Jul 2024 06:35:04 +0000
ROA not before: Fri 26 Jul 2024 06:35:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 195.184.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jul 2024 14:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ed:c0:0c:e8:ae:cc:43:5f:64:98:71:f9:ed:86:56:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fad2527eafa95215a8fed67a27fad3cfb2d37f
Validity
Not Before: Jul 26 06:35:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0b12deb263d06c525154902ba922f95b8ab98a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:be:76:5f:9d:fe:43:dd:8d:c4:35:04:80:f1:
6f:b5:e2:9c:98:b3:c5:3e:04:37:89:53:93:ff:ef:
a0:77:50:fc:54:22:1d:c4:59:d9:f5:4d:ff:0b:7a:
d0:d9:e8:a7:7e:3c:04:32:9d:fe:4e:b4:cd:82:73:
c0:0c:b9:c0:35:e6:8e:0e:2d:4f:b3:d2:fb:6b:46:
07:eb:be:2f:90:f5:f2:78:23:eb:ec:8d:3c:1a:41:
b7:8e:00:fa:01:56:db:0e:ff:fe:de:c8:80:ff:06:
9b:05:a0:0b:fa:16:77:42:c2:0f:5f:43:f8:1a:1e:
fc:ca:a1:d2:15:6d:a7:6a:ca:97:83:42:e7:12:18:
62:8b:7b:ed:b0:5b:bb:f7:0f:f0:04:30:44:5c:90:
69:93:2d:95:11:d5:68:a6:36:1b:65:cd:5f:e8:7e:
c2:37:6a:90:e2:88:15:9f:10:5d:a3:e8:f9:38:fc:
12:22:7f:9f:af:dc:91:8f:c4:94:8b:0c:55:db:29:
e2:8a:96:93:06:56:32:b9:66:d0:11:58:03:84:4b:
33:c8:b4:56:9e:6f:e0:7c:83:b6:82:3e:3d:c0:c1:
ae:6b:1f:c3:02:06:b4:1f:42:0a:47:9f:3d:5a:c2:
31:a9:a6:f2:5f:c7:ec:19:3c:e0:1c:e9:98:a2:e3:
0e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B1:2D:EB:26:3D:06:C5:25:15:49:02:BA:92:2F:95:B8:AB:98:A9
X509v3 Authority Key Identifier:
keyid:99:FA:D2:52:7E:AF:A9:52:15:A8:FE:D6:7A:27:FA:D3:CF:B2:D3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfrSUn6vqVIVqP7Weif608-y038.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/456eac-65df-4dd1-bf9c-0103a899c2de/1/4LEt6yY9BsUlFUkCupIvlbirmKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/456eac-65df-4dd1-bf9c-0103a899c2de/1/mfrSUn6vqVIVqP7Weif608-y038.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.76.0/24
Signature Algorithm: sha256WithRSAEncryption
38:21:72:49:5a:f9:d5:34:8e:21:38:40:7e:3a:ed:17:11:c7:
29:16:4b:1a:e9:74:74:6f:58:b4:00:11:60:7a:f1:77:fc:78:
7f:8b:9c:af:c0:39:d9:84:44:79:51:d6:f3:0a:d9:a4:f5:14:
c1:d5:a2:fa:82:09:e3:34:3a:48:cc:3a:ba:13:36:f2:a9:6b:
17:43:44:3b:8a:55:08:e9:f2:23:30:48:ca:c5:c7:2b:88:f0:
cd:4b:31:ee:1e:0c:3f:2f:42:5a:37:e1:71:0e:47:dd:1b:dd:
68:9e:74:a2:a7:d6:1c:7b:47:d5:36:30:7e:4c:d2:f8:12:53:
93:78:29:28:d2:90:06:0c:c6:c6:ba:c3:de:10:e4:fa:71:63:
52:b9:c2:9b:99:5d:6a:b2:ab:91:c7:d9:69:93:a3:1a:1d:c3:
e5:fe:e1:75:8f:4c:89:11:5d:d2:f3:53:d8:ca:08:fd:2a:37:
7f:e9:2c:b0:eb:81:c3:9e:93:31:c9:87:a3:b5:49:85:59:7d:
67:51:ab:49:02:15:cf:31:6e:31:60:d4:79:01:99:c8:7c:99:
29:09:fa:31:99:57:13:fe:15:a9:a5:5b:33:1b:80:57:c7:b6:
c3:7d:54:ab:dd:e0:ee:8a:3d:17:29:8b:37:5b:53:dc:f6:e6:
24:2d:01:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 17:42:17 2024 by rpki-client on console-ams.rpki-client.org