Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/47HUSMDxY32JzGPhtHuJGO2Pngo.roa
File: 47HUSMDxY32JzGPhtHuJGO2Pngo.roa (raw, json)
Hash identifier: t1vGQFfuwItJviLzAcy6kuFLrY1W6ay4WKvVhOEKJAo=
Subject key identifier: E3:B1:D4:48:C0:F1:63:7D:89:CC:63:E1:B4:7B:89:18:ED:8F:9E:0A
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018CC501534C77ED045E7342309ED320DBB3
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/47HUSMDxY32JzGPhtHuJGO2Pngo.roa
Signing time: Mon 01 Jan 2024 12:30:47 +0000
ROA not before: Mon 01 Jan 2024 12:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206766
IP address blocks: 91.194.10.0/24 maxlen: 24
79.143.19.0/24 maxlen: 24
185.255.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Feb 2024 17:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:53:4c:77:ed:04:5e:73:42:30:9e:d3:20:db:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 12:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3b1d448c0f1637d89cc63e1b47b8918ed8f9e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:eb:c0:bd:2e:f8:7b:6b:4e:3d:37:cf:0a:b3:
52:a8:23:4b:24:b3:fe:68:6c:42:20:b9:05:b3:5a:
5d:34:ef:cd:ea:62:4a:3c:fc:59:cb:3e:fe:6e:00:
37:44:a7:23:ad:1c:96:12:3c:09:da:00:1f:17:d2:
92:7f:17:36:c0:cb:c4:c7:c1:67:08:80:e8:fa:e8:
9d:e6:fb:55:ff:e7:53:aa:67:03:b1:39:6b:5a:ea:
3f:9a:97:77:43:1f:2c:91:70:3d:5e:ba:8d:5d:d8:
9e:cc:ae:0e:7d:22:05:07:1c:02:10:19:5d:fb:b9:
22:b0:62:c1:b9:37:51:2d:65:db:c5:8c:e8:46:39:
a2:7d:ce:6a:4b:e9:73:3f:ef:61:51:a2:39:cb:c3:
ec:72:24:de:14:32:79:0b:44:51:cf:22:fa:e5:0a:
bf:4b:63:62:d2:81:5f:ef:9d:0c:25:d3:a1:5c:e2:
0f:07:81:84:6d:3b:4b:a1:41:37:b5:bd:2c:2f:84:
a7:9b:40:a8:b0:f4:bc:5d:e5:11:ef:16:c4:bc:8f:
bf:6d:33:3c:b5:79:6a:ec:95:8c:8e:91:34:e0:a2:
5d:fe:b2:34:73:52:7b:08:f4:f0:bf:1c:93:de:b1:
92:73:37:be:55:3e:a1:34:0e:cb:c9:8a:57:c5:1e:
5c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B1:D4:48:C0:F1:63:7D:89:CC:63:E1:B4:7B:89:18:ED:8F:9E:0A
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/47HUSMDxY32JzGPhtHuJGO2Pngo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.19.0/24
91.194.10.0/24
185.255.30.0/24
Signature Algorithm: sha256WithRSAEncryption
26:f7:74:29:a3:fa:29:02:a7:8b:eb:14:e0:ec:67:0d:5f:19:
99:53:ab:16:87:ea:ad:47:a5:96:6d:0f:81:58:f2:b4:5e:ab:
ee:a8:11:89:bd:51:a2:59:fe:6a:63:78:ed:4f:d6:ad:29:79:
23:2a:48:de:3f:9f:76:15:5e:57:c8:0f:a4:3c:13:c6:86:ed:
2c:3e:27:1b:c7:8f:27:ee:4f:2e:92:93:b0:99:a2:11:d9:c9:
ad:59:d4:44:c1:cd:94:fe:13:00:ed:1c:1b:e6:17:13:dd:d1:
61:15:13:fe:c2:f7:5b:85:be:d5:e3:56:18:79:45:37:c1:b8:
5f:ce:01:59:cd:8e:21:9f:88:27:8a:e4:23:ba:4a:ed:5e:d6:
22:9a:6b:b4:16:7c:0b:aa:23:e6:ff:6a:d6:1e:d4:73:0b:05:
83:a3:9d:9e:10:5c:d7:32:ba:97:45:40:78:9a:00:b1:2d:21:
1d:3e:09:65:3a:b6:74:fb:9d:40:57:f6:f1:b5:34:5f:ad:a0:
b0:17:e0:d2:b0:a2:e3:38:1e:fe:33:af:9f:c1:52:7b:da:00:
0d:c3:73:a3:dd:ef:a8:26:1c:f2:4d:6e:00:ed:5f:e6:6b:0e:
f0:e0:f4:fc:9d:62:63:71:4c:33:8f:90:33:07:64:ad:8d:44:
3a:b7:5a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 25 18:23:31 2024 by rpki-client on console-fra.rpki-client.org