Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/e4Fo-1LmlSXJ5VM5SmYHaFhrtiY.roa
File: e4Fo-1LmlSXJ5VM5SmYHaFhrtiY.roa (raw, json)
Hash identifier: y0FN56on3MZhcM7fqWOO0f0lAEEaZhofkXAQC0c7O+8=
Subject key identifier: 7B:81:68:FB:52:E6:95:25:C9:E5:53:39:4A:66:07:68:58:6B:B6:26
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018BD2347D7B1E25587DAF9EA424477AAD38
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/e4Fo-1LmlSXJ5VM5SmYHaFhrtiY.roa
Signing time: Wed 15 Nov 2023 08:58:57 +0000
ROA not before: Wed 15 Nov 2023 08:58:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210512
IP address blocks: 193.3.177.0/24 maxlen: 24
62.3.13.0/24 maxlen: 24
45.130.68.0/22 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d2:34:7d:7b:1e:25:58:7d:af:9e:a4:24:47:7a:ad:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Nov 15 08:58:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b8168fb52e69525c9e553394a660768586bb626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9e:a8:50:26:e5:8e:b4:13:ab:4c:e0:4a:df:
8f:01:3c:d4:c3:c9:6f:2b:2d:98:9f:e9:37:f9:20:
6e:b9:a2:f9:e2:90:5b:25:a8:42:f0:36:ed:c1:21:
51:b8:51:d4:9a:fb:59:31:cf:32:a7:d3:4f:0d:95:
82:bd:43:c6:d2:05:ec:d2:89:8d:9f:5c:30:bc:9b:
bb:84:44:5e:b6:f7:47:78:4f:13:ae:04:2f:ba:d2:
5b:05:ab:7d:c1:b0:bf:9b:52:72:92:18:0b:bd:75:
44:8f:d1:8d:dc:88:23:ac:1d:0b:1e:eb:a2:35:6f:
05:e7:81:16:a6:e1:96:15:b6:e6:d8:71:57:47:3d:
ef:2f:b3:16:2f:ef:c7:87:1c:02:83:99:c6:dc:a9:
b5:71:d4:20:1e:a8:59:bb:e8:9f:1c:72:b4:28:aa:
31:d0:89:c8:65:88:66:67:5a:ec:09:82:22:85:80:
c7:68:b6:21:a0:49:75:a2:f6:6c:76:3f:62:e7:2e:
68:47:87:1b:fa:85:e1:1a:e4:36:11:c5:d3:3a:54:
d5:4a:a5:f8:cf:4b:f1:66:cd:7d:81:2e:89:ca:36:
f4:5a:7f:ba:9b:39:ab:2e:3e:74:9d:fd:be:1c:a3:
a0:4a:88:d1:31:a0:6e:b7:d4:e3:58:56:7e:1c:e4:
5e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:81:68:FB:52:E6:95:25:C9:E5:53:39:4A:66:07:68:58:6B:B6:26
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/e4Fo-1LmlSXJ5VM5SmYHaFhrtiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.68.0/22
62.3.13.0/24
193.3.177.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:7c:c8:36:d6:3c:12:e2:c7:e0:37:10:41:ec:fb:15:6d:6d:
f1:53:6c:2d:4f:5d:e5:34:d0:e7:0c:54:e0:f4:c3:54:fa:60:
b7:a6:df:51:de:c5:af:54:72:bb:c3:56:41:e0:83:9e:3e:a7:
c7:09:ac:86:5f:a0:22:f6:d0:76:54:dc:ec:df:19:b4:6d:82:
16:b2:0b:b1:84:ba:65:97:6a:62:3f:45:61:d6:49:3e:fc:6c:
5f:02:36:1c:de:58:bf:d0:8b:f8:f6:bc:ea:0e:91:6b:8c:6d:
a4:67:4c:9f:fa:d6:ac:9b:c4:1e:60:49:fa:40:22:ef:d6:f1:
ea:ae:ad:50:6d:5f:53:cf:31:81:fc:d7:17:ec:5d:92:f5:47:
08:95:d3:00:10:13:cb:8f:7e:45:46:7f:76:22:9a:69:57:36:
fa:3f:c8:7f:73:98:2e:b4:5f:9e:7a:2d:4e:5c:5c:52:0f:95:
df:1a:39:48:8b:de:f4:c0:39:a0:1e:ac:67:0c:a4:f9:dd:b5:
7b:dd:b6:fe:8d:8c:7a:9c:c2:dd:6c:6a:82:35:74:b8:ea:bb:
0b:f2:bd:fd:55:ff:66:8b:f6:dd:2a:05:82:81:b1:fb:56:91:
52:05:22:d6:da:5d:cb:b8:13:e5:05:51:e8:88:a7:f8:82:1f:
17:31:c2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:29 2024 by rpki-client on console-ams.rpki-client.org