Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/SX07H1mveXBhhmTBC5RddpqLhjE.roa
File: SX07H1mveXBhhmTBC5RddpqLhjE.roa (raw, json)
Hash identifier: U5gD0jsP33VYM88GPpnW6fb56YjxKGBPxTtRZh75psM=
Subject key identifier: 49:7D:3B:1F:59:AF:79:70:61:86:64:C1:0B:94:5D:76:9A:8B:86:31
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 01876F8640230D8CE482448568C0B16DD57D
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/SX07H1mveXBhhmTBC5RddpqLhjE.roa
Signing time: Tue 11 Apr 2023 08:54:41 +0000
ROA not before: Tue 11 Apr 2023 08:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201237
IP address blocks: 82.150.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:86:40:23:0d:8c:e4:82:44:85:68:c0:b1:6d:d5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Apr 11 08:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=497d3b1f59af7970618664c10b945d769a8b8631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:07:cc:13:b0:b0:54:80:3d:20:64:72:b9:bc:
c6:6c:cc:a8:2c:f6:91:ce:26:2e:d2:62:d6:78:5e:
3e:da:b4:1d:c9:91:5e:1d:d0:be:50:fa:e9:1e:43:
28:88:48:f9:43:d0:b4:81:a4:f2:5f:5e:a4:56:c0:
3e:c8:3d:a9:8f:45:d9:36:91:bf:0e:17:89:56:71:
e2:fc:20:54:f8:09:1f:ea:38:f5:d6:a7:af:00:1d:
a6:45:f7:b1:f5:a7:f5:3e:7e:42:e1:d3:61:61:e3:
59:9e:3f:30:e2:df:be:f7:d5:ee:6c:c6:b3:4d:f6:
64:a1:46:f0:22:87:d9:47:30:f5:e4:f1:15:22:9a:
5d:c9:93:49:99:5f:dc:51:85:50:ec:a1:be:26:f3:
44:01:da:a6:1e:88:6e:a0:dd:a9:2c:a8:22:1b:14:
b1:2c:50:f3:04:63:af:f3:fb:6c:7f:12:12:91:76:
c8:27:dd:14:7a:ef:ed:2b:b3:a3:09:68:c0:19:44:
64:94:e1:8d:ec:3a:9b:e0:d6:05:f0:e0:c9:7b:ba:
8e:fa:b8:25:e1:50:0c:fe:39:9e:6d:f4:a7:94:19:
db:c6:20:70:78:51:10:b0:63:62:5e:d4:87:97:d3:
b7:6d:98:47:ba:de:2b:c5:69:31:09:1c:ab:57:b2:
a6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7D:3B:1F:59:AF:79:70:61:86:64:C1:0B:94:5D:76:9A:8B:86:31
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/SX07H1mveXBhhmTBC5RddpqLhjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.63.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:cf:7d:b8:ca:f2:1a:5f:37:f9:7b:ca:85:91:45:7d:bf:58:
23:a0:0b:69:54:21:69:ba:38:d0:b7:4f:7d:63:7b:d6:38:c6:
ad:5a:a4:2f:7e:9b:48:e1:98:b7:c3:7a:1e:14:2e:40:79:92:
94:0c:42:ed:38:d1:cc:94:73:ff:3a:86:89:d6:f2:a6:b5:0a:
19:54:c8:14:cf:a1:4c:94:8c:80:f6:99:57:6b:f1:e3:da:c9:
72:06:5f:8e:0b:9e:bd:29:bf:0c:ef:c3:fc:7c:94:38:f5:da:
26:28:71:0a:bc:71:46:d8:bc:9f:ec:89:3e:65:1b:37:d5:92:
91:4d:0e:61:61:fe:b7:ea:24:b6:13:e7:52:c3:f7:c9:07:a1:
66:3a:ec:a5:45:9b:ad:d7:2c:f4:f5:5e:f8:b9:59:e1:1c:4a:
ed:16:b3:b5:08:8a:1d:b5:67:f9:19:89:9e:f1:db:60:ae:de:
20:1f:14:ff:06:da:35:73:ee:e1:ee:08:f4:08:2d:01:c0:69:
69:fb:2f:07:da:eb:1f:e1:7e:a5:d4:af:de:21:a2:a8:ba:01:
8b:66:c3:03:00:46:61:e7:80:ed:c1:f4:52:c6:2c:cc:b9:80:
4a:c6:3b:ad:14:98:8f:13:df:51:69:c4:84:99:5c:4d:35:92:
16:3c:0a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:49 2024 by rpki-client on console-fra.rpki-client.org