Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/po0UZ0_apTrCz2A7SUdgMLEXN6g.roa
File: po0UZ0_apTrCz2A7SUdgMLEXN6g.roa (raw, json)
Hash identifier: /0akRNBTQi97OEybfovtg+Tn2gmWNGHefAU2K4SeLnI=
Subject key identifier: A6:8D:14:67:4F:DA:A5:3A:C2:CF:60:3B:49:47:60:30:B1:17:37:A8
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0187108642CF7E4B83A6427B2067324BE043
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/po0UZ0_apTrCz2A7SUdgMLEXN6g.roa
Signing time: Thu 23 Mar 2023 22:10:47 +0000
ROA not before: Thu 23 Mar 2023 22:10:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49453
IP address blocks: 178.20.31.0/24 maxlen: 24
178.20.29.0/24 maxlen: 24
83.97.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Jun 2023 17:41:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:10:86:42:cf:7e:4b:83:a6:42:7b:20:67:32:4b:e0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Mar 23 22:10:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a68d14674fdaa53ac2cf603b49476030b11737a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:76:9b:12:a3:ab:18:c5:77:19:54:05:d7:b4:
7d:1c:3a:cf:e3:7b:16:d2:9b:80:3c:6c:b7:f9:32:
2a:a1:24:94:4d:1e:d8:ce:ec:10:67:ac:7e:b9:24:
73:86:2b:fe:14:d7:13:52:88:60:d4:11:73:8a:5a:
ae:53:20:9b:b9:9e:8e:31:8a:a1:23:7a:c2:b5:3d:
5f:7c:b0:ac:44:65:1c:3d:32:64:4b:ae:8b:43:6b:
08:42:9e:33:39:a6:09:44:20:c3:8d:2b:53:78:d6:
45:94:53:07:51:8f:03:54:b0:01:58:74:ce:12:38:
a6:65:df:fc:d2:77:42:4d:9c:f2:12:a9:69:e8:41:
95:85:f7:c1:69:c0:60:53:52:77:f8:f8:12:1e:a7:
0d:93:98:9f:dd:a8:d5:3b:6b:33:3a:0d:66:5e:0a:
e4:d7:44:5b:22:01:28:c3:52:41:0a:ea:cd:d7:2e:
63:3e:a8:af:b4:61:82:3b:2f:11:d5:62:22:91:e8:
91:45:c1:78:f5:d7:44:08:77:d9:75:7b:30:0a:59:
ff:e6:6e:38:e3:9f:a3:31:3b:9d:da:63:ec:98:39:
63:d3:61:0e:c0:4c:92:b7:de:e3:08:83:9d:da:c9:
03:db:13:b2:82:cc:65:62:c7:17:2c:8b:d0:2d:a7:
4d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8D:14:67:4F:DA:A5:3A:C2:CF:60:3B:49:47:60:30:B1:17:37:A8
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/po0UZ0_apTrCz2A7SUdgMLEXN6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.117.0/24
178.20.29.0/24
178.20.31.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:f9:4e:bf:17:92:d2:de:0f:7e:a3:e9:06:27:bf:85:fb:a7:
54:af:59:3f:d0:ec:7d:89:df:19:b3:20:5d:47:b8:1e:6b:01:
ff:93:7a:a3:cd:3e:65:d5:c0:39:66:bc:91:ad:1e:77:cc:0e:
17:c4:0f:d6:7c:01:37:7e:fb:68:eb:50:bd:27:8b:26:63:40:
9c:47:1d:e4:58:0b:72:40:f4:22:17:93:af:7b:65:00:b7:fd:
ad:e4:67:8d:40:b2:93:10:81:c1:87:d1:f2:0e:cd:32:f9:fa:
a6:80:01:bd:35:c9:13:19:35:7b:a8:72:f9:da:9f:55:44:da:
a5:42:d7:85:8a:58:6f:88:fa:37:54:96:c3:d6:fb:72:4b:35:
15:94:83:14:db:ea:05:9b:b1:11:9d:04:c5:e8:30:5f:ee:4f:
63:b1:b2:93:fb:23:c1:90:5d:44:e0:24:c0:e7:2e:bd:18:31:
89:a3:ab:d0:fc:c4:a7:be:83:45:a3:0e:83:a9:a7:df:27:61:
af:64:88:93:ff:aa:a6:80:5b:0e:f4:40:29:09:31:45:ae:76:
e3:3e:31:80:fd:2e:2d:9b:22:b6:2a:d4:60:6b:5f:5d:91:9d:
8e:03:be:25:91:0b:08:47:bc:d1:1d:9a:b9:cf:bc:c9:d2:d9:
ee:b1:90:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:20 2024 by rpki-client on console-ams.rpki-client.org