Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/Tn0_VENF6DyelHTDrpWEjQJDB3U.roa
File: Tn0_VENF6DyelHTDrpWEjQJDB3U.roa (raw, json)
Hash identifier: EfaE8RUs0+pBjaZS28oAIy9GRSVbPkdNfe7GXRQ4YhU=
Subject key identifier: 4E:7D:3F:54:43:45:E8:3C:9E:94:74:C3:AE:95:84:8D:02:43:07:75
Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial: 0185707969CD7ED817CBDBDFD71643927209
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/Tn0_VENF6DyelHTDrpWEjQJDB3U.roa
Signing time: Mon 02 Jan 2023 03:14:43 +0000
ROA not before: Mon 02 Jan 2023 03:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198731
IP address blocks: 5.1.32.0/21 maxlen: 21
85.184.224.0/22 maxlen: 22
185.64.232.0/22 maxlen: 22
185.45.28.0/22 maxlen: 22
81.173.40.0/23 maxlen: 23
2a00:bc40::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:69:cd:7e:d8:17:cb:db:df:d7:16:43:92:72:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
Validity
Not Before: Jan 2 03:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e7d3f544345e83c9e9474c3ae95848d02430775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b1:cc:41:47:61:6c:9d:3d:7b:ea:70:df:eb:
7f:b1:1c:ae:14:cf:9a:5d:55:be:8c:c2:01:3c:46:
3d:c5:2f:ce:72:5e:97:17:23:c5:38:9b:2f:8c:e3:
20:0d:c8:d7:d9:dd:59:8b:81:3e:dc:19:e4:ca:4c:
2b:74:7e:f7:68:50:97:28:66:4d:2f:38:1d:9a:67:
3f:b9:60:85:86:d5:3e:96:57:c7:aa:03:74:c4:38:
84:13:dc:1e:ef:34:39:7e:f6:af:67:73:1b:fe:d3:
d2:e7:85:67:f8:15:84:a0:72:12:dd:13:32:48:e7:
9d:61:b2:ec:ce:39:17:ce:39:b9:93:6d:19:01:71:
16:28:58:06:f9:1c:04:cc:d7:93:77:cf:a6:7e:59:
48:79:98:f4:23:37:2f:e5:60:80:cd:05:d3:19:fb:
bd:a0:e0:15:ff:f6:f2:5e:22:c4:b3:37:d7:cd:13:
ff:fb:f0:f7:a9:df:77:41:7f:08:d0:f8:a2:3b:71:
37:7f:df:80:bf:69:b1:94:09:a0:d8:35:02:67:b8:
34:c3:84:dd:62:13:fa:d2:f7:35:e3:9c:f2:f6:a9:
4b:2b:19:eb:b6:aa:26:09:7d:39:ea:dd:be:01:46:
96:7b:f9:a7:46:ef:0b:56:f5:f4:48:47:62:d4:06:
04:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7D:3F:54:43:45:E8:3C:9E:94:74:C3:AE:95:84:8D:02:43:07:75
X509v3 Authority Key Identifier:
keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/Tn0_VENF6DyelHTDrpWEjQJDB3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.32.0/21
81.173.40.0/23
85.184.224.0/22
185.45.28.0/22
185.64.232.0/22
IPv6:
2a00:bc40::/32
Signature Algorithm: sha256WithRSAEncryption
3b:50:ef:c8:9d:dd:34:6e:e9:1a:3f:8d:22:1c:48:85:9a:b0:
5d:86:e1:d7:28:d8:8b:90:32:44:32:3a:3e:98:50:54:54:56:
bb:1a:73:5d:e5:a3:a2:f9:28:c9:21:b0:6f:95:17:76:dd:08:
e9:8c:4b:a1:01:0c:53:05:b7:97:da:9c:45:23:40:77:ab:7e:
36:f5:91:a5:31:66:e8:6e:ee:b3:97:32:ad:ef:a9:48:ac:6c:
b3:67:32:1f:c6:13:e0:82:df:0c:e4:d0:95:c1:6f:a5:37:7b:
ae:dc:44:4f:93:db:10:4f:05:4d:9b:83:38:ec:a3:a7:38:59:
e1:8a:46:c7:8d:cd:40:03:6d:d9:d7:d5:eb:fa:4c:3e:4d:8a:
aa:11:30:9e:27:27:dc:39:7a:88:e5:f2:06:12:96:22:d6:ab:
cb:c5:72:8e:a2:3c:8a:ce:23:37:e9:b6:2b:de:72:99:2c:44:
a5:14:28:0e:44:55:8c:94:1e:12:39:6a:3e:fa:24:82:1e:0a:
5d:af:0c:33:20:92:9e:ed:22:e2:ad:de:0e:2b:04:e0:01:11:
dd:0d:e5:19:42:83:ba:be:f3:7e:65:fb:6d:8e:f9:cb:7f:83:
14:d4:d2:61:87:83:1c:4a:b4:0c:ab:1a:d7:c2:0f:a8:67:d8:
79:48:87:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:40 2024 by rpki-client on console-fra.rpki-client.org