Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/JyY7eWV2HDNwiqZVxXmxuOpXRg8.roa
File: JyY7eWV2HDNwiqZVxXmxuOpXRg8.roa (raw, json)
Hash identifier: C+eOTEi8B/spFzOvHuaJjYtJkzZiQaswqUPVhhpVr2k=
Subject key identifier: 27:26:3B:79:65:76:1C:33:70:8A:A6:55:C5:79:B1:B8:EA:57:46:0F
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 018572FA842339EF5D62E1C85154CA17A583
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/JyY7eWV2HDNwiqZVxXmxuOpXRg8.roa
Signing time: Mon 02 Jan 2023 14:54:58 +0000
ROA not before: Mon 02 Jan 2023 14:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 45.148.4.0/24 maxlen: 24
193.104.211.0/24 maxlen: 24
193.104.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:84:23:39:ef:5d:62:e1:c8:51:54:ca:17:a5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Jan 2 14:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27263b7965761c33708aa655c579b1b8ea57460f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5c:59:af:f0:07:58:75:bf:b3:8e:82:26:cd:
85:45:f9:d9:b8:1e:a6:e4:b0:a2:20:cb:04:7f:50:
10:8f:16:4f:d2:3d:7e:77:df:b7:8b:86:64:3a:75:
03:d3:85:46:f8:17:35:30:57:a1:4d:e8:e9:54:4d:
d6:d3:bd:eb:43:57:64:35:80:ed:1f:2d:34:e7:bb:
05:63:19:86:7b:fa:e3:bf:33:e8:ea:98:8a:11:f6:
c1:a6:98:98:92:ba:f6:e4:57:65:b1:19:2c:cc:d7:
76:f3:1c:20:e7:08:50:76:a1:e7:b9:37:8a:d8:48:
f3:dd:29:c4:8c:1c:46:a0:ca:43:12:2c:e8:af:06:
dd:71:73:88:37:74:ad:a4:9a:e1:76:0d:05:e6:78:
fc:ca:53:25:c1:8b:1b:fa:29:da:cc:a5:97:10:37:
76:87:47:65:23:c9:6f:3e:60:13:55:91:04:48:da:
4b:55:cc:67:42:36:f2:65:8d:96:fd:db:55:8f:ea:
e1:4d:6f:12:2b:bb:f0:77:4d:2c:eb:a6:bc:aa:20:
ab:28:f6:23:67:e0:4e:2f:35:d7:8e:4d:e6:8f:41:
27:0f:b5:2b:e3:07:b9:b3:0a:3f:74:98:4f:8c:04:
dd:4e:24:81:d6:76:5a:0a:a2:6c:e3:68:72:38:0b:
14:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:26:3B:79:65:76:1C:33:70:8A:A6:55:C5:79:B1:B8:EA:57:46:0F
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/JyY7eWV2HDNwiqZVxXmxuOpXRg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.4.0/24
193.104.211.0/24
193.104.222.0/24
Signature Algorithm: sha256WithRSAEncryption
81:fd:8b:61:c3:71:19:ba:57:c3:56:7b:78:99:20:f6:f0:4b:
0c:1b:51:0b:fb:81:b4:94:f2:41:8c:eb:9d:51:63:35:5e:8f:
21:29:5e:bd:24:2f:d8:3c:c5:d8:d7:f5:ab:c8:00:7d:31:13:
b0:31:ce:77:e3:bb:0c:de:99:11:72:19:0f:70:64:32:df:7b:
b3:e3:28:f5:bf:c1:a5:26:d9:b9:87:b8:f9:1b:29:bd:89:26:
08:a2:8c:b7:cd:f1:6f:bb:8d:56:cb:24:5a:43:0d:05:1d:2d:
1b:33:92:9c:a8:c3:97:1a:f7:bc:d8:c7:c8:d8:c2:c6:f8:3d:
73:30:b3:4e:fb:ff:b7:e7:e2:9c:ae:3d:8d:68:ad:57:01:a0:
4d:02:da:5e:af:0b:b5:36:ae:dc:b5:3a:63:a4:94:0f:2b:c1:
0b:bf:08:5a:06:45:aa:85:2a:33:3c:2d:f5:ca:02:25:82:64:
76:94:81:7c:63:52:a3:3b:4c:5d:4d:e9:21:87:13:10:7d:64:
52:b9:76:1e:d1:b1:d1:41:8f:bb:ec:d1:4c:b6:9c:54:57:77:
69:0b:a0:5f:9b:a1:23:a4:48:8c:28:ba:f0:c0:3e:fe:0d:8a:
33:64:0c:09:9d:fe:07:74:14:d7:84:42:c7:d4:c2:90:fd:ed:
07:5b:1e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:14 2024 by rpki-client on console-fra.rpki-client.org