Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/4d9bK1nht0_vFphB4FpnovJ1oYQ.roa
File: 4d9bK1nht0_vFphB4FpnovJ1oYQ.roa (raw, json)
Hash identifier: UKGbpzgVx7HRkbSNu3bFiwPA8mpsfd3RlIOPSOXCFhg=
Subject key identifier: E1:DF:5B:2B:59:E1:B7:4F:EF:16:98:41:E0:5A:67:A2:F2:75:A1:84
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 018570E74FC7ADA294272921366AE7B0AE5E
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/4d9bK1nht0_vFphB4FpnovJ1oYQ.roa
Signing time: Mon 02 Jan 2023 05:14:45 +0000
ROA not before: Mon 02 Jan 2023 05:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39007
IP address blocks: 82.135.160.0/21 maxlen: 21
212.59.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:4f:c7:ad:a2:94:27:29:21:36:6a:e7:b0:ae:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Jan 2 05:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1df5b2b59e1b74fef169841e05a67a2f275a184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:73:9f:78:67:92:6e:e7:2c:d3:88:b2:7d:70:
7b:e6:f5:8d:da:5c:21:db:ea:d5:65:76:6a:15:4c:
ae:56:b9:a6:e6:dc:aa:de:c1:73:16:5d:77:61:54:
71:10:c8:72:71:16:82:d1:88:f0:ae:7d:1f:e3:e4:
8d:67:11:f7:11:51:87:9e:6a:99:44:d2:0a:07:06:
b8:92:34:92:4b:3b:54:27:40:f1:b2:e1:30:4b:71:
84:2c:c3:c9:1c:da:4e:be:2a:56:e7:95:fe:27:bb:
76:d6:de:78:41:ab:77:75:a1:05:c9:71:d0:97:e6:
10:d8:c0:69:e7:d3:d0:3b:96:2a:1d:b9:cc:29:4b:
67:05:89:48:60:c3:ca:4a:22:9a:8e:1d:54:02:60:
2a:4f:92:8e:37:e4:d4:92:5c:9b:2e:67:7f:90:2c:
57:1c:5d:60:ec:ca:c7:ba:77:66:82:54:c8:b4:53:
4e:9e:99:76:16:b5:92:75:56:6e:f0:eb:2a:c2:e8:
74:00:d3:e2:d9:99:4d:c9:10:21:53:7d:bc:9f:64:
6d:c1:2d:20:53:78:59:bd:c1:dd:74:ba:bb:ee:34:
69:5d:7f:39:33:b1:9b:7a:ba:af:67:34:b1:a1:75:
95:15:ae:55:41:1a:b7:5b:05:74:70:b7:53:3f:22:
2f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DF:5B:2B:59:E1:B7:4F:EF:16:98:41:E0:5A:67:A2:F2:75:A1:84
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/4d9bK1nht0_vFphB4FpnovJ1oYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.135.160.0/21
212.59.18.0/24
Signature Algorithm: sha256WithRSAEncryption
53:92:9d:b6:9f:e0:9e:7a:a4:af:57:59:c8:58:46:9c:87:dd:
95:a2:09:7a:d9:e3:d0:c6:41:8f:72:9d:e8:ad:3f:6e:44:8b:
08:7b:65:90:5d:8e:2e:38:d4:c8:a6:de:3b:c5:43:8f:f5:5b:
05:f9:a5:6b:9e:16:4a:9b:13:58:d4:89:5b:52:f2:ee:04:34:
ff:24:f6:2e:0a:51:a6:aa:ac:a1:75:14:0e:74:1f:11:5d:6b:
a6:d0:4c:4e:d3:8c:e2:75:bb:d2:ee:74:c7:47:98:5e:d0:37:
54:43:67:9c:f1:bc:b9:97:11:dd:1f:f8:01:b7:47:a9:f7:d3:
be:a8:2d:d3:c0:89:94:33:65:d4:5e:9c:74:e0:2c:33:62:79:
9a:72:91:b1:1c:fd:4d:22:e8:59:f1:30:6d:08:6a:64:70:ec:
5d:d6:02:e2:47:0d:de:e2:46:15:06:ac:66:c4:ec:8f:b3:0c:
19:4b:db:92:1f:e8:94:76:30:9a:aa:7c:d0:27:35:45:fd:1c:
a3:15:33:6b:54:a9:51:86:12:81:d9:58:6e:7d:e8:53:48:03:
3f:3f:2f:8a:76:9c:9e:ce:bd:c3:c1:f7:16:0a:88:58:5f:2a:
14:43:5e:4a:59:93:1a:1a:be:16:f6:db:f8:85:a9:8d:47:64:
c2:d9:3a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:29 2024 by rpki-client on console-fra.rpki-client.org