Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/4hvCSkDFEwtXZ83B69ys7FdRy3k.roa
File: 4hvCSkDFEwtXZ83B69ys7FdRy3k.roa (raw, json)
Hash identifier: bRuUBY8wdw7uGV8yf4XuuA+Biv1/jxYs3tsXu6c6KVA=
Subject key identifier: E2:1B:C2:4A:40:C5:13:0B:57:67:CD:C1:EB:DC:AC:EC:57:51:CB:79
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 0185788AD2FDA6062B83085B775C02ABFC48
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/4hvCSkDFEwtXZ83B69ys7FdRy3k.roa
Signing time: Tue 03 Jan 2023 16:50:41 +0000
ROA not before: Tue 03 Jan 2023 16:50:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210546
IP address blocks: 194.113.233.0/24 maxlen: 24
193.37.71.0/24 maxlen: 24
87.251.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jan 2023 06:38:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:78:8a:d2:fd:a6:06:2b:83:08:5b:77:5c:02:ab:fc:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 3 16:50:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e21bc24a40c5130b5767cdc1ebdcacec5751cb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:db:8b:fe:82:c4:57:6e:09:84:60:07:95:81:
89:3c:52:c4:ce:3d:97:b1:08:aa:37:1c:a9:73:01:
a6:15:66:5b:3e:e0:b3:52:fb:43:38:fa:57:7a:6c:
60:4c:b7:a0:6a:23:c1:75:9f:4e:67:39:51:20:a5:
fe:a8:f1:e8:4f:6e:98:51:41:28:ef:5a:e6:39:5e:
bf:67:9d:06:46:49:eb:6c:df:69:90:97:57:87:d0:
a8:4b:a7:f4:50:e9:8b:66:be:c2:1a:a3:fe:6d:4c:
4a:e9:3f:9d:58:0b:c6:9b:8b:4f:f3:32:5f:59:54:
40:94:93:0e:f9:91:db:a8:f5:0f:19:a5:65:99:f0:
5c:68:4b:18:f4:83:6f:d8:29:bf:a7:ed:1c:3a:6a:
b4:c8:98:5f:6c:6f:aa:08:f4:c2:b8:d9:40:71:93:
56:09:0e:17:50:cd:00:cb:88:f4:1e:8c:03:24:b1:
f0:89:f1:3d:a7:95:82:48:b4:bf:df:21:95:7e:f8:
7a:1c:82:77:54:0d:de:fc:d8:fe:88:1f:f5:b7:5e:
07:b6:c6:b4:ec:ea:48:84:68:a5:c6:46:3e:dd:c3:
cf:d2:c4:84:9d:5e:63:bb:5e:0c:4f:7f:cd:72:de:
a6:f8:3b:d4:57:0b:b3:f3:b5:a2:2c:32:f1:8f:ed:
71:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1B:C2:4A:40:C5:13:0B:57:67:CD:C1:EB:DC:AC:EC:57:51:CB:79
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/4hvCSkDFEwtXZ83B69ys7FdRy3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.78.0/24
193.37.71.0/24
194.113.233.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:45:45:27:98:a9:5b:bf:d4:26:33:1a:54:34:0d:ac:ce:1b:
54:38:b4:e3:a4:fa:8c:1e:07:14:39:2c:95:90:24:8c:dc:b1:
0f:64:fc:52:24:6c:ae:a0:d2:c1:72:97:50:2d:f9:bd:53:9a:
8a:73:47:f4:48:70:6d:51:28:71:fc:c9:6a:0e:ee:32:14:8c:
ee:ca:e4:3c:20:bc:4e:89:1e:7d:62:6f:89:34:cc:ca:65:d5:
78:08:57:5a:37:32:39:0a:d5:f4:e3:3b:bb:f9:ad:7d:6c:25:
76:cc:7e:b5:34:92:9b:4f:0a:21:37:b1:40:43:3c:2d:7b:8a:
21:ad:87:29:3f:9a:86:5f:0e:f8:19:51:f9:02:eb:97:dc:0d:
58:2e:5b:c1:68:89:da:44:e2:1f:87:6d:ca:b0:82:c5:67:6a:
81:c9:25:76:5a:b6:05:84:a5:5a:e3:db:3d:63:d7:b4:c7:8a:
02:d8:5e:6d:9b:a4:a0:70:39:df:84:1a:8a:c3:c1:94:2b:8e:
d4:5b:ed:bf:13:39:95:89:e6:2e:b2:5e:a3:4a:50:55:f2:71:
49:4e:4d:2b:1a:71:4f:36:14:9d:c1:b8:35:23:98:e2:ce:a8:
0e:01:2f:dc:42:a5:15:67:eb:ad:57:50:5e:84:21:6a:1c:cc:
7e:b6:f0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:38 2024 by rpki-client on console-fra.rpki-client.org