Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/U_hPJPtUzsl9pFG_Tc5Q_iP0jN8.roa
File: U_hPJPtUzsl9pFG_Tc5Q_iP0jN8.roa (raw, json)
Hash identifier: feDNgzAQGrbTQN0KSk/OzQDVpKmfCqaSObjk1p9Pc2o=
Subject key identifier: 53:F8:4F:24:FB:54:CE:C9:7D:A4:51:BF:4D:CE:50:FE:23:F4:8C:DF
Certificate issuer: /CN=7b8254253dc0213fe58a7aff4b82463e47978063
Certificate serial: 01856F94C3F63A53430AB334906F9923D708
Authority key identifier: 7B:82:54:25:3D:C0:21:3F:E5:8A:7A:FF:4B:82:46:3E:47:97:80:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4JUJT3AIT_linr_S4JGPkeXgGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/U_hPJPtUzsl9pFG_Tc5Q_iP0jN8.roa
Signing time: Sun 01 Jan 2023 23:04:58 +0000
ROA not before: Sun 01 Jan 2023 23:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50533
IP address blocks: 178.213.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:c3:f6:3a:53:43:0a:b3:34:90:6f:99:23:d7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8254253dc0213fe58a7aff4b82463e47978063
Validity
Not Before: Jan 1 23:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53f84f24fb54cec97da451bf4dce50fe23f48cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:41:48:1c:36:d4:7a:0d:02:a0:9d:33:90:55:
6a:32:70:4d:26:1e:6b:fc:b6:e1:28:f7:be:3d:ae:
9f:73:f6:8f:8e:5e:0f:ec:52:c2:bf:b0:4a:fe:13:
1d:eb:8c:de:2b:73:5b:48:7a:34:39:bf:da:34:1a:
39:ba:ca:1c:35:7e:31:1e:d4:35:a4:8a:a3:bf:df:
e0:fc:94:3a:54:2c:85:22:2e:8c:90:df:15:7e:11:
17:0f:69:d5:44:f2:4e:51:18:c4:3f:5d:6b:dd:89:
0e:a5:ab:5d:83:37:c0:c3:5d:e0:8a:98:5a:46:b5:
33:87:f5:c1:00:66:13:27:c9:43:3c:25:98:00:d0:
77:d8:e5:e4:9e:93:f9:77:47:6c:d4:26:32:c1:b6:
c6:0d:e2:41:81:3f:80:6e:98:55:87:84:71:24:02:
e6:a0:ab:99:a0:88:7c:86:b8:0b:e7:06:3a:11:98:
5d:13:47:87:70:1c:22:6b:27:56:d8:ff:04:4c:30:
b8:c4:77:e4:79:1c:fa:82:ff:9e:27:1c:14:78:67:
f0:b8:84:52:9b:3e:74:19:a7:1c:e7:d2:dd:57:30:
c4:5e:4f:65:1f:8f:a4:f1:6d:31:73:25:5c:7f:f3:
ff:c0:fe:ee:65:f7:a6:47:33:86:b5:bc:5d:03:90:
bd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F8:4F:24:FB:54:CE:C9:7D:A4:51:BF:4D:CE:50:FE:23:F4:8C:DF
X509v3 Authority Key Identifier:
keyid:7B:82:54:25:3D:C0:21:3F:E5:8A:7A:FF:4B:82:46:3E:47:97:80:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4JUJT3AIT_linr_S4JGPkeXgGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/U_hPJPtUzsl9pFG_Tc5Q_iP0jN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/e4JUJT3AIT_linr_S4JGPkeXgGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.213.74.0/24
Signature Algorithm: sha256WithRSAEncryption
94:d8:6e:c4:e8:71:eb:b6:19:b0:94:6e:57:9c:f7:b6:c2:2e:
99:e6:ce:25:d5:5e:ed:d6:9c:f7:97:0d:4f:0b:30:9f:64:63:
01:36:f3:ee:3f:d2:d1:a9:b2:93:a7:9a:55:09:0b:e4:0b:2c:
ce:d1:a6:94:d5:ef:34:88:64:2f:13:19:d6:f3:0a:e9:42:9d:
3f:4e:b9:66:19:b5:07:1a:65:b5:de:52:f9:db:a9:8b:83:e0:
25:3d:d2:84:70:b1:34:36:68:0c:36:44:82:d1:ae:64:07:a0:
6e:d3:bc:a3:bc:ef:de:71:63:e8:57:bd:d5:f2:9e:b2:09:8c:
bd:13:8e:d8:d5:68:90:68:f9:ef:b0:1c:b0:55:42:1d:73:e5:
7b:c8:72:62:98:51:09:b2:ef:ec:37:c1:22:4b:21:0d:97:bf:
c9:5e:7e:f3:07:f6:6b:6a:6f:75:98:5e:9e:a8:ce:9a:5b:1c:
9c:9f:46:d9:c6:28:e4:66:21:01:d5:7a:62:06:6c:e2:b6:ab:
8c:c0:de:80:e9:f7:85:1e:e8:c8:a7:98:71:89:ed:4a:4b:fb:
e3:07:78:7f:99:37:71:d5:ee:cb:92:f9:58:b8:10:0b:2b:ca:
21:e6:f8:a2:7f:ed:1d:b1:49:ae:bb:d4:6b:34:0b:5d:ce:c3:
40:81:00:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:48 2024 by rpki-client on console-fra.rpki-client.org