Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/55so_R2J9uJTJyiE2QOqOG4d-Wc.roa
File: 55so_R2J9uJTJyiE2QOqOG4d-Wc.roa (raw, json)
Hash identifier: jiIwz/WDXOEc5u6hGw4WYSqcrXrfa2gLMkF58cGBH4M=
Subject key identifier: E7:9B:28:FD:1D:89:F6:E2:53:27:28:84:D9:03:AA:38:6E:1D:F9:67
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 01856B935D8387144574DB4A502F47CB4AF4
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/55so_R2J9uJTJyiE2QOqOG4d-Wc.roa
Signing time: Sun 01 Jan 2023 04:24:57 +0000
ROA not before: Sun 01 Jan 2023 04:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17025
IP address blocks: 94.31.10.0/23 maxlen: 24
94.31.12.0/24 maxlen: 24
94.31.13.0/24 maxlen: 24
213.152.239.0/24 maxlen: 24
79.141.45.0/24 maxlen: 24
2a00:16f8::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:5d:83:87:14:45:74:db:4a:50:2f:47:cb:4a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 04:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e79b28fd1d89f6e253272884d903aa386e1df967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:a7:81:13:dd:be:a5:76:ea:b3:9b:27:4a:
d1:8c:36:f4:75:98:d9:61:ab:66:ec:f0:42:3a:cf:
4b:91:2b:bd:8d:f1:e4:42:d2:51:ff:a0:e5:24:b7:
7d:9f:a3:d0:dd:00:8d:a1:58:d9:35:a7:56:62:36:
70:49:cc:ab:44:e3:04:fc:3e:b9:7e:7b:68:5e:7e:
92:7a:b1:59:36:49:7a:b8:a2:26:27:6c:a1:4f:7f:
a8:72:ee:9d:e4:b6:10:f9:9c:68:86:48:4b:d4:6a:
39:bb:37:4f:3a:76:97:61:d0:0f:ee:3e:ed:6b:c1:
74:15:8e:39:bf:22:a0:76:70:21:35:c4:e2:d6:33:
19:dd:c8:7f:86:98:62:76:76:75:45:a4:75:dc:df:
15:93:49:0b:36:14:ce:41:33:1c:cf:03:df:4d:50:
63:9c:46:b3:7d:61:22:04:53:e8:b5:90:82:0f:6f:
4c:1d:d4:5a:94:10:84:cc:e8:72:44:3f:71:9c:15:
45:a9:82:e5:62:42:46:1a:7a:1f:29:3e:66:c3:98:
40:d0:33:15:61:bb:6c:f7:07:8e:c7:27:08:94:2d:
aa:63:5a:f7:40:71:a8:6d:fb:64:c1:65:ef:27:af:
9c:c3:89:68:61:38:ab:67:c9:c5:34:22:ec:6c:77:
f7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9B:28:FD:1D:89:F6:E2:53:27:28:84:D9:03:AA:38:6E:1D:F9:67
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/55so_R2J9uJTJyiE2QOqOG4d-Wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.45.0/24
94.31.10.0-94.31.13.255
213.152.239.0/24
IPv6:
2a00:16f8::/48
Signature Algorithm: sha256WithRSAEncryption
c7:d4:0f:29:53:06:6a:45:0a:f0:81:af:f4:2b:45:88:71:e4:
b6:5c:7c:3a:65:0b:bf:e1:c4:0b:23:42:73:b0:eb:cd:4f:c5:
4d:f0:21:d7:b4:86:51:df:c2:9a:8f:32:f2:0e:8d:27:9d:58:
95:35:5f:a0:b9:bf:8b:3b:90:75:98:aa:a7:22:c7:e7:1e:e6:
0a:a6:f7:f1:09:62:43:8c:38:1c:b4:f1:3b:d9:11:68:e9:87:
37:14:4e:af:95:26:6e:9d:77:8c:d8:01:5f:3b:56:2b:21:44:
02:22:24:f0:35:db:20:3b:64:93:43:7a:f2:8e:9d:e5:02:4e:
f0:a3:9b:f8:ff:da:1b:d6:f0:d9:64:f6:69:85:f6:ca:45:c6:
6d:65:e8:94:de:61:4b:e0:12:35:ff:3a:b1:6f:d6:4f:0a:7c:
9f:5b:9e:e9:67:24:5d:61:71:71:2f:c5:67:a3:8f:b4:a0:c9:
35:de:a9:9d:72:e1:a6:03:2b:0c:8c:80:03:8e:a5:7f:10:ed:
f6:f5:4b:86:74:3c:d7:95:58:7c:69:56:af:c2:84:4f:b9:2d:
8d:51:b9:56:36:fc:bc:af:58:d2:89:67:08:f9:05:76:d3:ef:
e0:23:c8:6c:50:5d:e2:1f:e0:64:06:88:45:f6:1a:96:51:79:
5e:c4:ec:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:46 2024 by rpki-client on console-fra.rpki-client.org