Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/p7KegbXv8y9l2ulIwtGYFBSFORo.roa
File: p7KegbXv8y9l2ulIwtGYFBSFORo.roa (raw, json)
Hash identifier: VHVsbnbWUzry83Q+yjv/+XopU1VoYKTwNnPowzF3COM=
Subject key identifier: A7:B2:9E:81:B5:EF:F3:2F:65:DA:E9:48:C2:D1:98:14:14:85:39:1A
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 01856B9362F9921D727D1813BE8360E6B637
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/p7KegbXv8y9l2ulIwtGYFBSFORo.roa
Signing time: Sun 01 Jan 2023 04:24:59 +0000
ROA not before: Sun 01 Jan 2023 04:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62021
IP address blocks: 94.31.28.0/24 maxlen: 24
79.141.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:62:f9:92:1d:72:7d:18:13:be:83:60:e6:b6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 04:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7b29e81b5eff32f65dae948c2d198141485391a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a9:bc:03:5b:45:24:ab:1d:56:50:e6:d2:23:
68:be:0f:97:4e:14:58:c0:53:41:f3:57:ee:9a:ec:
11:8a:aa:95:ae:5c:54:c6:21:75:5a:c0:36:47:2f:
3a:8a:2f:79:1b:bd:09:ca:5e:9c:eb:8d:76:f9:0a:
7e:d8:c4:e0:4d:15:1b:4d:cd:fa:ad:c5:e7:41:04:
3d:ab:41:8b:73:2e:67:e6:8c:d0:12:73:55:09:b1:
c9:19:1f:a3:0a:8c:b7:1b:59:f1:01:40:a2:4e:ee:
c1:9f:72:e6:68:76:5f:4f:b1:24:76:c4:1e:bd:bf:
37:78:2d:9a:66:b6:96:37:14:11:5b:ac:9e:a7:8c:
9d:d3:fa:0d:c7:6e:9c:a2:a5:5b:86:57:6a:a6:42:
5d:56:26:f9:74:82:e9:67:e0:a6:dd:82:f6:98:d0:
fa:55:d0:93:66:7b:f9:aa:76:a0:d2:15:8e:89:b8:
45:ac:18:e9:ea:d8:32:fd:cb:16:f8:3a:c5:54:2f:
6d:1f:9e:54:64:18:db:2d:57:f7:e5:7c:7f:23:c8:
97:ba:dd:4a:61:6a:c1:6a:84:76:e6:2b:1b:3e:83:
27:58:5f:f2:1f:ea:fe:14:a7:09:81:09:39:bc:90:
9f:b7:03:c1:98:bd:d3:b5:7a:7d:17:a6:33:a9:24:
63:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B2:9E:81:B5:EF:F3:2F:65:DA:E9:48:C2:D1:98:14:14:85:39:1A
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/p7KegbXv8y9l2ulIwtGYFBSFORo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.37.0/24
94.31.28.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:c4:28:57:e9:04:33:b6:67:41:78:0e:b7:72:9a:ae:d7:59:
7d:6f:b5:ff:67:0e:98:59:f3:70:36:6b:e4:15:29:d9:bc:47:
3a:4c:4f:11:91:e8:10:16:43:43:2a:cf:60:db:41:7a:7f:b9:
6a:81:fe:d1:e4:c5:d8:d0:4b:4f:e5:b9:cc:f9:6e:35:d8:aa:
2e:e1:71:fa:71:50:57:d6:32:55:dd:7f:4c:4d:9f:8a:2b:05:
34:62:99:d1:e3:fe:cc:be:0d:20:15:47:70:71:9a:54:e3:f7:
e3:c7:23:eb:de:4f:9a:02:d1:89:3b:8d:ad:a8:24:38:b2:45:
8d:5d:8d:d3:30:c1:5e:8f:c5:c0:b2:89:d5:52:0d:98:4d:89:
d8:98:ab:cd:22:3c:03:29:33:4f:26:36:dd:79:af:a9:3a:5d:
10:27:91:38:b8:4b:fb:ad:a7:46:77:7e:1a:bf:2f:e0:0e:4e:
bf:a7:d3:13:22:c7:be:76:29:97:d1:de:f9:cf:5f:d3:44:91:
7e:95:f2:8a:b0:0a:1c:97:f6:b0:7b:b7:31:57:d3:f4:49:53:
d3:21:9b:0f:2c:1e:38:8e:4c:7b:89:19:f2:4d:8f:b2:f6:6b:
1a:6b:53:b4:2a:b7:61:d9:2e:ab:9c:09:0d:80:59:01:18:27:
e0:b4:23:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:18 2024 by rpki-client on console-ams.rpki-client.org