Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/4L3n709N30CAHev_ERnDDbWilbI.roa
File: 4L3n709N30CAHev_ERnDDbWilbI.roa (raw, json)
Hash identifier: hXDw9eyAVon7fTy1SQe01fPV6Jv/7zsQgVCf/kwzVOY=
Subject key identifier: E0:BD:E7:EF:4F:4D:DF:40:80:1D:EB:FF:11:19:C3:0D:B5:A2:95:B2
Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial: 01856C783C40A9548845AAE658203AB7921D
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/4L3n709N30CAHev_ERnDDbWilbI.roa
Signing time: Sun 01 Jan 2023 08:34:57 +0000
ROA not before: Sun 01 Jan 2023 08:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28878
IP address blocks: 194.53.72.0/22 maxlen: 22
193.177.160.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:3c:40:a9:54:88:45:aa:e6:58:20:3a:b7:92:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Validity
Not Before: Jan 1 08:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0bde7ef4f4ddf40801debff1119c30db5a295b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:35:66:fe:ce:35:7b:0b:a7:ff:22:e1:44:
ab:0b:f9:58:87:a8:ed:43:05:76:32:3e:67:8c:05:
89:f3:b5:b5:8a:e4:dc:3e:25:49:74:d2:38:a9:4c:
2e:fd:ff:b0:5e:5d:0b:ab:61:a7:4a:a9:29:cc:a6:
5e:d5:34:19:ef:ef:eb:97:73:4f:58:e0:fe:65:cb:
0a:7d:6c:18:48:e3:c0:b4:9e:01:07:a3:b9:7b:dc:
ed:72:68:37:87:fb:a8:bd:9d:7a:ac:7f:44:23:04:
5c:2e:1b:c0:5f:05:28:a8:67:91:71:85:ff:76:f3:
5e:0a:d9:77:1f:a6:21:e9:3b:d3:17:27:47:55:f4:
58:68:37:3c:cf:09:48:e7:37:e3:2b:96:4d:97:82:
44:e7:8b:99:ef:42:04:e2:46:91:2b:00:24:8d:98:
ac:6d:a0:74:21:38:89:25:3f:8f:50:25:5f:ec:30:
fc:83:5f:ac:04:24:2b:78:69:90:50:67:58:93:2f:
0e:9e:5d:21:39:ed:07:b0:35:53:8c:0a:05:09:86:
25:0c:a9:03:1d:7b:89:35:28:ee:80:15:15:21:a2:
87:7d:63:d8:36:43:46:f0:93:cc:76:9e:98:97:2c:
9f:21:16:86:95:05:d1:7b:57:4b:9e:c8:09:91:1f:
7a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BD:E7:EF:4F:4D:DF:40:80:1D:EB:FF:11:19:C3:0D:B5:A2:95:B2
X509v3 Authority Key Identifier:
keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/4L3n709N30CAHev_ERnDDbWilbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.177.160.0/23
194.53.72.0/22
Signature Algorithm: sha256WithRSAEncryption
06:63:a4:12:98:9e:ce:87:15:d3:95:ac:41:f2:15:f4:61:8a:
f1:65:af:1b:c3:86:d0:07:a5:7a:2b:61:ed:cd:b7:eb:6f:58:
95:16:ff:01:1a:29:4a:41:87:18:96:82:ce:a3:82:37:9f:4d:
35:4e:0f:5f:63:99:84:82:97:20:09:bd:32:5a:19:e4:fc:8f:
76:38:2b:a3:9c:0b:07:64:4d:05:bf:82:58:29:06:d1:17:29:
10:ea:1b:5e:30:c1:a3:a7:2f:46:2b:de:5d:0c:b7:4f:86:49:
36:d6:a7:29:7d:a7:d8:8e:fe:e2:f0:ad:77:b8:1b:34:51:d4:
17:86:71:98:92:b7:01:e1:96:f3:87:08:d0:03:b7:59:e6:07:
c3:7f:fe:b9:7c:b5:57:2d:0d:c7:64:8b:04:08:9b:7c:cd:62:
c2:c2:e8:4a:2d:db:f8:a8:2a:e4:7c:87:10:f9:9e:51:fd:48:
30:6d:aa:8c:c5:87:30:b2:86:8f:8d:e6:17:b1:cf:b3:f4:17:
cd:61:24:a6:66:a5:a3:a8:7f:e6:de:f3:42:d8:8a:07:27:03:
08:9a:ef:bd:1d:26:70:64:32:6e:ce:16:7a:1b:8e:e6:55:34:
70:f1:63:57:af:7e:2e:d6:bb:b2:18:8e:b3:ac:78:18:5c:8a:
d6:53:4c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:42 2024 by rpki-client on console-ams.rpki-client.org