Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/4pt95-5-DBPs2gKYXLrVeHtNjg8.roa
File: 4pt95-5-DBPs2gKYXLrVeHtNjg8.roa (raw, json)
Hash identifier: 9L732Tf5vRF5npbhua3nwP3t4Wm78//75krEKNkJ+yg=
Subject key identifier: E2:9B:7D:E7:EE:7E:0C:13:EC:DA:02:98:5C:BA:D5:78:7B:4D:8E:0F
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 018AD00EAD298E4953A15F8D476402FA7030
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/4pt95-5-DBPs2gKYXLrVeHtNjg8.roa
Signing time: Tue 26 Sep 2023 05:55:37 +0000
ROA not before: Tue 26 Sep 2023 05:55:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 62.182.172.0/24 maxlen: 24
62.182.175.0/24 maxlen: 24
185.65.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d0:0e:ad:29:8e:49:53:a1:5f:8d:47:64:02:fa:70:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Sep 26 05:55:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e29b7de7ee7e0c13ecda02985cbad5787b4d8e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:36:24:98:3e:10:b4:6e:26:53:ac:a9:8a:27:
93:b2:49:80:e3:8f:6f:ec:c5:df:36:6a:60:ea:8a:
10:82:a0:14:1d:4e:cc:24:cc:74:d9:39:a7:30:fa:
66:72:1d:05:fa:af:87:ba:c4:af:75:26:4b:65:b4:
ef:33:6a:ec:87:b3:30:79:33:b0:74:c6:f0:09:ee:
1d:03:b0:d1:e0:d5:75:be:be:ee:e3:bc:07:84:22:
88:d8:28:84:3a:f4:1c:22:4d:3b:f2:f1:8e:a8:54:
e6:bf:d7:d6:30:1d:d5:f5:a1:c7:3c:6d:6d:15:6f:
7f:d9:74:34:92:2e:11:f1:4d:bc:99:ce:71:cb:9f:
85:31:83:6d:cd:ab:52:19:c5:e0:3e:fd:38:23:ce:
5e:fd:a2:34:33:de:69:14:97:6b:ed:44:a5:b0:f2:
83:04:95:db:65:1e:82:f1:d2:66:02:c7:36:b7:60:
20:ba:f2:0b:6c:32:84:c0:a7:20:61:f1:37:23:c1:
e5:de:7a:3c:44:bd:51:10:b6:af:d9:14:a7:2c:f3:
e2:74:e5:2a:f6:d0:f3:d7:98:a6:dc:8e:7c:61:c4:
8b:f1:5f:35:b3:c2:50:0d:de:e0:15:56:92:73:df:
e8:97:d4:43:7a:d5:6e:91:9a:aa:1a:d7:3f:96:32:
c2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9B:7D:E7:EE:7E:0C:13:EC:DA:02:98:5C:BA:D5:78:7B:4D:8E:0F
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/4pt95-5-DBPs2gKYXLrVeHtNjg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.172.0/24
62.182.175.0/24
185.65.68.0/24
Signature Algorithm: sha256WithRSAEncryption
34:2a:93:17:a5:22:9a:2e:35:71:70:a2:60:65:d4:44:aa:43:
69:c4:fd:35:47:0e:3c:fe:a0:a5:bf:15:fa:d3:b3:a2:4d:9f:
9a:ba:34:81:7c:8a:30:3f:02:67:92:36:54:3c:45:db:2c:68:
b9:95:6f:bd:e0:e7:a7:d9:7d:f8:35:88:ac:44:29:3f:c2:b3:
67:eb:75:59:d3:e1:5d:ad:22:32:ac:22:a3:6f:a6:0a:b8:d2:
5b:90:1b:70:bf:7f:11:c6:fb:91:59:25:61:14:68:0d:61:d2:
56:0f:a9:af:bf:aa:be:f4:6b:c0:9b:61:62:ce:73:da:4b:78:
a3:f8:98:a6:3e:3b:99:94:82:72:5b:a2:3b:c3:88:1c:ff:1d:
15:03:be:f7:5b:ca:9e:e8:80:f0:92:99:ca:3f:04:75:6b:22:
6c:2d:9d:d3:eb:ee:74:cc:79:e3:f1:b1:fd:fc:84:29:77:c2:
8a:e5:14:22:2d:c3:8e:7f:11:c0:4b:ba:29:51:17:f2:3a:e5:
f0:4a:1f:69:cd:be:19:96:d2:b3:d2:d9:4a:68:37:67:11:85:
50:f5:3e:63:91:b1:60:f6:94:ab:95:c2:23:ba:22:9f:34:76:
a6:35:0f:c5:de:2b:f9:57:13:c6:85:57:3a:3b:a9:9b:dc:f0:
f5:81:df:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 25 10:39:18 2023 by rpki-client on console-fra.rpki-client.org