Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/55je06STxQudrtk1Ai0G8MvpFQ4.roa
File: 55je06STxQudrtk1Ai0G8MvpFQ4.roa (raw, json)
Hash identifier: VvHKc0wZTpAWcDwtNLE2HN0Cs1C1pZ2g1R+1CdtQ4ok=
Subject key identifier: E7:98:DE:D3:A4:93:C5:0B:9D:AE:D9:35:02:2D:06:F0:CB:E9:15:0E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01877CFD346F9ADFEA8BCFF52FF837BA7AC0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/55je06STxQudrtk1Ai0G8MvpFQ4.roa
Signing time: Thu 13 Apr 2023 23:39:41 +0000
ROA not before: Thu 13 Apr 2023 23:39:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 2.57.240.0/24 maxlen: 24
89.43.62.0/24 maxlen: 24
94.177.150.0/24 maxlen: 24
94.177.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Apr 2023 04:42:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7c:fd:34:6f:9a:df:ea:8b:cf:f5:2f:f8:37:ba:7a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 13 23:39:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e798ded3a493c50b9daed935022d06f0cbe9150e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:82:79:91:fc:65:db:6f:4f:8b:b5:db:b5:
2a:81:40:e1:8f:bd:14:a6:8f:d6:39:58:1d:bf:75:
ba:49:bf:dd:68:ea:49:8a:89:28:ca:d4:85:33:4a:
3f:63:e5:60:04:02:4b:6b:c8:0a:ae:a8:57:39:a2:
8f:fd:a9:c4:14:75:0e:7d:ee:e6:d1:00:8c:b6:e0:
b9:9f:80:ff:c9:05:31:e0:d6:67:2c:ce:d4:36:a1:
4d:a5:27:b1:ab:e7:7d:47:9a:4b:d2:22:6f:1d:83:
eb:39:36:b6:a1:5e:70:ef:d6:40:18:7f:a8:21:63:
20:6e:1d:e2:4d:2a:58:72:1f:1d:26:8b:e7:29:41:
6f:70:ca:1b:5e:ef:91:91:d2:76:ca:e6:fb:49:a6:
7b:fe:69:12:50:c0:c1:cc:ac:2b:85:b7:f2:02:c8:
17:65:fc:02:a1:08:d0:e8:f9:65:38:57:1a:fb:c3:
01:d5:e8:24:a7:92:c4:61:b8:21:f1:01:ad:59:4e:
2e:f7:e6:c0:e1:b2:b2:e8:0d:ef:ef:b8:50:c7:7b:
db:c3:6a:3a:7f:5d:e9:85:32:16:21:8f:98:98:df:
6c:08:49:07:20:ca:77:26:c2:fd:90:f7:1e:77:cd:
46:1d:48:18:a5:7a:14:0e:45:25:22:56:7b:2f:b7:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:98:DE:D3:A4:93:C5:0B:9D:AE:D9:35:02:2D:06:F0:CB:E9:15:0E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/55je06STxQudrtk1Ai0G8MvpFQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.240.0/24
89.43.62.0/24
94.177.51.0/24
94.177.150.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:52:0e:6a:dd:3e:c4:ef:27:e5:45:4c:c3:14:5b:bf:ee:25:
51:f6:16:6e:5a:54:7d:c2:3b:bf:85:f9:87:4d:15:ab:8e:b5:
41:f8:ac:fa:20:c9:c8:11:5f:bb:8a:91:26:7f:bd:e4:a4:ba:
76:c9:df:b2:54:82:c1:8f:c5:ca:74:eb:14:d0:e9:4a:dd:47:
8a:67:87:78:a3:55:db:36:9b:dc:69:c2:d7:9e:3e:2d:55:b5:
48:54:d7:51:ac:e7:85:8a:1d:16:82:7b:d6:e7:5e:ce:41:06:
01:ff:ad:a8:fc:93:77:42:77:b8:86:85:34:b6:1a:6f:73:2a:
27:a6:d3:5e:da:03:3d:c2:0f:a4:17:a2:97:70:ff:fc:bd:61:
45:ed:a1:32:88:57:1d:8d:e2:2b:4c:10:c9:6e:b6:7e:4c:98:
71:b0:83:b6:2f:51:17:50:41:2e:a2:0a:21:08:96:02:a9:02:
d3:9a:86:d8:11:42:31:f8:bd:f6:50:75:e0:ae:fd:75:db:ff:
f3:6e:8f:5f:fb:1f:e0:18:ba:e6:36:b2:11:60:37:ed:d5:08:
35:7a:74:32:eb:7f:ad:3a:99:0f:b7:be:ba:5b:77:95:17:cc:
f6:c2:30:ec:c0:94:36:93:60:42:54:15:71:07:d0:14:4e:03:
f2:78:f3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org