Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/4tGUbvFjIHkEIpk9fby-Nmhli6A.roa
File: 4tGUbvFjIHkEIpk9fby-Nmhli6A.roa (raw, json)
Hash identifier: 2lSxMJoNQ4AgGkT8XuewTPHmjSBPRoE8jKrQBSlM/Lo=
Subject key identifier: E2:D1:94:6E:F1:63:20:79:04:22:99:3D:7D:BC:BE:36:68:65:8B:A0
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 018D63E78ECA9AA0E666F2B804AFAC34E400
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/4tGUbvFjIHkEIpk9fby-Nmhli6A.roa
Signing time: Thu 01 Feb 2024 09:02:16 +0000
ROA not before: Thu 01 Feb 2024 09:02:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 82.206.4.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Apr 2024 08:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:63:e7:8e:ca:9a:a0:e6:66:f2:b8:04:af:ac:34:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Feb 1 09:02:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2d1946ef16320790422993d7dbcbe3668658ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fb:ba:98:40:ac:22:7a:a1:f6:87:1f:28:94:
09:f8:3e:5c:3c:52:b1:04:4e:31:d1:39:36:b0:2e:
ee:6a:fc:d6:fd:8b:ed:17:42:60:19:91:36:4f:49:
7d:4c:cb:9c:89:b5:c8:cd:36:ec:d8:9d:8e:79:70:
be:bb:b0:b7:7a:df:30:94:60:c8:d9:5f:5e:01:03:
b4:c3:a7:a8:54:3f:0c:5d:71:9d:21:f3:1d:cd:09:
32:df:17:b5:e9:93:e3:76:a9:17:69:6c:b4:48:34:
77:bc:50:cf:ff:be:23:4d:48:b8:d6:61:51:a8:e1:
cb:d9:65:34:07:d5:ff:3d:39:dd:37:1a:63:1c:e5:
63:45:24:b4:3f:89:35:a8:42:ca:2c:2a:bd:ac:67:
4f:48:02:40:1b:73:bd:09:68:75:4a:cb:f8:45:a8:
18:a2:51:27:04:4f:21:c5:8a:aa:df:c9:bc:ba:7e:
05:88:bb:ed:50:5a:6d:73:a1:4e:91:de:1d:62:1c:
1a:0c:29:15:07:a7:0b:61:57:76:84:11:13:02:55:
57:4f:6b:eb:33:a3:73:f9:e0:02:f8:e1:ea:c7:d8:
d6:7b:52:84:2c:c2:b3:7a:eb:38:95:fe:13:14:71:
85:cf:78:f4:41:5e:f9:3c:12:59:c3:c9:58:64:2e:
d3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D1:94:6E:F1:63:20:79:04:22:99:3D:7D:BC:BE:36:68:65:8B:A0
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/4tGUbvFjIHkEIpk9fby-Nmhli6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.4.0/22
Signature Algorithm: sha256WithRSAEncryption
16:a8:26:d6:c0:dd:3b:b4:b3:9e:d2:8b:a6:e4:25:8d:77:78:
60:07:de:ae:2f:82:90:38:df:dc:16:af:63:73:df:42:45:46:
11:dd:25:9d:3d:43:91:c6:45:e4:ff:73:77:54:9e:b4:41:ae:
4f:39:64:8c:5e:62:b2:6b:99:c7:f3:bb:eb:68:89:41:0c:91:
a2:6c:3d:86:ed:c2:1f:72:b8:41:74:92:5f:54:a3:c7:6c:ca:
fe:1e:70:8c:6b:2b:9b:01:0e:9b:f6:89:fc:bc:20:a3:dc:54:
c5:be:ff:63:1a:c9:1e:1d:eb:9b:ca:45:2e:16:e3:d6:97:ea:
53:96:1e:d2:3c:17:54:a3:14:03:54:dd:3f:12:c9:3e:5c:c1:
8e:4b:38:9c:09:8f:d2:af:ea:83:1f:b9:7f:a2:12:12:47:65:
52:e6:b1:11:fe:3a:e7:1b:ea:f9:2c:b3:93:b2:13:4d:e6:e3:
77:6d:f2:e5:3d:e3:cc:fe:cf:81:ee:6f:32:c2:3a:3f:b6:dd:
69:d6:ad:36:43:48:22:f6:28:99:1d:a7:14:cd:d7:39:76:98:
22:b2:f8:ba:5f:f6:6f:32:2b:c9:f1:85:e5:df:b1:c7:bc:24:
29:55:13:c9:43:7a:61:e8:55:79:6b:a1:44:4d:29:f0:b1:58:
a6:29:57:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 11:48:39 2024 by rpki-client on console-ams.rpki-client.org