Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/k4gVZE0hPWKD3vfcG_gnyTwPShQ.roa
File: k4gVZE0hPWKD3vfcG_gnyTwPShQ.roa (raw, json)
Hash identifier: xmhnV+nH215ia60zFPTLQFCI322W72jyKT9lsPnSxfs=
Subject key identifier: 93:88:15:64:4D:21:3D:62:83:DE:F7:DC:1B:F8:27:C9:3C:0F:4A:14
Certificate issuer: /CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
Certificate serial: 018BD7697F7E13478E08027B37EA25A19F15
Authority key identifier: E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/k4gVZE0hPWKD3vfcG_gnyTwPShQ.roa
Signing time: Thu 16 Nov 2023 09:14:57 +0000
ROA not before: Thu 16 Nov 2023 09:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44486
IP address blocks: 37.44.215.0/24 maxlen: 24
176.116.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d7:69:7f:7e:13:47:8e:08:02:7b:37:ea:25:a1:9f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
Validity
Not Before: Nov 16 09:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=938815644d213d6283def7dc1bf827c93c0f4a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:99:b1:c2:49:28:4a:ea:e3:a9:38:6b:3c:d0:
ac:c1:a8:ee:ec:0d:24:74:67:5e:16:e2:d9:e3:b3:
56:c6:e1:14:c8:a0:9f:19:fb:18:5f:7f:a8:65:12:
b0:d5:e1:13:6b:8a:63:e7:57:80:b0:aa:09:1f:d3:
98:a1:1a:5e:6c:d9:c8:31:70:f4:2d:9f:e5:35:17:
08:33:73:31:4e:a0:63:8d:54:1f:08:8f:d8:ae:d2:
47:46:ee:7e:1a:0f:59:ab:4b:07:30:11:4c:1e:64:
31:0c:ca:bc:94:64:f7:70:c1:c2:5c:11:c4:19:21:
65:5d:f8:02:46:52:39:b9:5c:3a:4d:15:3d:a1:cc:
da:27:54:16:c6:ec:45:c1:6c:be:20:aa:e6:41:20:
df:15:19:00:9f:4f:01:ba:9b:2e:16:cf:78:7c:c9:
4c:a3:7b:6d:83:14:42:c3:b0:ef:df:ef:6b:d5:b4:
2f:54:a5:4d:ba:7b:ff:41:20:f5:57:3d:69:87:11:
9e:18:18:cd:9f:99:3c:e7:91:14:7d:b5:75:4a:77:
40:ae:01:59:69:96:d9:bb:84:e8:d1:f4:bf:c0:d6:
91:1a:b4:4d:0b:08:ad:f6:dd:8e:28:06:e7:d3:82:
46:0a:3f:4b:71:59:af:b4:18:b5:3a:07:da:34:97:
7b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:88:15:64:4D:21:3D:62:83:DE:F7:DC:1B:F8:27:C9:3C:0F:4A:14
X509v3 Authority Key Identifier:
keyid:E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/k4gVZE0hPWKD3vfcG_gnyTwPShQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.215.0/24
176.116.18.0/24
Signature Algorithm: sha256WithRSAEncryption
66:a5:38:dd:09:01:61:6a:3c:95:84:93:8f:ba:9b:89:48:89:
5a:98:4e:d8:18:70:5d:f3:51:15:35:63:c8:8a:30:05:77:f1:
ac:d9:f5:3a:b5:17:76:84:5f:98:d3:8b:31:c2:37:2f:4a:e4:
52:d9:1f:2e:95:61:a8:83:84:10:f8:dc:12:05:9c:f4:ae:16:
da:ca:b2:28:af:74:61:ab:fd:a4:38:67:26:b3:0c:a3:df:8e:
16:c2:22:da:bb:f6:87:d6:38:36:d4:48:a8:54:42:ab:53:ab:
8c:a8:3c:da:d4:c5:e4:62:73:a1:bf:d6:9b:e7:f0:f0:51:8d:
a6:14:22:66:f6:ad:22:b9:8e:98:36:1b:25:5c:8d:dc:6a:0d:
75:f8:f8:fb:8f:12:a7:2f:dd:db:2b:cf:15:8b:30:79:68:01:
78:03:2a:69:46:fa:cd:cd:f2:9b:78:ff:10:31:91:fe:e1:06:
56:54:e1:a8:f9:46:57:f4:e8:0a:f7:f3:32:c2:21:0c:24:09:
45:80:a7:3c:f5:50:82:1f:bf:85:db:a2:72:aa:53:1e:87:a1:
b3:f5:47:90:58:41:af:94:68:52:e3:8e:08:55:9c:0c:b5:75:
e3:11:ea:02:6b:14:71:cb:11:ef:3f:c8:28:24:4c:fa:36:78:
88:db:c0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:47 2024 by rpki-client on console-fra.rpki-client.org