Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/4kkp4SA76YUHmuLZgHVTaFgsGeg.roa
File: 4kkp4SA76YUHmuLZgHVTaFgsGeg.roa (raw, json)
Hash identifier: Pb/vU7VJTX+9LsASGN/qLLx7stQK6abTfFdAEWFIoTs=
Subject key identifier: E2:49:29:E1:20:3B:E9:85:07:9A:E2:D9:80:75:53:68:58:2C:19:E8
Certificate issuer: /CN=da01323efafee332064e278b97cb8d1f9d8fef79
Certificate serial: 018675163D93A486B523E801EA2465B7BAE3
Authority key identifier: DA:01:32:3E:FA:FE:E3:32:06:4E:27:8B:97:CB:8D:1F:9D:8F:EF:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gEyPvr-4zIGTieLl8uNH52P73k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/4kkp4SA76YUHmuLZgHVTaFgsGeg.roa
Signing time: Tue 21 Feb 2023 17:47:17 +0000
ROA not before: Tue 21 Feb 2023 17:47:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35112
IP address blocks: 188.244.112.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:75:16:3d:93:a4:86:b5:23:e8:01:ea:24:65:b7:ba:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da01323efafee332064e278b97cb8d1f9d8fef79
Validity
Not Before: Feb 21 17:47:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e24929e1203be985079ae2d980755368582c19e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:70:83:ac:2d:ef:d4:d1:3d:81:8c:69:dd:38:
c4:e6:4b:be:7c:4b:46:50:51:d2:83:be:a9:ff:aa:
44:bb:4d:14:18:05:04:b1:6a:f2:50:0b:99:5e:af:
2d:21:c4:1d:c0:4d:56:2c:dc:1a:2f:84:27:25:af:
4d:70:c0:3f:8e:34:34:66:3b:70:b0:de:5d:ea:f7:
8c:6d:fc:54:2c:bf:46:cb:53:59:2a:95:ef:7a:4b:
38:05:3c:25:2a:e2:83:ea:e7:18:9c:ad:7f:d1:62:
0c:75:86:48:81:f5:33:9b:3a:b5:97:6e:1d:00:0e:
80:85:3a:6a:58:41:0b:09:75:c9:4f:50:49:8f:84:
33:d5:5a:90:5a:eb:03:56:c6:48:e2:4e:b9:28:1f:
18:c2:a0:d8:39:2a:cb:9f:aa:98:20:90:46:29:17:
e0:28:6d:e3:65:ac:cb:45:97:66:9c:65:74:55:32:
ee:2e:0c:1e:a2:b2:e3:b7:55:2d:53:25:82:4a:13:
f2:8a:26:b1:d5:62:ad:3c:0e:cd:38:42:85:b6:93:
4f:1c:6c:41:f5:75:dd:11:5a:4b:6d:d9:e3:7c:8d:
8b:21:3a:b8:6f:6f:52:5c:bf:bc:d7:67:6c:16:54:
1c:d2:1e:9e:ef:26:bd:54:61:06:25:8e:51:30:6c:
a4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:49:29:E1:20:3B:E9:85:07:9A:E2:D9:80:75:53:68:58:2C:19:E8
X509v3 Authority Key Identifier:
keyid:DA:01:32:3E:FA:FE:E3:32:06:4E:27:8B:97:CB:8D:1F:9D:8F:EF:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gEyPvr-4zIGTieLl8uNH52P73k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/4kkp4SA76YUHmuLZgHVTaFgsGeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/2gEyPvr-4zIGTieLl8uNH52P73k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.112.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:38:3d:2f:02:a8:a3:34:63:42:b2:99:11:33:2f:51:55:3c:
45:bf:55:7b:ef:6e:af:fc:d3:22:da:6c:98:fd:e1:2e:d1:71:
42:c4:e4:52:68:c0:84:19:48:38:cc:7f:99:82:9c:0f:f3:bd:
87:14:3f:12:d1:3e:ed:01:5d:a6:d1:76:54:71:eb:f8:50:7a:
92:ca:b6:c7:67:00:5a:95:0c:76:6e:65:94:f8:fe:29:a6:50:
ca:3f:ed:b2:7c:a6:54:1e:19:27:f6:a1:9c:a0:33:c1:64:b5:
b7:50:b7:09:d5:99:23:c6:90:f0:cf:a8:48:33:bb:2c:52:45:
32:93:16:b0:d5:9c:b6:79:71:8f:a0:25:0a:8d:7f:4e:36:44:
34:30:16:15:c2:d6:42:bf:63:86:1d:b8:46:8e:52:1c:bf:4c:
56:a8:f6:08:f5:7c:81:4f:af:b5:9f:7f:c5:31:ca:f8:8e:68:
ea:12:a0:c6:08:d1:97:8b:b9:27:59:6f:67:ad:b3:13:fa:d2:
ad:5c:4b:de:cb:e8:14:99:91:81:0c:a1:39:74:d4:3b:6f:c1:
5b:30:c2:16:7e:5b:8b:a0:9f:12:62:39:3b:66:9c:8a:58:49:
c2:04:bb:cf:5c:a1:bc:f3:e3:b6:45:cb:03:bb:e1:c5:4e:26:
2e:d1:78:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 13 11:17:23 2023 by rpki-client on console-fra.rpki-client.org