Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/fqeZc8pp337Nyg2ZQodZPbeZ5Wk.roa
File: fqeZc8pp337Nyg2ZQodZPbeZ5Wk.roa (raw, json)
Hash identifier: WGW51b0KV25+n5xFLS75u+ZrtnXE7Bk7maPjHdtUimE=
Subject key identifier: 7E:A7:99:73:CA:69:DF:7E:CD:CA:0D:99:42:87:59:3D:B7:99:E5:69
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 01857295C83FF3A76FF14C4A59CA76DFA12C
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/fqeZc8pp337Nyg2ZQodZPbeZ5Wk.roa
Signing time: Mon 02 Jan 2023 13:04:56 +0000
ROA not before: Mon 02 Jan 2023 13:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36892
IP address blocks: 81.199.14.0/24 maxlen: 24
62.56.138.0/24 maxlen: 24
81.199.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:c8:3f:f3:a7:6f:f1:4c:4a:59:ca:76:df:a1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Jan 2 13:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ea79973ca69df7ecdca0d994287593db799e569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f2:e1:c6:00:94:f2:2d:3b:40:7e:3a:6b:f5:
67:06:0b:10:9c:f6:4c:eb:2b:8c:61:ab:29:8e:17:
2d:af:09:1c:d4:65:32:df:87:04:66:0a:f5:ac:2b:
bd:71:b9:3e:dd:3b:58:54:4e:85:ad:3b:c9:c4:47:
aa:04:c7:c4:5e:a2:b1:70:93:64:04:7e:c7:bd:76:
e3:97:44:76:1c:17:76:64:a3:f0:b2:d9:7f:4b:ad:
87:0f:26:8a:bb:af:9e:9c:38:ff:44:f7:82:17:1c:
ff:cc:52:6b:06:36:78:a1:56:ce:71:70:9a:d6:62:
2f:7c:14:19:0e:55:81:8a:be:d2:e5:f9:86:54:cd:
20:e0:87:a9:cd:2d:36:9b:9e:c3:b8:d6:94:e6:75:
a9:45:8d:eb:49:bf:f6:3b:cf:7a:7e:25:dc:5b:e9:
a2:04:00:db:6d:e7:eb:8e:a9:20:4e:2f:49:99:d3:
51:6e:b9:77:41:b0:54:3e:cb:9a:4e:ac:c2:44:9a:
35:fc:b0:e4:29:8d:46:92:32:ec:24:8f:f6:4d:cf:
02:2d:1a:16:9d:83:ea:85:0b:98:4b:3d:53:9d:e5:
46:2d:81:41:c8:96:d7:32:10:54:dc:8b:d9:f0:7b:
b6:ef:fa:2f:b3:18:3e:0c:fc:c8:a4:5d:0b:1d:32:
f6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A7:99:73:CA:69:DF:7E:CD:CA:0D:99:42:87:59:3D:B7:99:E5:69
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/fqeZc8pp337Nyg2ZQodZPbeZ5Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.56.138.0/24
81.199.14.0/24
81.199.89.0/24
Signature Algorithm: sha256WithRSAEncryption
04:86:79:fc:e3:0c:de:ea:03:46:6e:ca:c8:19:c9:5c:d9:a4:
6b:0b:92:a4:48:9e:35:9b:ba:12:d2:f4:31:ad:13:68:be:86:
1e:fa:ec:f0:4e:f4:c9:34:0c:ed:6a:1c:a2:3a:be:dc:61:05:
3a:55:80:0d:03:09:42:02:43:f2:41:30:2f:a9:4f:56:cc:fc:
94:3f:94:d4:cd:dd:0c:5f:80:eb:23:2e:24:1c:ea:cb:25:15:
cb:35:04:14:97:74:f3:7c:e8:c8:c7:1c:84:80:fd:bf:90:71:
32:68:3c:34:74:89:af:fe:4b:24:73:26:a1:fe:d0:e7:0c:fb:
01:39:d2:a5:98:c0:1d:1b:87:98:0a:87:e5:cb:82:b9:94:cf:
58:cb:33:88:48:5e:83:2e:f3:96:65:fa:8e:24:29:ec:e0:cb:
94:fc:07:d0:8b:e8:c8:27:5c:92:70:f6:63:ed:a1:34:76:40:
93:1d:bc:67:13:96:5b:d5:a6:5e:86:9b:6a:15:7b:e4:2b:8e:
64:19:45:4b:e9:cb:e6:5b:4a:48:6b:dd:e0:66:7f:06:4b:11:
21:db:53:3a:b8:60:39:9b:3a:e6:18:e8:ef:c6:9b:ca:b1:38:
41:47:b8:1b:ca:33:61:d2:b9:65:ca:58:d1:f8:df:24:24:1c:
2b:fd:5f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:41 2024 by rpki-client on console-fra.rpki-client.org