Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/epr4VylSn3b9foBcpyr83W_x8bg.roa
File: epr4VylSn3b9foBcpyr83W_x8bg.roa (raw, json)
Hash identifier: qYKzYv/9rI2iWnY8eECY1YG0DokQQC17PwT6xEL4aGM=
Subject key identifier: 7A:9A:F8:57:29:52:9F:76:FD:7E:80:5C:A7:2A:FC:DD:6F:F1:F1:B8
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 018DEF5FCB343EB8DE082CBFF8FB200CB554
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/epr4VylSn3b9foBcpyr83W_x8bg.roa
Signing time: Wed 28 Feb 2024 11:00:48 +0000
ROA not before: Wed 28 Feb 2024 11:00:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42375
IP address blocks: 194.113.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 12:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:5f:cb:34:3e:b8:de:08:2c:bf:f8:fb:20:0c:b5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Feb 28 11:00:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a9af85729529f76fd7e805ca72afcdd6ff1f1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b8:1d:b0:db:d9:d3:8e:31:8f:9c:e0:6d:9e:
d2:21:6b:18:6b:d1:d8:97:fd:59:c9:15:04:61:97:
b3:8b:14:51:2b:5c:da:ca:60:94:3b:e0:08:79:26:
87:04:bf:e1:48:f6:89:c2:8d:29:16:83:56:0b:ae:
59:a4:de:66:53:ea:1f:e9:15:6a:0d:db:cb:8c:b5:
e7:33:e0:34:04:4d:84:d8:aa:99:9a:ee:8e:88:d0:
a3:99:24:08:1d:68:49:cf:a0:33:65:29:50:44:72:
ad:47:94:9a:5b:4e:8b:43:eb:5c:03:d6:77:19:0c:
c4:3a:03:5d:e0:22:b2:52:fc:94:87:92:d0:70:d1:
59:1e:1b:f6:e5:25:bb:c2:0b:4d:86:b4:07:25:61:
0f:f5:b8:54:80:c7:c6:50:ac:08:06:6e:f5:67:5a:
90:d8:74:ca:72:1b:c7:30:ba:92:1b:6e:ac:18:c3:
77:47:2b:ed:00:0d:dc:f8:89:4a:55:33:9d:24:84:
40:6f:d6:33:c5:05:c3:23:79:f6:1b:fa:70:5c:0b:
c7:13:56:12:e2:36:b6:25:c9:d7:2b:77:88:80:fe:
6e:52:c7:a7:85:f8:31:e8:6f:aa:ab:e5:4e:eb:9a:
71:84:0b:8b:f9:77:7c:db:86:f0:fb:8d:fb:6e:e6:
96:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9A:F8:57:29:52:9F:76:FD:7E:80:5C:A7:2A:FC:DD:6F:F1:F1:B8
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/epr4VylSn3b9foBcpyr83W_x8bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.153.0/24
Signature Algorithm: sha256WithRSAEncryption
10:b3:1e:88:83:c0:b9:e5:34:62:e6:8f:76:de:32:06:e2:10:
be:98:89:4a:3f:b6:00:e8:9b:38:28:80:77:4a:fd:ff:c1:a9:
21:09:4e:56:eb:67:b8:08:7b:97:df:e0:6e:b4:1c:c2:18:81:
e5:80:3c:88:cc:6d:29:35:73:1e:6b:2c:02:70:5a:db:9b:5b:
c2:d9:bb:75:6d:d5:2d:1c:2c:42:52:f3:ed:23:c4:2a:93:bf:
c3:b7:7b:36:f3:71:32:59:a1:71:a4:6a:24:f9:73:a3:5b:9c:
f9:d0:ec:16:ce:b1:e2:5b:a5:56:1b:01:b4:51:23:b8:2f:33:
f7:0f:e1:c0:63:d9:80:0a:15:ad:e2:de:0d:0b:51:fe:92:d7:
10:52:19:88:f7:99:07:5c:ff:b5:09:75:4c:d6:d0:28:6f:9e:
dc:8f:d1:2f:23:91:62:aa:03:10:92:76:1b:09:9f:da:20:75:
04:f9:c6:f3:03:a1:70:f1:e2:e1:7a:70:b7:92:10:f8:ed:8b:
03:b8:48:ab:53:96:04:17:b8:87:ca:68:32:31:0c:a8:09:ff:
5b:38:33:8b:3f:1f:97:46:4c:5c:9d:1f:35:61:ba:6e:58:af:
59:31:92:5b:24:1a:9b:2a:c4:19:a2:a2:b9:43:d1:ba:06:8e:
d8:98:b2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:25 2024 by rpki-client on console-ams.rpki-client.org