Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/tMsXNMg4qWXZFJ3_Y7Nvnedzyf0.roa
File: tMsXNMg4qWXZFJ3_Y7Nvnedzyf0.roa (raw, json)
Hash identifier: 5S+WG/FZrcTUT+AVkurcMsLHmRRi6hN8+oACJgTNdsA=
Subject key identifier: B4:CB:17:34:C8:38:A9:65:D9:14:9D:FF:63:B3:6F:9D:E7:73:C9:FD
Certificate issuer: /CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Certificate serial: 018B90653E0B4E5D7A74D108FA507C6ED70F
Authority key identifier: E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/tMsXNMg4qWXZFJ3_Y7Nvnedzyf0.roa
Signing time: Thu 02 Nov 2023 14:17:16 +0000
ROA not before: Thu 02 Nov 2023 14:17:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5483
IP address blocks: 195.90.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:90:65:3e:0b:4e:5d:7a:74:d1:08:fa:50:7c:6e:d7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Validity
Not Before: Nov 2 14:17:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4cb1734c838a965d9149dff63b36f9de773c9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:91:e4:fc:24:55:dd:45:b5:4a:3e:03:57:70:
3b:53:eb:bc:99:42:9b:b4:76:fd:e8:b0:b8:4d:ee:
d4:48:88:e7:0f:44:7b:2d:89:13:5c:e0:4b:4a:4d:
f8:24:f1:e6:46:7d:83:4f:d0:6c:47:d0:cc:97:d6:
1c:c2:f1:66:96:1f:1b:d6:70:00:83:eb:4e:5a:b2:
5d:64:71:7a:e3:18:37:4b:78:f2:83:2a:98:37:64:
55:0c:ea:64:08:47:5f:68:c1:89:b3:5d:1b:4e:22:
89:cd:39:c5:4b:55:63:70:d6:ef:9e:8e:95:11:8c:
e3:e1:74:95:1a:5c:b2:3a:b1:74:38:45:c5:f5:d1:
77:63:29:74:57:cf:43:70:27:53:19:cb:b4:8b:2b:
92:b3:aa:ac:ba:5c:7d:04:1b:f8:04:42:74:12:0c:
4b:5c:57:ae:20:47:6a:5e:4a:45:ad:ee:99:12:0e:
54:b7:16:eb:84:bc:c9:51:09:09:a1:64:59:89:1b:
3a:8c:61:e1:ff:26:21:32:d5:c1:bf:7f:0e:2b:53:
0b:56:6b:68:31:8a:e2:c6:88:88:d9:d1:9c:2a:4f:
30:f7:ee:d9:21:77:d7:dd:db:42:8f:d9:ae:7c:f2:
45:9a:c5:e6:d0:e4:82:10:ba:36:50:c7:26:f5:c2:
5d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CB:17:34:C8:38:A9:65:D9:14:9D:FF:63:B3:6F:9D:E7:73:C9:FD
X509v3 Authority Key Identifier:
keyid:E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/tMsXNMg4qWXZFJ3_Y7Nvnedzyf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.90.98.0/24
Signature Algorithm: sha256WithRSAEncryption
00:d9:3b:b4:33:88:36:ab:c7:f7:32:07:f0:d7:f0:f2:60:df:
2f:86:27:39:89:8e:6c:2e:9d:33:33:35:d2:8c:af:66:d6:97:
6d:36:a8:ea:a5:d2:ee:c3:44:ad:c0:5d:2f:97:b2:5b:11:d6:
c4:90:2b:48:4e:c0:79:69:11:a9:fd:e8:2f:66:3b:94:0d:38:
a4:82:24:17:f4:e7:92:26:fa:c6:99:09:f4:ee:24:db:3b:06:
8e:51:c2:53:f8:3e:81:c3:cc:f9:ba:46:6b:04:bb:62:6d:f4:
4f:ab:cb:ab:5b:28:67:10:6a:a4:59:9a:65:a2:3f:b7:b1:56:
3e:39:bc:e5:53:d5:34:87:0e:f8:ef:66:8e:55:de:ce:6e:e3:
36:9c:93:0c:eb:65:c2:0c:a6:9c:b8:83:7f:77:ed:12:b7:61:
b1:6b:ac:a4:73:79:19:dc:f4:a8:e6:6a:7e:07:87:0a:a1:fb:
dc:77:53:21:ab:a7:7c:31:57:b2:e8:7a:ce:b8:aa:57:1f:e0:
d7:57:a2:cd:af:54:4f:ca:d4:7f:53:a8:0b:63:a4:ca:e5:8d:
13:28:0a:03:10:de:e9:d3:67:a9:36:ad:83:a0:47:97:9e:5b:
c7:fb:f1:6b:6f:30:08:83:e9:a8:23:7d:16:e1:c0:66:ba:e7:
fe:72:6b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:03 2024 by rpki-client on console-fra.rpki-client.org