Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/4arpgutUniMrwM5_sf7cvGumyF4.roa
File: 4arpgutUniMrwM5_sf7cvGumyF4.roa (raw, json)
Hash identifier: xr6wnD2hJgZYMOlwRReZgSCLf/k4cK1JgUDPm9gdL8s=
Subject key identifier: E1:AA:E9:82:EB:54:9E:23:2B:C0:CE:7F:B1:FE:DC:BC:6B:A6:C8:5E
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 018570705C53253349E4B7A33B3D51AA5206
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/4arpgutUniMrwM5_sf7cvGumyF4.roa
Signing time: Mon 02 Jan 2023 03:04:49 +0000
ROA not before: Mon 02 Jan 2023 03:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28906
IP address blocks: 81.4.232.0/21 maxlen: 32
81.4.248.0/21 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:5c:53:25:33:49:e4:b7:a3:3b:3d:51:aa:52:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 2 03:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1aae982eb549e232bc0ce7fb1fedcbc6ba6c85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0f:7c:0c:ee:45:59:ec:02:66:71:67:f5:1a:
0c:a2:e6:78:cd:c6:d0:74:27:8e:f9:83:a7:d2:e9:
68:a6:db:55:3c:c7:5d:70:f4:b6:9a:67:77:11:7f:
ec:08:9d:6d:95:47:20:11:55:34:f8:b9:bd:66:55:
86:58:93:e9:03:3c:1a:8e:1c:74:d0:3f:a6:7a:bd:
49:72:39:c8:8e:f7:c2:1a:c9:f4:d2:6d:9e:65:75:
8b:29:3f:48:d7:63:b5:34:56:f6:6c:b9:48:57:ca:
73:87:c4:75:22:d7:4c:fb:e6:25:0c:b4:2d:eb:d6:
d8:c2:58:3b:c3:4c:7d:a2:02:f9:5f:f9:13:f6:1e:
07:cc:d5:6c:51:86:01:a3:fa:a7:ff:5f:89:11:30:
8d:6c:de:00:a9:36:a1:36:b7:57:86:ff:e1:61:b9:
c1:8a:0f:47:30:16:af:c6:31:3f:41:d1:85:3b:7a:
c3:12:6a:16:39:f1:26:74:ee:e4:2e:ff:51:28:74:
1d:1a:33:64:b1:e4:2e:7b:41:c2:0c:47:bb:72:56:
30:f9:24:57:b1:be:94:c1:3d:40:57:e6:8e:3d:eb:
a5:cd:85:51:49:4b:20:2e:78:8e:f3:90:3e:13:aa:
a1:b1:cd:90:8e:f3:39:14:3a:c0:b0:14:93:32:a9:
ab:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AA:E9:82:EB:54:9E:23:2B:C0:CE:7F:B1:FE:DC:BC:6B:A6:C8:5E
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/4arpgutUniMrwM5_sf7cvGumyF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.4.232.0/21
81.4.248.0/21
Signature Algorithm: sha256WithRSAEncryption
d2:f6:68:85:13:a7:92:44:13:1e:ee:42:25:a4:07:f9:f5:c8:
60:1b:61:76:b8:08:bd:d7:59:de:a9:74:4d:d2:a9:c2:d8:f7:
65:52:ce:33:80:cd:24:e8:9d:a2:d6:67:b1:8f:6f:24:2e:b2:
0d:f1:5f:ba:f6:51:94:c2:64:9b:a1:a7:30:2a:99:5b:97:a7:
86:ce:5d:58:b7:5d:1c:b8:a6:1b:bc:22:24:17:fb:8e:25:f0:
e9:b9:67:d2:70:4e:f6:d3:13:d6:47:72:49:b9:10:02:93:91:
5d:2c:38:67:c2:f7:d4:66:03:a7:1d:5b:c9:04:af:00:5d:6e:
78:85:d9:b1:4b:6e:d3:ad:04:a5:80:ab:98:07:fb:73:84:9a:
42:b9:ec:7a:e8:ce:0b:38:2f:9e:75:fd:85:f0:30:c5:ee:6e:
8a:95:bb:44:5b:66:a5:f4:f5:f6:bc:19:a3:88:8c:a5:12:f2:
70:a6:8d:ac:17:94:59:ce:27:c7:e6:89:b3:8a:e3:6a:a1:a3:
37:93:3d:06:6a:db:00:3b:c1:61:41:93:2f:5a:92:cb:61:7d:
bb:73:be:92:b7:de:ff:84:ef:94:21:4b:b2:4c:30:dc:6b:e3:
fe:8d:12:12:06:49:4e:fd:3b:97:4e:8f:4a:3a:57:55:ac:6f:
83:2b:4c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:08 2024 by rpki-client on console-fra.rpki-client.org