Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/4VlQtCpOBS_klTnpmNy6P6XUSDE.roa
File: 4VlQtCpOBS_klTnpmNy6P6XUSDE.roa (raw, json)
Hash identifier: Yru07q7h36fPGaVtJefm6Fs+zvDM30BJHAx+rtEEs3s=
Subject key identifier: E1:59:50:B4:2A:4E:05:2F:E4:95:39:E9:98:DC:BA:3F:A5:D4:48:31
Certificate issuer: /CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Certificate serial: 018CC801E665E29B3AC6BC7FFE5F6C8AB485
Authority key identifier: 81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/4VlQtCpOBS_klTnpmNy6P6XUSDE.roa
Signing time: Tue 02 Jan 2024 02:30:16 +0000
ROA not before: Tue 02 Jan 2024 02:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63796
IP address blocks: 185.140.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 07:18:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:e6:65:e2:9b:3a:c6:bc:7f:fe:5f:6c:8a:b4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Validity
Not Before: Jan 2 02:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e15950b42a4e052fe49539e998dcba3fa5d44831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:92:39:97:d7:8d:6a:02:81:82:db:3b:14:2b:
95:78:e2:b4:29:e7:9c:0b:9e:96:92:1f:56:e9:24:
01:f4:6b:57:61:f7:93:09:ed:ea:a1:d0:22:0c:d2:
7f:b1:f1:ec:88:d7:12:e4:54:ca:4c:2b:2b:ee:27:
56:4b:7e:a8:13:dd:35:06:63:be:91:af:89:08:fd:
37:b8:1a:ed:22:f2:6d:78:9e:a9:3d:c8:b2:5e:87:
f7:b5:92:e8:c8:2c:bd:fb:cd:18:88:78:f4:e5:cc:
92:60:fc:c2:7b:3b:c9:16:31:7a:8d:83:02:61:e3:
f3:b0:4f:ed:9e:61:fc:63:4f:e8:f0:77:07:46:14:
64:7a:0c:62:aa:74:69:98:53:17:1d:ff:7d:39:8b:
bd:0b:42:2c:85:b2:a3:dc:e6:22:0b:0f:36:81:67:
34:0d:2f:ed:a0:2c:47:d9:c0:f6:2d:e1:54:55:2b:
bc:33:a8:db:28:b5:a4:5d:6f:a1:3d:d3:10:59:83:
74:d7:fe:4f:dd:6c:31:d2:f9:94:fe:85:f9:5f:ee:
60:c8:55:98:6c:4c:30:31:9b:8d:92:3e:51:9c:91:
0c:5c:03:4d:fa:84:81:3e:cd:de:16:6b:0b:53:81:
d4:d3:6f:2b:a0:0c:e8:cc:3d:58:53:78:47:20:38:
39:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:59:50:B4:2A:4E:05:2F:E4:95:39:E9:98:DC:BA:3F:A5:D4:48:31
X509v3 Authority Key Identifier:
keyid:81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/4VlQtCpOBS_klTnpmNy6P6XUSDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.53.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:5d:5a:2d:88:3e:b6:20:8d:c3:8f:0b:91:2c:0e:c0:49:d3:
08:76:54:56:b4:37:97:af:23:ac:2d:23:d7:d1:cb:79:86:2e:
0b:e6:b1:91:23:29:55:c6:40:50:92:a8:65:fb:34:d3:84:b0:
5e:9c:4c:4a:00:cb:52:4c:47:e8:ef:bc:69:1b:b0:5c:bc:1a:
de:cc:30:3f:de:fa:4c:5f:46:77:6c:92:d5:ec:2d:71:e8:f2:
af:66:80:4f:c3:c7:6e:1e:23:5d:c6:3a:13:41:8c:5f:f6:4b:
47:c8:e5:b8:a5:0c:b2:84:b1:99:d4:cd:b7:0f:91:80:62:0f:
61:12:41:c3:76:69:e4:3c:14:a6:fd:e1:4c:90:98:fa:fd:24:
d3:9c:e0:20:fe:8b:b3:2d:87:ac:bd:62:53:a6:9c:ac:38:27:
64:42:2b:0b:35:0c:c8:8d:63:44:43:1f:ef:96:2f:35:dc:d8:
70:d9:a3:45:bb:f3:e0:a4:fe:03:10:7f:fc:e4:84:05:32:c5:
e5:08:f3:21:f3:c1:f4:64:ab:e3:8f:69:3a:d8:5b:0e:c9:18:
ab:09:87:08:07:38:e2:67:8a:f6:0e:f8:1e:1e:59:6b:5f:e8:
fb:ef:3c:bd:13:41:b2:28:01:99:dd:05:bb:f5:a9:c6:25:8e:
9d:cf:e4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:45 2024 by rpki-client on console-fra.rpki-client.org