Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/To2F6bFNGHpDaH2ZuRE1jKnqWhg.roa
File: To2F6bFNGHpDaH2ZuRE1jKnqWhg.roa (raw, json)
Hash identifier: GkZcFTyD9UwkUQGaFGGOpOrEL47FKEOPSLksVXXa/gI=
Subject key identifier: 4E:8D:85:E9:B1:4D:18:7A:43:68:7D:99:B9:11:35:8C:A9:EA:5A:18
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01902FD56C2CC9B7F2432D28F1FC60C6BE29
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/To2F6bFNGHpDaH2ZuRE1jKnqWhg.roa
Signing time: Wed 19 Jun 2024 09:30:34 +0000
ROA not before: Wed 19 Jun 2024 09:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48944
IP address blocks: 178.239.148.0/23 maxlen: 24
185.215.228.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 03 Aug 2024 07:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2f:d5:6c:2c:c9:b7:f2:43:2d:28:f1:fc:60:c6:be:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jun 19 09:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e8d85e9b14d187a43687d99b911358ca9ea5a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:98:6d:90:a5:f2:ad:2f:5a:25:d9:f6:bc:3a:
e1:0c:a0:1e:55:a5:18:09:18:9c:80:7e:fc:8e:ed:
64:11:25:f8:11:7a:6e:96:5a:7c:ea:35:e1:ba:b8:
db:bb:86:cd:43:61:c2:1e:d5:24:03:d7:6c:01:51:
ee:82:9f:c4:46:b8:97:0d:00:bf:67:d7:93:bf:dd:
49:e5:07:a5:03:09:8e:d4:08:9d:0f:8c:0e:01:6f:
cb:61:f6:73:03:e2:0c:26:d7:16:1e:64:fd:4f:96:
01:3e:05:a0:59:fa:87:1c:75:ea:31:69:d6:1a:32:
ae:1a:19:6c:7c:cd:24:0b:98:10:34:37:0d:62:67:
ce:bd:7e:94:e4:eb:7e:4d:31:e2:12:da:16:dd:b2:
e2:b0:a6:c2:6e:ed:b0:2c:a1:3e:ef:f5:65:8c:bd:
9e:23:f6:c7:c1:7d:23:96:3a:46:db:d0:9b:a0:46:
ff:07:71:db:cd:c7:f4:ab:d2:69:b2:46:b6:78:de:
87:fd:dc:79:84:a7:92:8f:2b:1b:88:9a:6d:6d:ec:
d9:6d:de:b5:59:16:ab:f6:80:86:c0:5d:8e:6d:b3:
8c:96:01:db:80:c8:11:67:16:00:17:87:3f:ce:f6:
a9:c1:ba:b6:ff:10:0e:55:9a:a9:99:da:97:81:cf:
57:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8D:85:E9:B1:4D:18:7A:43:68:7D:99:B9:11:35:8C:A9:EA:5A:18
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/To2F6bFNGHpDaH2ZuRE1jKnqWhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.148.0/23
185.215.228.0/23
Signature Algorithm: sha256WithRSAEncryption
00:62:63:80:ff:80:a5:c5:6b:19:4d:5a:db:d8:4e:2a:7a:42:
ca:cc:e4:f2:3c:91:67:3c:ab:9f:30:c3:54:31:93:2d:1d:9b:
85:b1:e4:4b:f9:d6:e0:da:47:e9:e7:56:c4:a3:cb:c9:aa:27:
b6:4a:9a:05:48:9d:24:c6:a5:af:ba:2d:8c:67:b9:fa:5c:2b:
ee:14:17:48:5c:22:14:ea:3f:c7:d0:ab:46:64:3b:b2:cf:9d:
ee:c6:99:2a:67:4f:bf:6f:f0:d0:2f:66:23:9e:64:a5:cd:f3:
6e:2e:7f:a9:93:e0:bb:7b:7d:2a:bb:98:fb:13:e5:f5:fc:68:
8e:21:5a:03:4b:41:a9:17:fd:11:5f:23:0e:83:67:4b:3d:7c:
bc:5b:83:a1:9e:f7:6a:8b:05:53:9b:72:be:97:c4:ed:cb:1d:
78:88:36:72:c3:5a:36:90:72:78:10:7e:76:23:0a:24:15:38:
95:bb:1a:75:96:44:72:5e:fa:64:49:b9:99:41:a8:a8:f8:b2:
73:81:86:d5:a3:1b:99:b6:1b:07:e6:58:52:71:c9:66:bd:4a:
a3:e1:62:69:b1:31:f0:45:b7:43:10:3c:ee:74:0b:38:d7:3f:
8f:8b:51:11:0b:0c:d4:03:0b:f5:2b:b2:40:63:e8:75:12:ef:
9a:5c:48:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 3 09:12:38 2024 by rpki-client on console-fra.rpki-client.org