Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/4mP5_OBYuVyzpwBRBDQXfE-YbP4.roa
File: 4mP5_OBYuVyzpwBRBDQXfE-YbP4.roa (raw, json)
Hash identifier: FiF/cMRAE2YTmUt13NRN+5ws3OO45Zkg2NpPnY/Xgns=
Subject key identifier: E2:63:F9:FC:E0:58:B9:5C:B3:A7:00:51:04:34:17:7C:4F:98:6C:FE
Certificate issuer: /CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
Certificate serial: 018C35132083B1F6153F4DD3B1D1AFE30688
Authority key identifier: EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/4mP5_OBYuVyzpwBRBDQXfE-YbP4.roa
Signing time: Mon 04 Dec 2023 13:44:55 +0000
ROA not before: Mon 04 Dec 2023 13:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197425
IP address blocks: 139.58.0.0/16 maxlen: 24
148.2.0.0/16 maxlen: 24
147.13.0.0/16 maxlen: 24
136.163.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:35:13:20:83:b1:f6:15:3f:4d:d3:b1:d1:af:e3:06:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
Validity
Not Before: Dec 4 13:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e263f9fce058b95cb3a700510434177c4f986cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5f:97:52:a8:49:8b:47:0f:c2:a9:79:c9:d3:
f4:20:d0:ee:bc:aa:53:6c:8e:b4:f3:d2:e7:f9:31:
28:8c:ae:f3:ab:e3:1d:de:07:6d:5f:e3:2f:eb:44:
f8:e7:09:cf:22:f1:39:2f:8b:67:85:d9:b2:4f:5b:
82:73:cf:4c:7c:99:5a:b7:95:0c:3e:b6:cd:04:9d:
99:f0:66:2e:6f:19:c0:30:a9:b3:bf:18:48:87:34:
05:3d:84:ba:f7:5c:ca:f7:22:1c:a1:52:22:f9:ba:
2d:2c:aa:9b:15:ad:cc:98:09:df:01:8d:50:e4:20:
fa:e4:6a:37:8d:79:70:c7:f1:c0:13:78:bb:95:d7:
f0:83:64:44:90:fe:a5:f2:72:04:d0:93:15:86:a0:
55:1a:97:f0:aa:79:96:c9:25:b4:ca:6a:32:74:2f:
23:21:5f:be:81:cd:29:69:b9:88:c5:c4:e4:33:dd:
95:cd:5e:68:57:e0:8c:34:8b:3f:60:12:0b:0a:2b:
09:94:da:8a:34:50:7d:94:d6:5e:bb:2b:dc:2e:44:
af:85:f2:aa:80:b1:5b:b3:1c:e2:2f:50:6d:04:a0:
c7:d5:fc:ea:d8:2d:89:f2:75:e9:76:c0:27:b2:e3:
47:5c:f2:1e:37:75:80:6f:28:65:c8:69:b4:71:7a:
a4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:63:F9:FC:E0:58:B9:5C:B3:A7:00:51:04:34:17:7C:4F:98:6C:FE
X509v3 Authority Key Identifier:
keyid:EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/4mP5_OBYuVyzpwBRBDQXfE-YbP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.163.0.0/16
139.58.0.0/16
147.13.0.0/16
148.2.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:51:1d:97:32:ef:9b:4e:e3:d8:21:b4:04:4d:f0:3b:0d:52:
0b:81:d9:b1:b3:92:0e:5d:24:12:2c:c0:5e:29:41:3d:c5:36:
4c:47:df:a1:b7:6a:0e:02:10:31:e9:5b:34:ee:1c:a7:67:66:
53:7b:47:c2:0e:f7:db:65:5e:f9:16:3a:32:da:5e:ec:92:7c:
71:e8:64:8e:60:18:90:e3:55:46:d5:ba:1e:3f:3d:5f:58:4e:
e6:86:a3:d2:b2:ce:db:1f:5e:24:2a:71:39:37:2c:fd:6f:ac:
c5:a3:99:a3:dc:7e:60:b4:f0:ec:62:7a:e1:ea:8e:aa:7a:f3:
4b:58:bc:fb:39:3d:c9:47:21:9c:a3:c6:a5:ce:55:2f:93:10:
fd:d9:9a:b6:f9:49:31:bb:a9:00:89:0d:10:e6:ae:0e:2b:19:
ca:f2:4c:f1:04:af:10:d9:73:88:75:23:28:a0:7c:36:f0:f2:
39:a0:d3:29:75:99:24:3c:0f:9f:5d:5c:96:6d:90:47:8a:3c:
8e:6b:d2:0a:02:d4:15:e7:28:9d:36:8e:ac:a2:f3:75:4c:b3:
78:d8:a5:15:78:10:9d:7e:08:22:69:97:b5:af:6f:58:5a:04:
56:14:51:4d:d9:84:71:55:34:7a:e4:12:69:20:f1:02:c5:ad:
8b:2b:2a:bd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:17 2024 by rpki-client on console-fra.rpki-client.org