Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/SZke97axMXBXTWWpUUUJiWkSMwA.roa
File: SZke97axMXBXTWWpUUUJiWkSMwA.roa (raw, json)
Hash identifier: yocVkiL3jKPmrPDW2SQ3TcLLsQPBY8jL39Wu/NMFdv0=
Subject key identifier: 49:99:1E:F7:B6:B1:31:70:57:4D:65:A9:51:45:09:89:69:12:33:00
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 018572C37DD4F5A262BEA304C14E3F50480E
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/SZke97axMXBXTWWpUUUJiWkSMwA.roa
Signing time: Mon 02 Jan 2023 13:54:52 +0000
ROA not before: Mon 02 Jan 2023 13:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211183
IP address blocks: 79.133.183.0/24 maxlen: 24
79.133.182.0/24 maxlen: 24
79.133.181.0/24 maxlen: 24
185.240.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Feb 2023 15:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:7d:d4:f5:a2:62:be:a3:04:c1:4e:3f:50:48:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Jan 2 13:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49991ef7b6b13170574d65a95145098969123300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:82:db:76:51:3a:ea:1c:70:59:c2:d8:b6:
ce:36:2d:16:50:f5:c8:4b:71:40:6f:cc:4a:e5:01:
ac:4b:c1:72:a2:fb:5d:f0:ce:46:16:30:7f:69:b0:
30:7f:8a:fd:61:eb:d1:d1:b7:75:36:4b:e7:2f:86:
cb:e3:d1:d8:c3:fe:78:65:3b:aa:76:1f:54:6a:11:
ac:90:ee:f0:51:f4:31:4b:43:8a:7b:af:45:0a:4e:
2a:ea:89:95:8c:ae:b9:56:21:e9:12:c6:e9:6d:98:
9c:bd:f9:dc:52:fa:5d:ab:33:ca:d9:9f:d3:d4:f1:
6d:a5:25:ab:81:26:85:9c:00:ae:a6:37:67:b3:60:
b3:aa:33:f0:9c:02:3d:9d:40:4e:21:fe:42:d6:5c:
84:94:af:54:97:b7:f3:e3:8b:d5:12:9f:04:ba:e4:
c1:17:9c:6e:e9:2a:f4:f0:51:85:05:3d:a2:1c:34:
49:9c:4b:72:1b:f9:3d:46:94:9f:25:15:b4:54:fe:
b7:25:df:a0:4f:58:b1:54:7d:93:60:92:fd:5b:ab:
2c:bc:6f:3d:15:fb:38:26:18:50:2c:83:cf:70:6c:
d7:36:8f:ee:ea:32:49:c2:ec:64:31:29:a9:ff:ff:
13:6d:dc:05:10:5b:cf:f0:41:2d:51:59:b8:6d:1d:
61:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:99:1E:F7:B6:B1:31:70:57:4D:65:A9:51:45:09:89:69:12:33:00
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/SZke97axMXBXTWWpUUUJiWkSMwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.181.0-79.133.183.255
185.240.103.0/24
Signature Algorithm: sha256WithRSAEncryption
60:ec:f6:2f:ac:1c:ef:e3:94:e8:47:6c:5d:30:e1:e8:18:41:
4f:f2:a1:6d:f3:70:21:e5:68:eb:d0:a7:6b:f7:6b:4c:7f:6b:
da:5e:a6:05:32:76:9f:cd:06:69:5f:6e:d3:17:3b:c3:94:b7:
57:40:01:18:c2:63:6e:49:67:5a:3f:79:8d:c0:19:3a:98:ea:
a8:99:c1:de:81:3d:72:15:24:eb:55:cf:0c:7d:3e:65:2a:61:
e6:c5:ea:01:ec:e7:94:de:22:8a:6b:9d:89:f8:22:b5:f6:0f:
d4:49:a7:be:fe:8a:78:d1:27:53:09:36:06:61:4c:a8:0e:dc:
e7:3f:24:1a:8f:ad:f9:0a:d8:87:a1:69:ef:b0:99:5f:cf:fc:
26:d8:78:09:72:15:9e:df:6c:84:dd:d0:d7:65:24:50:e4:ee:
43:8a:6b:08:5a:8c:f0:0e:a7:b8:06:7b:0b:d2:01:94:b1:98:
b8:01:0b:10:48:93:a0:67:06:42:b0:d4:6b:cc:db:8f:2f:38:
c7:24:7a:51:f3:1c:06:7c:78:dc:db:18:a2:39:f8:8d:91:05:
fb:54:34:02:ee:39:85:e9:c6:b8:a9:30:5b:c9:33:96:14:5b:
49:58:95:9d:be:18:60:a7:19:d5:a5:4f:6b:d8:bc:2a:c2:16:
7e:36:e6:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:59 2024 by rpki-client on console-fra.rpki-client.org