Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/4aBzyW4J0EU4c_Rw_01QFG1q6zA.roa
File: 4aBzyW4J0EU4c_Rw_01QFG1q6zA.roa (raw, json)
Hash identifier: j7eabAloPuoyp7H2emHiZH8pHmO4D6NSGssosrGzFZQ=
Subject key identifier: E1:A0:73:C9:6E:09:D0:45:38:73:F4:70:FF:4D:50:14:6D:6A:EB:30
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 018CC9BB2B55D2361B71E49556C282FA5D69
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/4aBzyW4J0EU4c_Rw_01QFG1q6zA.roa
Signing time: Tue 02 Jan 2024 10:32:15 +0000
ROA not before: Tue 02 Jan 2024 10:32:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39700
IP address blocks: 81.30.38.0/24 maxlen: 24
78.108.128.0/20 maxlen: 24
176.74.224.0/24 maxlen: 24
2001:4cb8::/29 maxlen: 48
2001:4cb9::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 17 Apr 2024 07:36:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:2b:55:d2:36:1b:71:e4:95:56:c2:82:fa:5d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jan 2 10:32:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1a073c96e09d0453873f470ff4d50146d6aeb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:4c:55:ce:3b:6f:3d:3b:ce:86:0b:22:6b:
1c:6a:c1:d0:d6:d8:59:d0:48:a7:5e:19:5f:e3:e3:
10:08:85:a5:96:ee:9a:f8:5b:8d:64:87:56:a4:c5:
29:d4:18:6e:df:90:07:b6:4f:00:9a:ba:42:5f:fe:
11:3b:57:0e:2f:c9:d4:06:04:d7:fe:12:df:5f:35:
a8:cf:60:40:a7:36:73:e3:51:22:8e:06:1e:19:4f:
fb:51:33:b0:1f:4c:c5:d4:b3:23:9c:b2:26:6b:62:
7c:98:3e:f1:1f:34:5e:18:c0:98:76:aa:51:65:3d:
9b:0e:67:48:35:22:e4:a2:39:ea:3e:75:5a:e9:8c:
dc:81:3a:d7:fa:ee:67:e5:47:ab:0b:88:e5:ff:c1:
65:27:bd:66:be:b4:0b:db:6a:97:05:29:70:3b:0b:
57:75:18:f8:1c:bd:72:bb:a7:21:26:50:7c:c7:9e:
ae:96:a3:41:aa:71:91:60:26:54:43:8c:d3:ef:a6:
bd:72:f5:4f:08:b1:03:0f:ab:bb:d3:58:ef:f3:a4:
b4:59:99:c9:44:c7:1f:09:3a:37:9c:2b:f6:c8:e6:
9b:3d:16:af:3d:55:1b:a4:35:68:5c:9c:35:84:eb:
19:b4:14:50:cb:6a:01:bc:d9:de:35:e9:93:7c:aa:
fb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A0:73:C9:6E:09:D0:45:38:73:F4:70:FF:4D:50:14:6D:6A:EB:30
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/4aBzyW4J0EU4c_Rw_01QFG1q6zA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.128.0/20
81.30.38.0/24
176.74.224.0/24
IPv6:
2001:4cb8::/29
Signature Algorithm: sha256WithRSAEncryption
99:2b:43:15:f7:33:6a:f5:4c:75:41:6b:78:57:7c:fc:0f:0e:
d7:22:9c:99:b0:b5:ee:7b:5f:e3:4b:c9:c9:df:1d:06:4a:4c:
9a:32:43:de:94:a8:e3:63:c1:e8:26:d9:cc:f3:e0:2c:43:b6:
0d:de:2f:d1:45:eb:d0:c8:ec:3c:74:b4:71:f9:4b:37:e8:31:
59:0b:ef:1a:3f:06:fe:4b:4d:a7:2b:e1:80:5b:d4:60:52:95:
75:cc:04:dd:7a:d2:12:5b:82:66:0b:5e:9c:a5:2d:54:08:af:
19:29:61:85:cc:58:f2:eb:73:49:00:bb:19:ba:4f:f1:5f:c3:
ec:85:89:8d:f8:c5:91:0a:f5:22:fe:9f:13:be:b3:e9:59:f2:
c7:ec:04:36:86:fc:0d:76:e2:b2:b0:9e:c7:37:df:b0:03:53:
a1:30:2c:b8:d5:fc:05:1e:7b:96:2d:a4:87:e2:16:7f:19:b1:
f7:f7:66:a2:c3:53:c9:c8:16:bf:29:4a:2d:a6:fe:6d:8b:df:
d2:cc:f5:16:ff:94:72:6d:fd:9f:f8:32:41:11:59:2a:de:15:
3b:2f:c9:39:4b:40:1a:7d:bf:c1:7b:65:34:2c:2d:cb:bf:1f:
73:00:d2:d1:aa:c9:b0:f4:d9:3b:3f:82:36:81:a3:b1:11:2d:
7c:08:64:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:01 2024 by rpki-client on console-fra.rpki-client.org