Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/S4BTVJd451VEK1QSesZT5qt6DWM.roa
File: S4BTVJd451VEK1QSesZT5qt6DWM.roa (raw, json)
Hash identifier: mHtsuR7b/ZCUBV6OFUnOfIxvuLl1QxF9h2ZRPgmpLyE=
Subject key identifier: 4B:80:53:54:97:78:E7:55:44:2B:54:12:7A:C6:53:E6:AB:7A:0D:63
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01856F5DD4F7959A15FDA288220D24017E79
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/S4BTVJd451VEK1QSesZT5qt6DWM.roa
Signing time: Sun 01 Jan 2023 22:04:58 +0000
ROA not before: Sun 01 Jan 2023 22:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211984
IP address blocks: 213.33.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:d4:f7:95:9a:15:fd:a2:88:22:0d:24:01:7e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 1 22:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b8053549778e755442b54127ac653e6ab7a0d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:46:75:ee:35:9f:2a:64:64:63:d8:3f:1e:4a:
94:9b:d5:48:83:2f:95:4f:55:1e:23:aa:7a:22:44:
cf:4c:ca:c2:4e:53:e4:79:76:ca:c8:85:10:39:20:
ce:45:50:6a:1f:d5:95:d5:0a:b6:f0:8a:b7:26:1c:
36:f6:36:d9:4d:1f:23:d0:a5:a3:a8:55:96:65:a2:
96:61:04:91:c2:67:dd:88:92:92:95:a5:2d:94:5e:
45:ed:ac:7f:b6:7a:4d:31:33:d9:bc:4a:49:96:1d:
b9:1a:26:2c:cc:05:e4:4f:7e:00:03:48:81:29:e5:
17:6b:b5:20:fd:ea:e0:ae:bf:78:65:3d:51:cd:4c:
87:4c:91:4c:a3:e4:d5:b3:cd:06:fc:70:0a:ce:37:
c5:4e:35:3f:78:e7:66:f4:60:55:39:7b:12:56:7c:
d6:a4:52:27:7a:d7:4d:5d:9f:51:29:34:94:66:6a:
58:74:f5:c2:b0:d7:3d:26:2a:8f:5d:2c:c0:e8:cb:
90:5d:31:26:36:e2:a6:87:21:ef:01:6b:35:a3:59:
86:82:00:9f:cb:a3:93:03:35:52:89:cf:af:07:1c:
35:53:50:85:cc:8c:15:a0:02:f0:9e:35:7b:16:15:
98:ef:36:90:d8:b0:3b:53:ba:5e:9a:6a:98:e0:12:
40:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:80:53:54:97:78:E7:55:44:2B:54:12:7A:C6:53:E6:AB:7A:0D:63
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/S4BTVJd451VEK1QSesZT5qt6DWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.33.79.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ba:66:26:6b:cd:8d:06:8a:54:64:3a:35:70:30:98:1e:23:
cb:a8:a9:64:ca:dd:ef:62:ea:57:7b:08:e2:a9:d1:bb:5c:16:
15:b6:38:35:e2:d2:53:33:76:50:a0:24:38:24:4d:6c:1e:a5:
b4:1f:32:60:94:b4:49:dd:30:ca:9b:64:e7:a1:2c:0b:c8:7f:
3a:0c:e3:12:89:33:60:72:a7:b3:54:43:9e:89:69:38:d7:09:
62:2a:03:77:e2:65:de:5c:80:fd:f4:aa:fe:f9:60:53:8b:36:
2f:97:49:e8:aa:47:ab:c9:90:1b:d8:15:e3:96:31:fa:2f:db:
c3:76:61:bd:75:51:ff:66:44:fa:bd:88:c6:ae:ce:72:39:33:
d1:d3:e6:b0:4b:89:16:16:32:f4:3b:dd:bd:97:d9:b3:07:ee:
00:f0:05:48:3e:b5:aa:2f:2a:2e:11:54:7b:3a:5a:d5:d6:68:
3e:9b:00:21:28:3c:2b:03:9c:13:8d:27:9b:8b:7a:8f:f2:cf:
14:4c:bd:95:71:01:28:06:e0:df:bd:bf:f8:af:77:36:ba:48:
0f:7a:6a:02:4d:a1:b5:eb:63:c1:b9:c6:91:a4:5c:4b:95:e7:
e9:08:da:7e:fe:83:28:2f:d8:c7:60:a6:aa:ea:00:9c:a3:aa:
86:aa:63:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:16 2024 by rpki-client on console-ams.rpki-client.org