Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/3iv5Kc3exCyc7apH_ap4GbcNQJ0.roa
File: 3iv5Kc3exCyc7apH_ap4GbcNQJ0.roa (raw, json)
Hash identifier: 2O1xhfaUuSOWgtHFrMin6OBhl0iA6sOBkjXb8OqNWC4=
Subject key identifier: DE:2B:F9:29:CD:DE:C4:2C:9C:ED:AA:47:FD:AA:78:19:B7:0D:40:9D
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018CC26D4C8F089917BDFF4284FB5E26A8F5
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/3iv5Kc3exCyc7apH_ap4GbcNQJ0.roa
Signing time: Mon 01 Jan 2024 00:29:52 +0000
ROA not before: Mon 01 Jan 2024 00:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6453
IP address blocks: 213.91.168.0/24 maxlen: 24
212.5.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 May 2024 11:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:4c:8f:08:99:17:bd:ff:42:84:fb:5e:26:a8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 00:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de2bf929cddec42c9cedaa47fdaa7819b70d409d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f1:b3:44:15:cc:ed:5d:76:90:89:cc:6d:50:
ee:22:9b:bb:48:e2:5f:3e:5a:2a:27:c1:16:67:5e:
c7:7c:fd:9b:f8:7a:71:f0:b1:a4:ad:28:c1:cd:2f:
2b:6d:db:cf:60:01:d5:dc:6d:cc:d5:7e:87:c9:4e:
a3:dd:20:b8:4f:1b:ef:65:7a:25:46:92:93:3e:19:
74:c9:b0:d6:b2:be:f1:8a:12:4e:09:30:49:b3:1e:
09:cc:3a:92:45:c3:f3:59:b1:4e:6c:da:cf:a0:29:
26:18:54:1d:55:9e:6e:ec:bf:62:00:bb:9f:b9:d4:
bd:cd:31:3f:fc:89:0a:8f:a6:c4:f7:16:58:26:07:
2c:41:f4:88:c7:11:e5:58:a8:05:a4:27:ea:4a:3e:
4f:54:95:a1:15:f2:9d:3b:03:d8:b2:00:43:91:43:
89:20:72:49:f9:28:9e:86:93:03:05:9f:a4:29:ef:
de:e5:36:55:31:d3:ad:4a:ae:9e:ab:68:d1:ed:27:
8c:55:23:b3:07:6d:6e:d6:00:c5:00:73:2c:90:6a:
e6:d4:05:2b:67:b1:cb:67:c7:22:d8:93:5c:f9:4e:
bb:68:dc:63:e0:ea:b0:7d:e5:dd:96:c4:63:3e:8b:
ca:55:26:56:6b:ff:34:4a:2d:77:8c:35:3c:04:21:
c8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2B:F9:29:CD:DE:C4:2C:9C:ED:AA:47:FD:AA:78:19:B7:0D:40:9D
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/3iv5Kc3exCyc7apH_ap4GbcNQJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.5.156.0/24
213.91.168.0/24
Signature Algorithm: sha256WithRSAEncryption
56:32:03:58:83:28:36:c5:66:ce:8b:b4:04:9a:a0:bb:26:c9:
3c:65:92:27:51:e2:84:01:f4:09:97:cf:b6:cd:54:e9:8a:3a:
4b:2f:a8:88:64:2f:38:a7:26:52:8f:52:ae:1b:b9:31:15:1b:
b2:b8:7a:17:52:fb:86:95:eb:71:12:19:d1:40:1e:5b:eb:c8:
7c:19:2a:6d:c0:bb:77:cb:b5:81:08:ae:e0:8c:4f:be:46:9b:
81:f6:53:b4:be:f0:72:2f:fa:a3:39:1f:d3:b8:e3:29:b2:bf:
85:99:5a:c0:de:61:b0:93:80:0e:19:de:37:87:06:63:1e:11:
5a:59:8f:1e:b9:bd:60:aa:22:c4:11:69:da:17:f8:93:3a:c4:
37:0e:90:a2:1b:ca:7f:d2:1e:97:e8:81:be:91:ea:c6:7a:8e:
16:5c:4e:ee:07:1e:c2:16:d8:7b:af:5c:74:b2:33:cc:a2:57:
85:f9:2c:3e:e2:e1:7e:bf:6c:21:0e:20:d3:04:64:73:8f:f3:
b6:9d:fc:7e:4d:e1:a3:e7:bc:31:50:56:f8:88:02:a5:cc:e7:
c8:d8:9e:1c:b6:6e:70:e2:b9:64:c3:8e:65:26:22:12:85:5f:
4d:d2:57:4e:74:22:ab:d4:e3:e4:4d:e1:f5:02:75:cd:7f:7d:
f9:21:b6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 15:20:44 2024 by rpki-client on console-ams.rpki-client.org