Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/o4irXPvlcTnydb0ju6Zzlc3ZgzU.roa
File: o4irXPvlcTnydb0ju6Zzlc3ZgzU.roa (raw, json)
Hash identifier: lnerCsdXt6SVE+YF8suYYCiprmcrj4FZ+bZqw2KvuaY=
Subject key identifier: A3:88:AB:5C:FB:E5:71:39:F2:75:BD:23:BB:A6:73:95:CD:D9:83:35
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018CC26D5E60358C806A00D6847C7F9B6F22
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/o4irXPvlcTnydb0ju6Zzlc3ZgzU.roa
Signing time: Mon 01 Jan 2024 00:29:56 +0000
ROA not before: Mon 01 Jan 2024 00:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61066
IP address blocks: 213.91.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 07:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:5e:60:35:8c:80:6a:00:d6:84:7c:7f:9b:6f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 00:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a388ab5cfbe57139f275bd23bba67395cdd98335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2b:6a:b4:2b:68:f6:3a:4f:49:0c:35:07:98:
05:9b:ec:d1:2d:25:0c:29:f3:90:45:04:ae:d6:d1:
d8:a3:b0:9c:19:f3:a4:6f:ba:cd:a6:54:99:58:70:
fb:b3:8a:c6:ac:6e:75:53:9a:73:73:ea:5f:62:6f:
f0:eb:1c:15:8b:da:a4:2c:cd:e3:09:8c:a2:c0:7b:
e0:66:b4:f3:47:73:53:f8:51:5e:95:f1:0d:d1:3b:
a4:2a:39:a8:40:0a:74:2d:de:94:66:ac:9f:6f:41:
28:bb:2c:f9:76:05:87:7b:18:7c:14:0f:45:26:0c:
1b:fc:85:8e:c0:2a:c0:49:ca:92:9d:85:7f:29:a5:
68:10:1d:ac:ff:fe:f9:71:79:ef:48:69:2b:dd:15:
1c:53:c5:70:33:9b:ed:64:08:40:16:0b:a9:6b:6b:
07:d9:69:75:cc:23:35:2e:80:7b:33:71:6c:74:bb:
82:cb:ce:48:7e:1c:3f:93:03:8a:d5:03:8c:6a:4e:
6b:9e:af:0e:84:6a:1f:d8:43:5a:15:53:88:5d:2f:
37:ff:8a:88:a4:db:b7:f0:d3:8e:ab:67:f0:6f:ef:
fe:d7:bc:e5:8e:e4:2a:7b:f1:b6:9b:8d:10:17:c0:
8b:4c:8a:f5:23:de:4d:89:62:73:62:7b:d5:e4:fd:
1d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:88:AB:5C:FB:E5:71:39:F2:75:BD:23:BB:A6:73:95:CD:D9:83:35
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/o4irXPvlcTnydb0ju6Zzlc3ZgzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.91.156.0/24
Signature Algorithm: sha256WithRSAEncryption
59:82:2a:78:52:48:0b:a2:72:ef:85:67:d4:b5:6c:a9:6b:88:
38:3a:33:e1:76:b4:d8:d0:3f:13:1b:f4:11:dd:bf:16:e1:eb:
30:71:fd:40:6b:f9:c8:41:28:1f:5b:5d:e0:24:cf:f7:a5:37:
2c:df:d9:9a:63:f7:b2:29:86:c4:6c:9a:ea:aa:7b:c3:c9:69:
6b:8f:43:0d:9e:f3:00:b2:e0:68:f5:e1:22:c0:03:b7:88:e1:
db:d6:80:4f:4d:c0:bf:5a:65:87:dc:63:66:dc:58:e7:e5:ac:
0a:fa:6a:df:58:31:1b:c8:34:1d:cc:36:d6:d2:a0:44:65:f8:
75:48:18:55:7e:c8:07:08:af:e3:dd:05:1c:aa:df:95:be:63:
2d:8b:61:a2:37:c2:f8:e0:19:50:d1:a6:a4:41:cb:15:60:3c:
a0:11:19:8a:97:0d:f2:86:52:dd:ff:eb:93:e4:9f:35:96:c0:
15:64:e0:0b:65:3f:ba:b5:dd:19:26:75:f9:ae:eb:19:2c:b5:
a5:b5:66:0b:c1:f8:24:79:75:30:16:57:07:fd:5c:5d:ac:ee:
b2:01:e4:b1:0b:70:07:10:2d:ed:bf:2b:91:53:79:b2:b7:d9:
c5:5f:a6:4b:49:90:0b:ab:57:8c:2b:62:20:5d:85:24:be:f5:
ec:d2:2a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:06 2025 by rpki-client