Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/WyHCEFTh7Z4_V1rh1r5JOL3eEi4.roa
File: WyHCEFTh7Z4_V1rh1r5JOL3eEi4.roa (raw, json)
Hash identifier: DmM+RSUjDOv2Z96XKBk5Ak7yAVk4IDLeCz0/UKlAwfI=
Subject key identifier: 5B:21:C2:10:54:E1:ED:9E:3F:57:5A:E1:D6:BE:49:38:BD:DE:12:2E
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018CC9BCBD37CC26254877922FE43276A87F
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/WyHCEFTh7Z4_V1rh1r5JOL3eEi4.roa
Signing time: Tue 02 Jan 2024 10:33:58 +0000
ROA not before: Tue 02 Jan 2024 10:33:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202233
IP address blocks: 213.4.126.0/24 maxlen: 24
195.77.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 May 2024 08:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:bd:37:cc:26:25:48:77:92:2f:e4:32:76:a8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 2 10:33:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b21c21054e1ed9e3f575ae1d6be4938bdde122e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6d:69:81:b2:5b:46:a8:12:b4:2e:11:53:f4:
ad:4f:13:35:f0:70:a1:89:f3:ff:95:e3:b9:15:93:
54:8d:8c:f1:26:c7:8a:5a:32:42:94:ee:70:4c:ca:
16:3f:68:18:85:02:34:ae:a0:ea:7f:a6:96:73:ae:
b2:f2:b4:99:28:05:6a:ca:6c:5e:a4:87:45:10:79:
ca:38:87:c5:81:21:30:6f:96:ab:91:6a:b0:40:78:
89:6e:8f:03:3c:f8:f7:9d:da:ec:5e:69:af:d7:89:
c5:10:8e:24:7c:df:82:77:18:c9:7e:6b:61:54:0a:
d4:42:c2:1d:a7:5d:28:b9:6c:1f:4f:6e:60:03:5c:
de:49:28:55:4f:22:f3:48:52:c0:34:dd:bd:cf:d1:
21:51:22:a9:64:71:fb:dd:40:8c:cf:f7:87:22:b5:
9b:99:55:9a:93:da:57:24:5e:19:16:f4:b7:c1:17:
13:2b:0d:08:2f:1a:c3:5d:7e:bd:4c:90:a0:b3:7e:
c8:64:bb:03:3b:3a:86:39:db:25:13:8c:0c:35:60:
7e:3c:fe:34:9a:a1:a0:93:76:5f:00:7d:af:30:ea:
29:6d:fc:38:36:e7:7d:d1:e2:35:08:9c:a9:53:cb:
6d:f4:c8:97:a5:92:66:ce:c7:5e:7e:62:04:3d:af:
45:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:21:C2:10:54:E1:ED:9E:3F:57:5A:E1:D6:BE:49:38:BD:DE:12:2E
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/WyHCEFTh7Z4_V1rh1r5JOL3eEi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.77.197.0/24
213.4.126.0/24
Signature Algorithm: sha256WithRSAEncryption
23:15:70:77:5b:cd:41:e3:00:8b:d3:99:0d:f5:9a:86:88:de:
13:c1:fa:ec:a9:25:c1:13:c6:cb:67:6d:e2:c3:02:33:9e:2b:
dc:8c:af:ab:97:ca:9a:32:a5:4a:fc:ad:73:2f:ae:f0:b6:22:
17:fb:a0:dd:83:98:12:4a:13:70:64:fc:af:59:6b:7d:4e:ac:
84:b3:01:9b:70:99:07:f3:1f:4a:bb:6d:6c:e0:6b:ff:95:6a:
11:ec:6c:66:2f:a1:70:0b:8f:f8:be:0e:06:3b:b0:6d:90:f8:
97:c8:b8:64:9c:1c:e0:68:1d:3e:db:9e:81:5d:e8:d6:c6:55:
aa:22:70:6c:07:62:df:37:a8:e7:e8:fe:97:56:5b:4b:fa:12:
5b:db:75:bb:8b:32:f1:32:04:be:6f:91:48:5c:0d:ac:c3:17:
2d:aa:a6:61:72:32:ad:7d:b3:fb:de:91:5a:6f:57:98:9f:1f:
5a:1d:65:1e:bf:39:3f:b4:e3:8d:90:de:e8:7e:80:6c:ed:2b:
3f:d2:a0:61:9d:70:ab:4c:db:9a:62:cf:45:a6:2b:73:ed:a7:
cf:e1:ec:67:83:eb:9a:68:5a:07:cb:c3:2c:0d:46:1c:a4:3e:
82:af:12:48:dc:02:4b:20:73:64:76:24:12:af:30:b4:2b:6a:
49:21:f8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 13:38:30 2024 by rpki-client on console-fra.rpki-client.org