Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/4br_sY9QMPN_syLJ646qusLHvTM.roa
File: 4br_sY9QMPN_syLJ646qusLHvTM.roa (raw, json)
Hash identifier: j67ptzvGhSeUb/MOk3V8zCx8OUJjyMi/mHjy1igjPI0=
Subject key identifier: E1:BA:FF:B1:8F:50:30:F3:7F:B3:22:C9:EB:8E:AA:BA:C2:C7:BD:33
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0185708CEC4D704FFC164B70804137C39BCF
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/4br_sY9QMPN_syLJ646qusLHvTM.roa
Signing time: Mon 02 Jan 2023 03:36:01 +0000
ROA not before: Mon 02 Jan 2023 03:36:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211585
IP address blocks: 94.241.160.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:ec:4d:70:4f:fc:16:4b:70:80:41:37:c3:9b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 03:36:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1baffb18f5030f37fb322c9eb8eaabac2c7bd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:33:f5:8f:b6:a4:2a:a7:cf:3f:ba:71:cc:33:
b0:a1:e0:6f:e7:ff:05:b1:9a:0e:80:23:2d:4d:dc:
63:2d:c3:14:b3:70:8f:de:ae:86:55:e3:3e:74:69:
49:f8:d6:53:ef:78:8e:60:7a:c1:3f:b4:1c:67:9e:
50:61:2d:6c:34:83:b1:83:b4:78:00:be:a9:d8:0e:
57:51:17:61:9f:6a:af:80:62:3a:1c:e6:5f:94:67:
f2:c3:a9:c9:49:34:6a:89:45:d9:13:06:ed:f6:05:
74:ca:1d:c7:42:69:b5:8e:85:00:f6:2c:bf:43:59:
65:04:9a:ab:42:48:e3:2e:ef:c8:d9:1a:97:6e:d7:
76:4f:d7:dd:6b:ee:f8:4e:7e:8d:75:ff:41:1a:67:
54:92:fa:06:1a:44:f1:ae:8d:e3:7f:d7:c7:b5:92:
42:f5:8e:70:a0:45:30:d7:88:a9:4d:82:60:f4:e9:
85:69:65:f2:d2:25:a0:cd:63:80:1a:92:ee:65:15:
df:4b:3a:71:7f:50:ca:3e:4b:50:31:44:2d:93:25:
34:e6:0c:c4:52:43:e4:68:71:96:95:17:b3:60:73:
e2:6b:38:d7:f5:41:15:4d:b5:f5:db:59:be:d8:93:
ec:13:16:3f:a9:5c:24:7e:2c:c1:fe:a2:c4:69:54:
91:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BA:FF:B1:8F:50:30:F3:7F:B3:22:C9:EB:8E:AA:BA:C2:C7:BD:33
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/4br_sY9QMPN_syLJ646qusLHvTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.160.0/22
Signature Algorithm: sha256WithRSAEncryption
53:89:e8:e8:6c:69:7a:27:5e:fa:99:05:be:9e:01:11:06:dc:
1d:74:aa:ad:25:8c:48:9e:7e:69:6b:bf:5a:d0:de:db:74:65:
20:ba:35:88:34:26:3c:50:ff:6a:b9:48:2c:f0:38:9c:37:e7:
7a:8c:f1:01:ae:56:cd:0f:91:2b:cd:0a:c0:9b:86:0c:a8:81:
d3:72:ba:c3:e6:24:c5:55:2b:db:00:ce:78:df:64:78:d2:d3:
79:7e:23:8b:fb:85:8f:46:63:f9:7e:7b:ba:70:0a:0a:52:fe:
23:36:3d:ae:7f:cb:98:01:b0:71:6f:a8:8a:df:5e:d2:47:99:
76:ad:92:aa:ed:d9:94:25:57:ca:58:a9:07:30:28:bb:d1:7e:
8f:25:25:a1:27:b6:56:a9:0e:9b:30:2d:8c:3e:ef:b8:1c:d7:
d7:a8:c1:15:54:b2:38:d0:43:f9:42:17:a9:18:a6:1c:a8:83:
46:c7:29:06:e2:e1:32:c0:a7:d5:df:d8:1f:a9:6d:21:82:9e:
3e:9b:6e:c9:be:63:a6:5c:df:68:ee:4d:03:3f:ea:93:d3:55:
10:8b:5f:29:aa:c7:d8:82:59:7c:25:53:f9:df:f1:d5:5d:b2:
c8:4c:9a:95:30:3c:72:ef:c2:4d:76:99:0c:10:8b:02:d1:2a:
fe:19:e0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org