Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/75NNbeeveeRZ9IWCnVR2Fj1H9Io.roa
File: 75NNbeeveeRZ9IWCnVR2Fj1H9Io.roa (raw, json)
Hash identifier: lVdWZWj4IWygXVDqt2mQEwxOR02U6QYh8H+vvvC3Y6s=
Subject key identifier: EF:93:4D:6D:E7:AF:79:E4:59:F4:85:82:9D:54:76:16:3D:47:F4:8A
Certificate issuer: /CN=fc8269f42e46441ab1ed994c89f747baa554e320
Certificate serial: 018570E74E3480299C238CF56EC16C5174D7
Authority key identifier: FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/75NNbeeveeRZ9IWCnVR2Fj1H9Io.roa
Signing time: Mon 02 Jan 2023 05:14:45 +0000
ROA not before: Mon 02 Jan 2023 05:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209571
IP address blocks: 141.98.224.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:4e:34:80:29:9c:23:8c:f5:6e:c1:6c:51:74:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc8269f42e46441ab1ed994c89f747baa554e320
Validity
Not Before: Jan 2 05:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef934d6de7af79e459f485829d5476163d47f48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d0:81:ff:64:91:e6:0f:08:a3:9a:38:44:47:
2e:b8:d0:d7:23:1b:12:2e:3d:a6:f6:bf:9a:67:93:
d5:81:1c:bf:b7:58:c6:f7:7a:58:fc:fb:4c:25:bd:
9f:c4:ea:26:3e:26:8c:9a:32:fd:5a:6d:f2:8c:61:
ed:a2:fc:09:93:97:0d:2c:ce:1b:34:a2:f0:25:55:
30:61:18:57:0d:3d:50:38:06:9d:1d:cf:2b:72:63:
a9:6a:84:73:c8:7f:97:ee:29:4e:ea:48:31:d1:f5:
b2:97:2e:9e:7d:ea:75:eb:58:84:a8:26:62:3d:64:
0e:ac:56:bf:15:7f:18:05:48:5a:1b:08:66:1c:9e:
4a:30:a9:5f:6d:3a:b1:d4:71:e3:c8:e0:1f:18:95:
05:c2:ce:e5:f9:81:1a:f3:81:bf:b1:a5:62:a3:92:
14:e3:b4:82:59:bf:e0:8d:eb:78:e2:66:05:fe:5d:
af:0a:4e:17:35:9a:b3:67:06:8e:96:c1:a4:28:5c:
11:c3:bd:cd:d2:88:35:ee:da:de:8c:8f:d0:68:89:
be:8e:30:f3:64:45:59:20:b6:d3:f6:af:d0:8d:3d:
10:9d:d9:db:3a:25:be:33:e5:d1:d0:8b:34:68:90:
81:89:e1:43:52:4e:8f:f4:61:53:61:74:16:7c:0e:
85:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:93:4D:6D:E7:AF:79:E4:59:F4:85:82:9D:54:76:16:3D:47:F4:8A
X509v3 Authority Key Identifier:
keyid:FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/75NNbeeveeRZ9IWCnVR2Fj1H9Io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.224.0/22
Signature Algorithm: sha256WithRSAEncryption
10:f2:e3:cb:f3:1b:3b:57:12:db:37:a9:20:c8:5f:8f:a3:09:
47:b2:f1:93:ce:b3:27:4e:34:f5:22:fc:f6:24:34:8b:10:ac:
47:5e:d9:53:03:66:a7:1c:cd:2a:99:8d:f0:59:6d:6b:54:13:
c1:d8:84:81:bc:e1:32:6b:be:98:70:51:55:5d:07:76:be:aa:
59:27:e9:3a:1e:1c:60:46:ba:27:57:63:cd:8c:ed:05:39:60:
1e:7a:6f:2d:e7:ba:cf:cd:3e:d9:77:31:2c:56:b2:e5:42:b9:
aa:f3:b5:47:58:3a:47:9e:5f:f3:bd:2a:8b:2e:1e:0b:18:ea:
24:14:89:68:b9:76:ef:ae:19:e3:9c:2d:57:4d:1b:f4:65:91:
40:47:96:33:37:0b:58:e5:33:62:ef:e6:6a:2a:6a:e9:67:bb:
9f:23:4b:14:1e:57:c1:89:28:f9:d1:10:78:49:0d:ee:3e:b5:
fc:83:9c:7c:e6:f5:57:18:f6:9a:8c:0a:1c:cb:cc:47:89:1e:
30:ec:bb:6c:e2:5c:59:53:b5:f4:8a:a3:73:af:17:21:14:29:
04:3b:51:41:fa:67:c3:68:4c:e8:07:53:c7:fb:94:4e:f9:2a:
8c:c0:14:97:83:f3:25:3e:20:8c:04:41:26:79:c3:86:63:79:
23:80:ca:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:10 2024 by rpki-client on console-fra.rpki-client.org