Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/4TrX_smqBe9DUgMevKiMUIzg3r8.roa
File: 4TrX_smqBe9DUgMevKiMUIzg3r8.roa (raw, json)
Hash identifier: unPLYxLK/ZD7VRWxA3BJBGlnqiaJwgz1wupc6+zJhaM=
Subject key identifier: E1:3A:D7:FE:C9:AA:05:EF:43:52:03:1E:BC:A8:8C:50:8C:E0:DE:BF
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018A9814203150F0CA2EA5C9DECA9B9C7DED
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/4TrX_smqBe9DUgMevKiMUIzg3r8.roa
Signing time: Fri 15 Sep 2023 09:02:50 +0000
ROA not before: Fri 15 Sep 2023 09:02:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24921
IP address blocks: 81.198.189.0/24 maxlen: 24
194.8.22.0/24 maxlen: 24
213.175.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:98:14:20:31:50:f0:ca:2e:a5:c9:de:ca:9b:9c:7d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Sep 15 09:02:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e13ad7fec9aa05ef4352031ebca88c508ce0debf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7b:73:2d:99:78:e7:10:13:51:b9:6c:7e:33:
20:02:20:69:89:5a:3b:b6:42:a4:6a:d2:4a:bd:8a:
7a:71:20:bf:d0:35:ba:d5:57:69:9c:1c:54:bb:ee:
dc:fe:b0:7d:4b:e1:45:7d:14:1b:6d:68:9a:4a:31:
bc:b2:d5:81:26:1d:67:9c:0c:25:fc:5a:0f:db:1f:
60:47:64:19:81:4d:a5:22:e7:87:82:d7:6e:60:d3:
08:a8:de:1f:5c:39:24:6e:5a:7a:a8:84:d1:61:6f:
d1:ad:da:c3:f6:8a:f3:3d:3b:be:01:b2:2a:09:b0:
68:37:e5:92:f3:49:20:9f:2f:06:24:d0:ef:72:b6:
38:1d:29:ac:4f:fc:41:28:fd:68:52:7f:9c:f6:c9:
e3:1f:46:6e:f9:54:29:f0:f8:22:61:48:5b:39:4e:
60:4a:44:24:31:76:1d:8c:3c:86:af:99:ad:2d:da:
ed:3d:81:b7:3e:0a:16:47:5a:f4:b0:93:54:54:fb:
09:a0:bb:d5:e0:76:d6:c1:68:0e:30:10:22:97:d3:
ef:cc:1c:a7:8b:2d:1d:5f:73:72:37:37:3d:fd:ae:
78:8a:78:a7:2e:f9:d7:63:b8:9e:d7:f4:18:31:ae:
cc:5d:73:eb:aa:da:68:19:7f:62:4f:c3:84:0a:c1:
d4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3A:D7:FE:C9:AA:05:EF:43:52:03:1E:BC:A8:8C:50:8C:E0:DE:BF
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/4TrX_smqBe9DUgMevKiMUIzg3r8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.198.189.0/24
194.8.22.0/24
213.175.79.0/24
Signature Algorithm: sha256WithRSAEncryption
26:64:c9:9e:e4:69:5c:f0:52:f4:57:35:c2:fd:ee:81:5b:d7:
80:97:6b:a0:69:e1:c5:fe:b6:02:05:e8:14:c2:cf:6e:95:51:
62:ca:4d:bb:6e:3e:bc:10:30:83:55:48:64:97:84:45:f8:7a:
c1:73:6c:2a:1a:24:3f:c2:4c:f9:18:16:9a:7b:86:d2:28:fc:
a5:dc:50:47:62:37:11:54:ab:cc:91:ee:2a:61:76:b1:46:d4:
85:39:7f:d9:7e:c6:45:01:a9:be:0d:f4:a4:2f:3a:95:2f:9d:
4c:a1:c9:72:1d:eb:01:30:6b:13:4b:e1:eb:11:54:be:63:18:
10:61:d2:52:1e:9d:9c:7c:74:0c:77:dc:44:10:ab:af:13:00:
38:eb:c2:29:5a:53:1b:66:4b:a0:f5:4a:39:1b:54:a9:71:1f:
d4:5b:2a:0a:26:52:ca:0f:fd:37:e1:e3:66:cc:ef:4f:86:a2:
dd:ab:77:b0:fa:e9:5e:82:c2:0c:ec:fe:56:70:b5:a8:52:b5:
fd:f2:8b:f4:12:4e:62:2d:3e:9d:38:61:6a:05:30:d7:76:31:
96:2f:75:92:a5:c7:79:64:17:5e:ba:3c:88:f2:85:8f:88:9a:
13:ab:07:92:40:8e:62:a5:e9:ac:39:1b:96:8e:27:52:3e:10:
89:8d:11:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:12 2024 by rpki-client on console-ams.rpki-client.org