Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/u4AMCYeBnkfW5b43fpkg_13ZXK4.roa
File: u4AMCYeBnkfW5b43fpkg_13ZXK4.roa (raw, json)
Hash identifier: jZBZ3fDMFtprRd8fsXseVB+JQH/wHPfPn4rdIp9kqaY=
Subject key identifier: BB:80:0C:09:87:81:9E:47:D6:E5:BE:37:7E:99:20:FF:5D:D9:5C:AE
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0191BC4E9567A152F165B79CA49E7B9D9BED
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/u4AMCYeBnkfW5b43fpkg_13ZXK4.roa
Signing time: Wed 04 Sep 2024 09:12:32 +0000
ROA not before: Wed 04 Sep 2024 09:12:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30344
IP address blocks: 82.115.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Sep 2024 14:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bc:4e:95:67:a1:52:f1:65:b7:9c:a4:9e:7b:9d:9b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Sep 4 09:12:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb800c0987819e47d6e5be377e9920ff5dd95cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:30:13:ee:47:37:25:52:70:31:22:e2:62:
7f:f5:94:89:fa:d2:44:1a:43:42:5d:a5:67:0c:5d:
6e:69:a3:41:fe:ea:3d:50:30:90:48:c2:46:a8:af:
68:fe:e7:7f:57:8a:18:11:2b:ab:dc:d1:2f:25:fb:
af:51:ee:f0:6c:b5:67:36:9d:63:9c:48:8d:b3:f3:
16:9e:fc:60:72:b9:14:12:c3:88:41:bc:47:5d:d1:
2b:0e:f8:cd:01:7e:fc:3d:e6:6d:81:f3:95:92:93:
c1:ee:a2:f8:03:b8:3d:06:79:ff:1f:cf:e1:72:ed:
6c:89:9d:ae:fa:64:52:f4:4b:e1:e9:b8:08:ae:67:
d3:4b:1c:bf:3b:19:68:26:a0:fe:9d:f3:32:4e:6f:
4a:e2:50:fd:4a:63:5b:64:23:8a:ed:d5:cf:f7:31:
27:00:75:81:39:e0:e1:e6:81:c3:69:2a:dd:e7:3b:
e7:6c:ca:21:1a:57:86:4d:77:02:79:a3:8f:c6:f4:
56:c0:af:4e:da:8d:95:50:9e:b5:a6:68:f2:fe:cf:
51:31:a7:62:b3:44:8e:0e:c4:0a:7f:58:b1:1e:82:
49:16:32:15:98:81:59:e0:cf:7a:22:d1:f5:71:c8:
5d:b2:c4:f4:6e:ea:98:e0:54:28:bc:a8:83:24:dd:
f3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:80:0C:09:87:81:9E:47:D6:E5:BE:37:7E:99:20:FF:5D:D9:5C:AE
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/u4AMCYeBnkfW5b43fpkg_13ZXK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.223.0/24
Signature Algorithm: sha256WithRSAEncryption
23:9e:ab:0b:92:77:df:ce:f2:6b:fc:38:66:af:fc:31:97:c3:
6b:ba:85:16:0b:5a:8d:68:6e:d6:24:38:81:e8:44:ea:9f:52:
b0:1e:c8:12:dd:29:08:28:72:d8:b3:ae:2e:1b:f4:38:b9:4a:
a3:ff:15:0e:6e:3c:ef:b9:c9:72:bb:9d:1d:e2:9e:ef:6a:18:
9b:12:dd:95:6b:60:ed:2f:3c:f2:8e:5c:a4:73:8b:65:61:46:
c7:40:b5:97:19:0a:5f:fc:24:bb:8a:33:3b:86:e7:cc:d1:ec:
36:8d:13:a6:d4:d6:84:49:d8:2e:f2:93:87:c3:bc:0b:6d:96:
f7:91:2e:d7:a7:de:87:be:b3:b1:9f:a8:66:10:bf:ff:be:62:
d8:ff:fd:57:10:4b:11:3b:b9:77:61:cc:7c:70:26:15:3a:ba:
35:14:34:b3:05:ee:26:8e:53:f2:00:65:a7:c1:26:81:f3:4e:
61:84:ea:0c:71:29:48:b8:2c:83:24:b7:d9:c3:2f:ca:e2:7e:
d7:cf:86:bd:9c:d5:7e:73:f9:20:7c:79:46:e0:97:09:ed:95:
4b:bd:3a:71:86:c9:8f:85:5d:b1:9b:76:66:06:14:7b:c0:a4:
c0:9c:3e:61:df:a8:b0:34:55:fa:d7:75:ac:ec:76:4c:ec:61:
58:7c:76:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 17:30:57 2024 by rpki-client on console-fra.rpki-client.org