Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/4-FrpfozPIVDih2KN6JKAa4ZWaE.roa
File: 4-FrpfozPIVDih2KN6JKAa4ZWaE.roa (raw, json)
Hash identifier: sb3AhSw4mXWs245lbpzWAg46prXFBAVphL0Q//VGKUo=
Subject key identifier: E3:E1:6B:A5:FA:33:3C:85:43:8A:1D:8A:37:A2:4A:01:AE:19:59:A1
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 018CC424BCF322319CBE52C6BED5689E3FE8
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/4-FrpfozPIVDih2KN6JKAa4ZWaE.roa
Signing time: Mon 01 Jan 2024 08:29:51 +0000
ROA not before: Mon 01 Jan 2024 08:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208555
IP address blocks: 5.56.132.0/24 maxlen: 24
79.143.84.0/24 maxlen: 24
87.236.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:bc:f3:22:31:9c:be:52:c6:be:d5:68:9e:3f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jan 1 08:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3e16ba5fa333c85438a1d8a37a24a01ae1959a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6f:d1:d9:99:a9:1d:a5:01:e4:19:58:d5:79:
cf:5e:af:7f:34:02:4f:fe:ea:c0:f8:3d:d1:b7:f3:
1f:32:e6:18:6b:31:bf:2d:f2:20:dc:59:97:33:3b:
94:77:a1:a2:6c:9c:e2:b8:8f:ad:f7:24:07:49:ca:
09:0a:7b:dc:89:96:a0:34:59:e8:5b:a9:ed:c7:c3:
ba:00:68:c9:02:5d:32:70:6f:43:98:18:99:68:0c:
5d:fa:85:6e:6e:7a:65:9b:e8:38:fa:d1:93:e8:6e:
42:67:29:1b:b4:6d:5d:5a:72:1f:ad:a6:d7:94:35:
f6:75:d9:a9:d0:78:7b:a4:ff:cc:ef:43:f1:60:e4:
e7:31:07:23:01:dd:b2:dc:6f:65:dc:87:74:f5:95:
ba:d8:5b:9e:55:a4:5d:08:56:be:c9:29:bc:df:2f:
f0:39:9c:6a:71:61:e3:69:9b:b1:8b:a4:b2:30:fd:
fc:b7:01:c3:3c:a0:a9:9d:9d:1d:9c:e3:93:5c:54:
68:c6:3e:f3:7a:03:e8:99:75:38:fd:d6:1a:ec:13:
06:da:31:e4:ed:f8:0c:9f:52:cf:5d:8f:55:7e:32:
c6:ed:5d:ad:6a:71:d3:fc:4e:a1:99:cc:d2:d5:97:
c0:9a:a5:8c:37:66:5f:41:e1:82:2c:3f:af:77:38:
c2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E1:6B:A5:FA:33:3C:85:43:8A:1D:8A:37:A2:4A:01:AE:19:59:A1
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/4-FrpfozPIVDih2KN6JKAa4ZWaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.132.0/24
79.143.84.0/24
87.236.209.0/24
Signature Algorithm: sha256WithRSAEncryption
04:87:15:d0:00:76:0a:02:a0:61:4e:e7:ee:56:c3:55:4d:84:
b4:31:b7:91:26:18:51:73:11:4e:fa:98:29:4a:ae:7a:cd:29:
88:c3:a9:32:7e:3a:63:e8:4c:46:11:e0:fb:30:fe:77:a3:bd:
39:87:2f:05:ff:ab:42:48:d1:2c:8d:3d:7d:67:2b:b5:49:9f:
9f:55:37:75:f3:aa:84:5a:de:d9:94:f1:9d:a6:91:89:80:25:
ae:75:8d:f1:0f:40:f2:e2:dd:52:e1:dc:1d:ef:31:af:30:11:
40:ff:e5:f8:8b:f1:b2:35:d8:54:51:6a:e8:19:68:1e:6c:e3:
c2:49:a9:5b:be:ec:49:7f:39:c0:df:96:d7:fb:2a:24:e0:0a:
89:22:cd:12:8e:e6:50:1c:0f:24:d1:6b:6e:36:37:9a:fc:d1:
7c:ef:b4:b8:97:7d:cc:eb:b2:63:f2:0c:f4:99:bc:eb:53:08:
4e:a0:db:2c:5a:3f:14:40:d1:03:4b:ba:ef:b5:a5:ef:6e:5c:
db:2b:4c:f2:df:a6:a1:3d:ab:2c:c4:3b:40:00:45:1b:6e:87:
2d:dd:c3:e5:2e:2e:09:72:af:64:27:eb:e0:0b:ff:a1:55:a1:
01:b7:42:d0:2d:0d:08:b7:28:03:59:25:d8:c6:c4:7f:80:1d:
dc:24:30:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:03:45 2025 by rpki-client