Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/copLe1WZWV8NeaR4plJsHbzlCCQ.roa
File: copLe1WZWV8NeaR4plJsHbzlCCQ.roa (raw, json)
Hash identifier: W7mFjUXq6B3UXhzMG9Ey+uuGUGsFsBmmA30LaHteyl8=
Subject key identifier: 72:8A:4B:7B:55:99:59:5F:0D:79:A4:78:A6:52:6C:1D:BC:E5:08:24
Certificate issuer: /CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4
Certificate serial: 01856D4AB52B26B97CB1E9C573FAE3D2FCFE
Authority key identifier: 4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/copLe1WZWV8NeaR4plJsHbzlCCQ.roa
Signing time: Sun 01 Jan 2023 12:24:50 +0000
ROA not before: Sun 01 Jan 2023 12:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4755
IP address blocks: 185.109.120.0/22 maxlen: 24
193.188.64.0/19 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:b5:2b:26:b9:7c:b1:e9:c5:73:fa:e3:d2:fc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4
Validity
Not Before: Jan 1 12:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=728a4b7b5599595f0d79a478a6526c1dbce50824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d0:60:47:94:64:1f:79:80:d2:68:1c:fa:b1:
74:ff:4c:83:2d:12:70:66:d9:84:2f:f4:ca:29:02:
26:eb:61:32:d9:c0:08:8f:c0:08:d8:1d:a0:2b:65:
32:96:ba:0e:e6:a5:2e:21:f4:e9:a7:b5:8a:a3:5a:
77:49:16:0b:f1:61:7d:15:e6:ef:6c:0a:a1:f1:b0:
4d:28:43:ef:6c:c3:a2:b9:e3:99:9e:50:3b:20:06:
e3:31:87:71:a2:6c:31:bd:97:41:d5:37:71:bd:79:
95:f6:0d:8e:05:84:ac:51:38:db:dc:3e:7e:91:e1:
de:4d:8e:1b:25:82:43:51:7e:d8:12:82:5c:b3:dd:
6d:a6:45:be:f2:27:68:7f:2a:23:46:4b:55:19:fc:
de:db:c1:93:6a:10:27:3d:e4:e0:25:d0:9e:11:10:
b5:db:d2:91:62:ab:eb:37:fb:66:1b:00:2e:69:06:
78:75:fd:37:49:e5:2f:b0:37:31:3d:f4:c3:1f:31:
99:4d:0d:78:23:a0:bb:6d:54:a0:01:3f:7b:90:fd:
a3:67:76:09:5b:b3:89:06:27:07:32:59:a4:b9:24:
bd:c7:c6:39:57:7f:58:88:a6:fd:c3:6e:64:56:23:
7a:1f:d9:b5:d1:08:2d:8d:68:42:d0:ee:ef:fd:92:
9c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8A:4B:7B:55:99:59:5F:0D:79:A4:78:A6:52:6C:1D:BC:E5:08:24
X509v3 Authority Key Identifier:
keyid:4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/copLe1WZWV8NeaR4plJsHbzlCCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.120.0/22
193.188.64.0/19
Signature Algorithm: sha256WithRSAEncryption
17:c8:7c:24:56:d1:65:e8:b3:6c:68:67:6c:5d:f4:ee:56:6c:
b4:46:3e:1a:b2:0a:ef:8a:da:0a:22:ae:4a:ec:e2:61:d5:44:
73:e0:f9:ca:41:83:51:e4:e4:d7:0f:bc:6c:0d:10:2c:7f:40:
36:92:65:46:93:6d:8c:95:b8:f1:29:88:46:c7:66:3d:ae:0a:
46:e7:e4:81:71:41:f3:3a:0f:a2:af:f5:1f:de:be:eb:34:92:
8e:af:55:47:fb:75:82:87:26:e4:06:61:26:d3:00:8e:48:31:
b7:1a:fb:a2:d6:5a:e7:ab:3a:be:6f:6e:31:d4:4c:ff:31:e5:
b3:3b:3e:02:94:49:2a:f9:82:b0:e2:b7:6d:70:1a:34:73:fa:
f5:fa:9a:1e:c1:55:15:c9:19:1c:23:99:59:31:08:93:e5:c0:
c0:e7:f7:3f:90:87:4b:bf:be:a6:3b:5e:a6:34:7f:83:07:5f:
43:28:8a:26:03:8e:20:5f:22:2c:c9:42:68:f3:9e:96:17:ad:
b5:92:26:25:5c:be:05:97:18:2f:d0:c8:09:5a:f6:c7:72:1a:
f5:47:2a:da:a5:a2:70:49:19:a5:76:5d:a3:79:18:24:7b:02:
27:41:49:f9:fe:d3:84:a4:c7:b0:34:09:4b:66:c7:e3:92:3d:
61:62:1e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:11 2024 by rpki-client on console-fra.rpki-client.org