Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/4xnsVSOvM9ERWJpqB4vDqBKElUA.roa
File: 4xnsVSOvM9ERWJpqB4vDqBKElUA.roa (raw, json)
Hash identifier: sQGrC1SNVN2KeU9n+qeAmV+tcSD3n4I221P/r6EREps=
Subject key identifier: E3:19:EC:55:23:AF:33:D1:11:58:9A:6A:07:8B:C3:A8:12:84:95:40
Certificate issuer: /CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Certificate serial: 01856C013CB7C55DB3005451732A58C654CB
Authority key identifier: 11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/4xnsVSOvM9ERWJpqB4vDqBKElUA.roa
Signing time: Sun 01 Jan 2023 06:24:58 +0000
ROA not before: Sun 01 Jan 2023 06:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203740
IP address blocks: 185.125.40.0/22 maxlen: 24
2a06:b7c0::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:3c:b7:c5:5d:b3:00:54:51:73:2a:58:c6:54:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Validity
Not Before: Jan 1 06:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e319ec5523af33d111589a6a078bc3a812849540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:62:cb:2f:d3:c8:7b:e4:78:48:ea:16:ee:88:
7b:f2:fd:b7:9e:78:48:fa:dd:16:de:76:65:b6:0a:
2b:ce:6c:1e:c6:64:e9:20:26:72:b7:1c:a8:ac:0f:
59:18:12:c1:7e:b1:ad:51:da:5c:d2:64:31:a5:d5:
e7:55:29:cc:73:35:b6:25:3e:65:5a:c1:a5:c0:f3:
01:dc:17:91:2f:c3:c0:17:5d:11:15:89:ab:4e:00:
dd:8a:1d:e7:3a:e0:4d:a1:23:24:e0:24:e7:cc:12:
9e:6e:7c:a9:e5:0a:b2:7b:ad:8c:2e:b3:c9:1a:b3:
29:a1:0f:25:a0:a7:04:e1:1f:16:98:5f:68:70:45:
a5:fb:e0:71:a3:71:99:ca:d6:e2:8a:cf:d9:9c:9f:
1d:7d:9a:36:cb:52:f8:a6:6d:74:3b:33:64:4e:e9:
a3:42:4d:7c:d5:ba:af:6a:fc:7d:54:25:51:fb:61:
80:9a:12:16:59:d0:8c:61:e0:f8:f5:2b:fc:51:8c:
0f:29:9b:65:39:20:2d:3f:bd:8f:fc:95:73:61:66:
e0:82:de:00:bc:a2:b9:6c:3a:f3:51:e4:d6:4b:87:
31:67:6a:46:91:e6:5f:55:06:c1:8c:1d:0a:d4:14:
ce:93:9e:86:04:74:77:da:1e:2a:87:46:36:80:02:
1e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:19:EC:55:23:AF:33:D1:11:58:9A:6A:07:8B:C3:A8:12:84:95:40
X509v3 Authority Key Identifier:
keyid:11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/4xnsVSOvM9ERWJpqB4vDqBKElUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.40.0/22
IPv6:
2a06:b7c0::/29
Signature Algorithm: sha256WithRSAEncryption
16:a6:4e:13:d3:b5:59:86:3c:80:20:a6:88:f0:ce:02:4e:66:
84:87:81:2a:16:f7:c1:75:9a:da:34:e3:5c:dc:ed:ba:24:49:
89:a7:de:71:47:0f:32:36:f5:a8:08:92:dc:bd:41:b1:97:71:
8a:43:1d:8a:8b:19:b8:3a:d1:8e:0d:68:f5:16:76:9f:a3:d0:
1c:0b:a5:f5:70:70:f1:52:3f:0d:b5:2d:29:3d:21:ac:80:3e:
9b:34:46:71:1d:18:65:5e:40:ec:45:b9:27:ab:53:2e:39:b5:
80:7d:c3:29:14:a3:df:a7:9c:63:c5:1e:43:54:f0:65:3c:13:
79:02:e9:2c:a0:f7:57:0e:9e:a6:0c:54:b9:16:e2:61:d1:9c:
72:85:3a:41:71:37:40:af:37:51:5c:77:d8:1a:2b:bd:76:a5:
af:bf:6c:6c:f1:2e:40:bd:9f:33:e6:1f:ac:11:f4:d9:61:54:
7d:e9:c5:09:70:f1:d9:08:01:fb:eb:12:31:9a:84:24:84:b5:
92:6f:b8:6b:59:b2:26:9b:ef:28:34:a4:0a:ee:2e:b1:6a:72:
da:f1:4b:f2:d3:5a:78:d3:90:a5:c3:aa:1b:e4:3a:4f:9b:f4:
f4:b0:e7:26:49:a2:b5:0d:01:0c:4d:12:af:03:c6:49:ad:36:
67:9c:34:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:13 2024 by rpki-client on console-fra.rpki-client.org