Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/ERWntAf2S1MviLGU8M0aMfrHV88.roa
File: ERWntAf2S1MviLGU8M0aMfrHV88.roa (raw, json)
Hash identifier: TfMGeN4yorzRUsFgVIVbjk44+/2+cphjHvGns6sJxOk=
Subject key identifier: 11:15:A7:B4:07:F6:4B:53:2F:88:B1:94:F0:CD:1A:31:FA:C7:57:CF
Certificate issuer: /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Certificate serial: 019119F3F79D968F529D7F94DC00AF11607C
Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/ERWntAf2S1MviLGU8M0aMfrHV88.roa
Signing time: Sat 03 Aug 2024 20:35:04 +0000
ROA not before: Sat 03 Aug 2024 20:35:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 82.178.33.0/24 maxlen: 24
134.0.216.0/21 maxlen: 24
213.202.0.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 10:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:19:f3:f7:9d:96:8f:52:9d:7f:94:dc:00:af:11:60:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Validity
Not Before: Aug 3 20:35:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1115a7b407f64b532f88b194f0cd1a31fac757cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:cc:03:de:4b:cc:19:87:0f:ce:47:49:a7:
d5:96:38:cb:49:7e:f5:68:d2:04:e3:f2:45:d3:dd:
61:d6:1b:f4:8b:70:89:ae:1b:c1:0b:c1:07:48:e3:
d8:fb:c5:24:28:94:af:63:c8:5f:25:5c:ed:75:62:
ba:2e:c3:23:1a:79:87:55:00:5f:72:05:22:33:2a:
a8:35:00:e4:ff:36:7a:6a:85:bc:e7:51:34:2f:34:
e0:0d:a5:18:98:df:24:58:31:57:85:cc:4e:3e:e6:
a5:2c:17:2f:93:4e:68:6f:f7:96:55:e0:01:41:1c:
6b:14:0f:21:59:98:7b:d4:30:70:f5:f1:0a:b2:a5:
0c:47:21:3c:44:9b:5a:02:bd:84:a7:03:09:79:cb:
20:b6:e6:f8:65:84:25:6e:81:a4:7d:13:81:4a:fb:
3f:bc:70:00:fb:c8:5d:f9:c1:73:d4:77:a4:30:15:
8f:81:69:15:f9:bd:bc:84:f3:67:63:cc:32:7b:1e:
9d:8a:e9:a0:bb:ac:33:aa:a7:2a:25:6d:a6:6e:b8:
7a:14:33:bf:c1:e7:ea:aa:22:ca:aa:d0:3f:59:ec:
dd:f2:3f:c4:d0:ec:24:28:5f:e0:3c:b2:63:70:f9:
fd:9b:2e:80:d5:9b:44:71:a5:56:fc:46:bd:04:d9:
8a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:15:A7:B4:07:F6:4B:53:2F:88:B1:94:F0:CD:1A:31:FA:C7:57:CF
X509v3 Authority Key Identifier:
keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/ERWntAf2S1MviLGU8M0aMfrHV88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.178.33.0/24
134.0.216.0/21
213.202.0.0/21
Signature Algorithm: sha256WithRSAEncryption
58:9a:4a:ef:f0:22:93:64:3a:87:5e:21:b2:f5:d8:b7:16:e1:
10:af:6f:fd:e3:61:48:88:78:bb:1b:99:fb:b7:45:aa:fe:7a:
b1:4d:e3:79:d7:97:95:af:2e:b0:77:76:70:ce:b3:d5:e2:db:
58:0c:81:a0:d7:ec:0e:ea:4c:4c:80:7d:bb:2a:ea:78:f8:fb:
b6:80:97:f9:60:35:cf:ac:31:ca:e4:49:da:06:8f:d9:6c:3d:
09:92:68:e8:40:c1:19:55:9e:7c:9c:e8:7b:63:9e:6f:a7:ee:
a8:d6:c2:38:67:de:2c:7d:03:1b:eb:99:53:2a:15:13:7d:22:
cb:91:6f:a3:16:b7:c8:99:73:dd:16:a5:0b:4d:a6:4f:92:10:
e5:55:e3:04:ea:72:28:40:1f:f4:cc:cf:4f:ec:5d:e5:04:ba:
81:fb:21:c6:53:1b:a4:00:09:b1:de:a5:64:30:37:44:27:36:
22:6b:06:ab:f8:d4:cf:ce:c9:71:ff:53:a1:04:44:94:cc:83:
b0:0d:40:23:05:93:76:20:43:48:46:35:3e:ba:be:87:02:7b:
6b:21:03:99:0e:54:ad:0f:65:e9:ea:05:59:b6:c6:c4:56:30:
29:da:bd:2e:ab:a7:ec:de:f9:fa:af:8d:a9:3a:00:e8:6c:d5:
0d:4b:35:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 15:01:50 2024 by rpki-client on console-fra.rpki-client.org