Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/reO1qUdbj5e4Pp5TjSrP7AI8fw0.roa
File: reO1qUdbj5e4Pp5TjSrP7AI8fw0.roa (raw, json)
Hash identifier: Lb4aYMgk57mY1QGUn0/s7immrDkvsvh3XSpUcHMW250=
Subject key identifier: AD:E3:B5:A9:47:5B:8F:97:B8:3E:9E:53:8D:2A:CF:EC:02:3C:7F:0D
Certificate issuer: /CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
Certificate serial: 018EECB0133647FF22B20691F782AC4211E7
Authority key identifier: 2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/reO1qUdbj5e4Pp5TjSrP7AI8fw0.roa
Signing time: Wed 17 Apr 2024 15:32:25 +0000
ROA not before: Wed 17 Apr 2024 15:32:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29545
IP address blocks: 86.111.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 05:53:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ec:b0:13:36:47:ff:22:b2:06:91:f7:82:ac:42:11:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
Validity
Not Before: Apr 17 15:32:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ade3b5a9475b8f97b83e9e538d2acfec023c7f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f2:cc:f4:e2:28:43:b2:53:ed:98:56:37:e4:
4a:e0:22:0c:3d:22:94:28:af:85:c4:38:ee:a7:7d:
87:1d:a2:20:e6:7d:e6:8a:61:de:70:5e:19:b0:03:
50:64:86:d3:80:ea:a2:20:44:8e:d9:ad:8f:b4:fb:
f3:3b:c9:88:e1:8d:1d:7b:17:e6:a9:39:66:36:b6:
71:f2:04:cb:d5:84:11:f7:ec:4d:dd:a0:05:f2:53:
71:89:08:df:51:4b:5b:63:b7:6a:19:7a:25:eb:8c:
4f:6f:f1:15:7b:be:0e:41:e4:01:fa:fa:54:1c:32:
a1:a5:aa:72:76:3e:84:6f:9e:24:06:e6:c2:d9:b5:
1a:40:7b:53:17:9f:9d:34:7b:16:38:67:23:19:71:
a4:22:14:49:41:16:64:58:31:4f:e2:47:0f:68:d0:
3f:e6:63:9c:70:88:27:d3:d2:f5:6a:ff:7e:e9:bf:
0b:1a:f0:c4:14:39:70:96:17:05:b7:d4:0e:20:3e:
ec:8d:30:d8:11:d5:eb:82:c7:ad:31:b8:e1:f9:d5:
46:81:c4:56:b9:c1:2f:01:7d:11:e7:b1:5f:f1:75:
66:95:36:50:1a:6a:7e:42:ab:18:44:0f:e9:62:ea:
f6:05:3f:f8:82:4a:78:87:72:41:f9:31:ef:a2:51:
f7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E3:B5:A9:47:5B:8F:97:B8:3E:9E:53:8D:2A:CF:EC:02:3C:7F:0D
X509v3 Authority Key Identifier:
keyid:2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/reO1qUdbj5e4Pp5TjSrP7AI8fw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.50.0/24
Signature Algorithm: sha256WithRSAEncryption
77:cb:0b:fc:e0:8e:4b:53:e3:86:9c:b7:94:6f:5f:83:73:25:
11:58:a8:c2:e5:72:38:a5:7a:c2:4a:d4:49:26:8e:be:d8:4b:
1f:44:e8:29:6c:fe:8e:59:f1:c0:8d:bc:e2:b5:15:4e:f0:96:
f9:d2:49:84:8a:70:06:a7:2a:1b:0d:b1:72:67:58:9a:b3:91:
7a:e5:43:60:d3:be:cb:89:b1:40:fd:3d:d6:64:9c:70:e3:eb:
e7:11:07:f6:6e:1f:9f:c9:0f:a3:cc:e2:ed:15:a7:9f:8c:75:
0c:62:64:c6:32:ef:c1:f8:4b:b6:e1:ea:69:dc:f2:b1:89:20:
eb:19:20:d0:96:f2:76:ad:3f:73:ef:9e:e4:ea:e5:c9:da:78:
23:e6:fe:b8:64:0e:db:f1:c9:38:ef:26:61:0f:35:69:e8:56:
db:4b:8c:42:8b:ed:ff:79:ba:78:b3:21:a3:40:40:0c:9c:70:
b3:f9:1c:35:8a:61:ff:c3:9c:68:9b:8b:2a:b9:be:04:2e:c0:
a6:41:84:da:17:bf:f0:f7:51:f7:93:55:14:36:88:2e:af:89:
fe:2f:21:78:81:5e:4b:ee:1a:2a:cc:59:c0:22:a2:22:0b:10:
b9:c0:fd:6f:df:f3:40:a2:51:ca:4f:dc:23:f0:2e:6d:a5:d4:
fa:09:45:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:42 2024 by rpki-client on console-fra.rpki-client.org