Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/1eaPla8kUVQKAr-p5pc79X7IBAY.roa
File: 1eaPla8kUVQKAr-p5pc79X7IBAY.roa (raw, json)
Hash identifier: ZPVwYbFdgtYZ/nhtgPCIh1w1p0cO49WFb982MFR4GVg=
Subject key identifier: D5:E6:8F:95:AF:24:51:54:0A:02:BF:A9:E6:97:3B:F5:7E:C8:04:06
Certificate issuer: /CN=501459c027a86e1a55709f860937fe2f81b312f0
Certificate serial: 01856D819CD659449E19C9183731D208D221
Authority key identifier: 50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/1eaPla8kUVQKAr-p5pc79X7IBAY.roa
Signing time: Sun 01 Jan 2023 13:24:48 +0000
ROA not before: Sun 01 Jan 2023 13:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 378
IP address blocks: 147.233.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Wed 05 Apr 2023 14:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:9c:d6:59:44:9e:19:c9:18:37:31:d2:08:d2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501459c027a86e1a55709f860937fe2f81b312f0
Validity
Not Before: Jan 1 13:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5e68f95af2451540a02bfa9e6973bf57ec80406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0d:5b:4d:c8:7f:f8:03:94:f8:0a:37:b4:d4:
ab:36:bb:b7:b4:c5:1f:68:aa:50:f3:53:9e:80:5d:
cc:6b:a0:7d:7b:15:ed:4c:70:96:af:6d:9b:75:c2:
a1:50:e1:e1:17:30:c8:7e:e1:2c:13:1a:c6:3f:07:
55:be:24:df:ce:d3:67:8c:6a:27:cf:1f:e9:82:5e:
08:88:4f:d5:59:5b:d3:68:91:bd:a3:a3:4f:49:8c:
81:a5:5c:28:06:de:11:41:04:f1:b6:92:cd:bf:80:
00:84:71:bd:08:35:a5:eb:6a:24:a7:d0:19:37:ce:
24:80:25:c6:08:91:c0:5f:2b:8e:11:83:f5:d6:fc:
12:04:c1:04:78:f6:15:da:d1:e5:c0:6d:f7:5a:d4:
aa:19:e7:d7:a2:ba:2a:92:71:f9:15:33:b2:44:c2:
55:bf:ae:f1:e0:bf:72:97:b9:62:ce:fe:c3:8e:54:
45:31:52:44:83:fc:6f:53:15:73:1e:b0:81:89:ab:
15:22:a2:27:f4:3c:c1:a8:9d:ed:31:52:1f:22:63:
04:a6:8a:29:fd:98:9c:b5:35:ae:88:55:51:76:c8:
52:02:23:db:ba:23:48:68:91:4c:62:81:b3:6e:46:
e8:4c:86:3e:14:3e:08:ff:41:33:67:1a:3e:b2:e8:
d0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E6:8F:95:AF:24:51:54:0A:02:BF:A9:E6:97:3B:F5:7E:C8:04:06
X509v3 Authority Key Identifier:
keyid:50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/1eaPla8kUVQKAr-p5pc79X7IBAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.233.0.0/16
Signature Algorithm: sha256WithRSAEncryption
18:ad:d8:40:49:63:8c:1c:d4:5e:f3:87:97:41:f1:57:9a:f1:
42:4f:c6:ac:f6:c4:8a:1d:31:07:7b:5e:9b:1b:46:da:a0:29:
53:1d:02:9d:73:0a:97:ff:3b:7f:ff:5e:16:06:88:ad:5b:26:
4f:d7:e0:30:7c:67:1e:fb:f1:09:da:aa:c7:b2:b7:2b:86:31:
a4:ba:99:07:a2:9b:82:6d:a7:1e:b4:ae:45:e9:f4:5b:fa:c8:
59:f3:14:97:cd:23:3f:7d:e8:10:f0:4d:45:40:0a:1b:41:4c:
36:c2:73:c1:a2:d7:b4:12:96:b6:c9:15:12:56:cb:70:db:61:
c7:c8:2d:46:d4:e9:28:fe:8b:3e:9f:38:b7:00:1b:fa:3a:75:
46:13:be:f0:1c:8e:e4:78:da:86:c0:02:15:60:5e:00:63:0b:
b1:49:31:88:92:54:b8:83:d8:0e:0c:f2:17:ee:81:ab:5b:f5:
48:34:52:a6:45:5c:49:7a:b0:17:4f:e1:ed:cf:01:47:a0:4b:
a2:3e:06:01:ec:e1:62:db:9c:f1:fe:f4:ca:af:0b:cc:48:f9:
70:46:8d:66:ae:0a:66:69:03:cc:19:57:20:ea:e5:21:c4:98:
7d:8b:7b:11:78:f3:d7:d8:42:26:d5:db:d8:50:8a:84:88:d3:
ca:be:63:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:38 2024 by rpki-client on console-fra.rpki-client.org