Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/4bgDXY8_8kgYTlv8ofsSSYcD5tg.roa
File: 4bgDXY8_8kgYTlv8ofsSSYcD5tg.roa (raw, json)
Hash identifier: nfm2UAK168nDVHeU9pvqCLQ5GnAGBhDgLmO1WkTKofQ=
Subject key identifier: E1:B8:03:5D:8F:3F:F2:48:18:4E:5B:FC:A1:FB:12:49:87:03:E6:D8
Certificate issuer: /CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Certificate serial: 018A3E2A61A9204632207A456E65BB50D09C
Authority key identifier: B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/4bgDXY8_8kgYTlv8ofsSSYcD5tg.roa
Signing time: Mon 28 Aug 2023 22:01:19 +0000
ROA not before: Mon 28 Aug 2023 22:01:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 185.91.127.0/24 maxlen: 24
2a12:de40::/29 maxlen: 29
2a12:de41::/32 maxlen: 32
2a12:de44::/32 maxlen: 32
2a12:de40::/32 maxlen: 32
2a12:de45::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3e:2a:61:a9:20:46:32:20:7a:45:6e:65:bb:50:d0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Validity
Not Before: Aug 28 22:01:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1b8035d8f3ff248184e5bfca1fb12498703e6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6e:55:4e:70:9f:4b:43:0d:cb:35:a7:16:d7:
a9:b7:af:08:9f:bc:e9:40:a0:10:2d:42:d6:3e:57:
ad:b9:15:73:5b:02:51:53:0b:da:ed:fb:85:d3:49:
62:d5:0f:84:5c:31:b5:72:ee:e2:bb:47:4c:eb:64:
2b:6b:97:dc:c9:12:43:c9:29:18:18:9e:bc:2f:49:
ba:f6:d0:58:bb:8f:8e:d9:4d:b1:18:b6:62:b5:a0:
48:b4:63:25:df:f9:94:53:81:6a:55:5b:e3:02:51:
58:2c:5d:0e:72:b2:1d:10:bf:4e:9c:07:a2:a4:39:
50:c0:05:3e:de:e6:90:5f:6b:53:58:5c:57:77:06:
70:7e:2a:b5:ad:16:b2:95:c9:6b:59:b5:19:36:9d:
6e:36:8a:53:68:d0:2b:6b:65:dc:f5:3a:d8:22:25:
78:67:34:03:e6:ec:51:d3:61:50:93:79:00:00:4c:
17:56:9d:28:a3:3e:3a:97:cf:d2:6a:ff:3f:cc:f5:
fa:5c:8f:af:c5:67:71:8a:81:8d:f2:cf:e1:b2:62:
ca:36:70:d1:11:a8:34:8a:0d:66:d0:d8:cb:c9:32:
d8:b2:35:da:6c:09:56:16:7e:38:01:80:ec:4c:7e:
a6:d6:b1:12:f9:de:3f:1f:c8:c8:75:ec:14:ba:2c:
3f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B8:03:5D:8F:3F:F2:48:18:4E:5B:FC:A1:FB:12:49:87:03:E6:D8
X509v3 Authority Key Identifier:
keyid:B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/4bgDXY8_8kgYTlv8ofsSSYcD5tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.127.0/24
IPv6:
2a12:de40::/29
Signature Algorithm: sha256WithRSAEncryption
1f:6e:f0:7c:b8:b6:06:91:a4:a5:90:ce:a5:b3:3a:b6:30:df:
91:99:e4:fc:65:50:f8:80:97:f8:23:d9:80:e0:a6:97:dc:be:
8b:cf:cb:26:3d:de:f6:3a:bd:54:65:ab:2c:19:4b:63:f0:0a:
cf:38:83:45:ad:fd:bb:74:7e:e7:e5:1e:0a:e3:db:15:d2:8f:
a5:4b:ff:54:c6:61:3e:aa:84:64:98:f7:14:e5:4f:36:56:b6:
e4:2c:2c:dc:c1:79:3e:3d:10:9c:75:8d:21:d9:9f:38:ac:ee:
4a:49:0a:2f:32:a3:19:c8:66:e1:ad:f8:ba:98:08:6e:26:dd:
ed:b5:41:00:bd:50:94:86:6b:39:84:ad:85:ae:2f:e0:d2:84:
a4:1f:d5:37:ce:8a:a2:7a:e3:16:58:9c:84:8c:4d:35:53:d0:
62:6b:11:82:75:68:6b:b5:62:4e:81:f9:10:ea:b4:62:16:3b:
ac:4b:a3:b1:bc:2f:19:90:1c:c4:bd:52:5e:78:8f:1f:b6:4a:
71:f8:21:72:fb:28:85:29:a5:2f:cc:c9:c8:6a:61:50:1a:1e:
a4:53:d0:ba:f0:0d:39:c8:46:30:0b:db:00:6e:94:d9:87:ca:
dc:7e:ba:e1:07:f1:e2:95:82:21:24:af:f6:96:4f:bb:4e:97:
75:45:24:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:39 2024 by rpki-client on console-fra.rpki-client.org