Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/94E0zxs9tbKVlgCKiQW9dQOPo9g.roa
File: 94E0zxs9tbKVlgCKiQW9dQOPo9g.roa (raw, json)
Hash identifier: RxuwXFpb8L7pOuUZXcH0vzPNqVzGGvQY37K+foMRcgs=
Subject key identifier: F7:81:34:CF:1B:3D:B5:B2:95:96:00:8A:89:05:BD:75:03:8F:A3:D8
Certificate issuer: /CN=951bb490e09df1467e4eec43d8f20484cee839fe
Certificate serial: 018570305A470B9D191B5C618D511B290D32
Authority key identifier: 95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/94E0zxs9tbKVlgCKiQW9dQOPo9g.roa
Signing time: Mon 02 Jan 2023 01:54:55 +0000
ROA not before: Mon 02 Jan 2023 01:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 213.218.48.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:5a:47:0b:9d:19:1b:5c:61:8d:51:1b:29:0d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951bb490e09df1467e4eec43d8f20484cee839fe
Validity
Not Before: Jan 2 01:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f78134cf1b3db5b29596008a8905bd75038fa3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4a:4c:22:4a:cd:9f:48:3c:08:69:12:c9:4f:
f8:c9:26:39:19:06:db:83:e6:4c:33:8a:ae:7c:35:
49:a4:11:99:f1:b1:25:4b:be:14:ad:f7:10:90:65:
5a:be:55:ee:3a:ef:39:fe:75:09:43:0a:46:6f:f0:
42:08:9d:bd:12:63:51:37:76:9e:ed:7c:50:64:f5:
55:9f:91:38:41:21:4d:39:84:a2:d0:42:b5:94:a0:
ca:bd:97:af:c5:6c:64:2a:ea:d4:f2:c7:39:8f:5e:
73:73:76:bb:2a:f2:75:24:5f:21:95:4c:20:1e:c9:
d4:e3:a2:08:d4:dd:61:1a:44:89:da:bd:45:55:88:
a1:19:84:18:bf:e5:c2:a7:64:ca:d7:73:ec:5f:3c:
34:07:a5:7c:e5:74:32:57:bf:25:7c:b7:e7:14:94:
4e:09:f5:4b:24:a4:b3:8a:a1:ec:8b:35:6b:48:59:
bf:85:28:ce:95:2a:5d:16:fe:7a:e6:3d:91:49:ce:
37:03:95:88:5c:cd:eb:59:79:dd:70:78:3a:d0:76:
c7:ec:55:9d:a3:80:2a:1c:7d:e4:a3:a3:f6:d3:33:
f1:36:30:0c:1e:c8:62:71:a7:5e:f4:af:11:e3:f0:
af:eb:e4:5f:a1:51:aa:3e:a5:05:48:bd:cf:7b:95:
79:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:81:34:CF:1B:3D:B5:B2:95:96:00:8A:89:05:BD:75:03:8F:A3:D8
X509v3 Authority Key Identifier:
keyid:95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/94E0zxs9tbKVlgCKiQW9dQOPo9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.218.48.0/22
Signature Algorithm: sha256WithRSAEncryption
99:5e:2a:bc:0e:dd:ff:3c:f9:7f:1f:e7:29:22:88:4b:20:f0:
ec:0c:fc:a7:9b:80:9f:ea:7d:62:88:8c:11:e8:70:fe:1a:04:
2f:65:bf:58:54:7e:bc:34:d6:41:54:84:69:89:ae:89:53:50:
cb:7a:86:43:b8:5f:e8:52:23:9a:ae:bb:20:25:46:ab:80:2a:
07:cd:b7:12:3b:39:ec:77:a3:33:25:28:5b:d5:ce:3e:40:8d:
fd:8e:d2:77:cd:c0:bb:df:79:65:91:74:2a:4c:93:99:fe:60:
13:67:fd:07:3c:a1:fb:42:0a:54:34:23:03:a0:e4:58:d9:3c:
0b:93:48:cc:bf:db:4e:f6:6a:11:66:4b:65:cc:01:4d:57:27:
a0:96:69:e8:7c:04:d1:b5:23:02:6e:d8:36:75:b8:5b:4b:b7:
7e:e0:e1:35:56:85:8b:c7:90:08:0b:e8:a8:9a:61:11:e8:c1:
7e:c3:fe:7b:10:9d:3a:18:75:a2:8a:c1:cf:fd:ad:87:12:05:
1d:1c:96:03:0d:0e:4c:94:1e:1c:a3:b0:9c:53:6d:81:3d:6f:
96:6a:57:b1:60:bb:00:0b:15:50:47:63:52:a9:01:68:1d:71:
1d:56:cd:27:80:07:4e:5d:da:3e:b7:b5:09:76:61:d0:46:42:
5c:95:65:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:59 2024 by rpki-client on console-ams.rpki-client.org