Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/CVmDHgrJ4VeiuXHzPClMK5hdlYU.roa
File: CVmDHgrJ4VeiuXHzPClMK5hdlYU.roa (raw, json)
Hash identifier: BRfteOOMFDd9dXdKm0lzl0sAKAkWxhHVYxIsNLT2sqw=
Subject key identifier: 09:59:83:1E:0A:C9:E1:57:A2:B9:71:F3:3C:29:4C:2B:98:5D:95:85
Certificate issuer: /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Certificate serial: 01856D6F682F25AC034ED31C12C7E0F4B9B8
Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/CVmDHgrJ4VeiuXHzPClMK5hdlYU.roa
Signing time: Sun 01 Jan 2023 13:04:55 +0000
ROA not before: Sun 01 Jan 2023 13:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 213.109.179.0/24 maxlen: 24
213.109.177.0/24 maxlen: 24
213.109.178.0/24 maxlen: 24
213.109.176.0/24 maxlen: 24
2a00:de61:300::/40 maxlen: 48
2a00:de61:200::/40 maxlen: 48
2a00:de61:100::/40 maxlen: 48
2a00:de61::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:68:2f:25:ac:03:4e:d3:1c:12:c7:e0:f4:b9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Validity
Not Before: Jan 1 13:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0959831e0ac9e157a2b971f33c294c2b985d9585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:0a:cf:04:55:b7:da:de:b3:5b:4f:6e:68:
03:de:28:ad:7b:b9:91:5e:a4:d7:e3:3e:78:41:5f:
bc:20:88:34:c1:0d:92:65:58:60:e5:7c:97:2e:60:
39:47:6a:64:b5:ab:cb:63:93:11:2f:78:97:98:a7:
51:a9:16:1b:33:c7:8a:15:bb:75:09:7b:12:1d:d5:
7b:5f:c2:0f:c8:4d:f2:b6:a4:c5:93:e3:ff:a8:ef:
25:2e:9a:d8:95:16:65:88:fa:12:39:5e:ca:36:29:
f1:1b:01:06:d4:20:e9:6f:f9:50:ca:4b:d6:93:52:
31:b8:66:ec:fc:28:01:9c:27:05:5f:7f:b1:fa:dd:
e3:14:1d:c2:84:9a:54:b2:0e:cf:6d:15:86:d1:c6:
8d:e3:f1:13:7c:61:77:3f:80:8a:10:6d:a4:e2:39:
b5:dc:f3:1b:f9:b5:93:a6:6c:6c:ae:3a:d4:fe:c2:
11:4a:48:74:05:aa:ab:61:88:28:15:b7:df:74:e7:
7e:07:87:d6:97:74:84:54:97:b2:5c:1c:70:a2:a3:
e3:fa:de:8b:2f:41:4c:8c:ad:45:db:a3:77:1e:0d:
28:ac:35:08:0e:01:20:99:40:67:d3:1d:2a:a0:ee:
5f:0e:b0:17:36:8b:37:d0:7c:26:15:64:c4:af:c8:
68:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:59:83:1E:0A:C9:E1:57:A2:B9:71:F3:3C:29:4C:2B:98:5D:95:85
X509v3 Authority Key Identifier:
keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/CVmDHgrJ4VeiuXHzPClMK5hdlYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.176.0/22
IPv6:
2a00:de61::/38
Signature Algorithm: sha256WithRSAEncryption
dc:cc:46:85:1d:8b:5d:2e:73:f1:c1:61:1b:f3:5a:57:24:3b:
c0:0d:3a:c6:c5:e4:2e:d2:30:8f:57:8e:d9:fc:ee:2e:6b:62:
98:7b:85:a9:6d:ae:61:bf:18:0c:7e:1c:a1:34:9f:c9:11:d0:
5b:70:5c:cc:5f:4d:a6:f7:a2:7f:ad:70:d7:72:fa:83:cf:fe:
b3:97:25:09:bc:65:ed:41:ea:a2:b3:df:d2:37:19:81:70:f1:
a1:ea:4b:7b:bb:13:75:58:49:d8:8a:52:39:2b:a5:e6:76:0c:
3f:f3:da:04:e7:8b:67:a1:37:5a:42:78:ba:5f:17:64:cb:a9:
7b:30:fd:02:fb:e3:0e:69:f6:2f:0e:18:fa:9c:e1:56:a9:e2:
36:e3:68:2d:f8:38:98:ec:3d:a1:e1:58:36:23:e5:77:84:58:
bf:88:d7:2a:d7:b1:46:df:e9:bf:cc:e2:b4:fa:93:31:0d:c1:
db:1a:15:0c:9a:70:f0:5c:3d:f5:dd:af:4c:8b:47:8f:65:7b:
d0:b2:6c:30:c2:01:1a:f5:27:05:d6:df:13:40:88:b7:04:7b:
17:66:f8:5c:b7:96:6e:1b:79:7c:4c:7b:d0:d1:52:4e:13:e6:
12:8a:cb:ea:28:ef:e0:08:63:32:1a:62:5e:ad:68:58:fe:4e:
f1:f2:3e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:39 2024 by rpki-client on console-fra.rpki-client.org