Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/4w_RydLPYHHfQpnSf5MRPnmkg7Y.roa
File: 4w_RydLPYHHfQpnSf5MRPnmkg7Y.roa (raw, json)
Hash identifier: Qv+FwrXGEeUYb22S6DUNM42XBIdO/a1wTBo74lHwlbs=
Subject key identifier: E3:0F:D1:C9:D2:CF:60:71:DF:42:99:D2:7F:93:11:3E:79:A4:83:B6
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEB10512A642261FB9AA3788450E49
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/4w_RydLPYHHfQpnSf5MRPnmkg7Y.roa
Signing time: Sun 01 Jan 2023 06:04:43 +0000
ROA not before: Sun 01 Jan 2023 06:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15503
IP address blocks: 213.216.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:b1:05:12:a6:42:26:1f:b9:aa:37:88:45:0e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e30fd1c9d2cf6071df4299d27f93113e79a483b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:62:5d:90:bc:57:1b:ca:c6:08:7d:54:89:1d:
dc:ad:82:86:90:a6:f9:b4:7b:64:33:e9:14:39:40:
95:68:ed:1d:c8:72:9a:17:d1:26:65:8e:24:7d:92:
28:0b:34:1c:07:a5:5f:65:d8:83:a1:cf:5c:ac:bc:
79:2a:b8:50:86:95:5b:3f:bf:01:94:67:92:a7:61:
1a:00:ce:56:75:43:af:e2:ca:75:0b:8e:dc:2f:1b:
c4:6a:af:d6:66:c9:d7:e4:8d:74:9c:e3:4b:ce:71:
5d:ab:91:d9:a4:36:f6:46:c6:2f:ec:ae:8e:d9:fb:
e5:21:ad:2d:c3:03:a1:a2:b1:aa:dd:93:5f:7b:de:
9e:8e:dc:e2:6d:7e:6b:99:87:81:58:a0:25:21:ef:
87:ba:ca:18:e5:3f:07:b2:86:95:c3:87:b5:2c:c2:
12:84:ec:25:39:71:b9:b8:f8:b8:c5:8e:5e:86:fe:
9b:91:9a:45:11:d2:0d:a5:e0:6c:bd:7b:9d:9f:69:
3f:24:62:06:b6:07:15:34:55:66:d7:dc:f4:78:d7:
4c:18:9f:c4:6f:73:3c:f6:a6:84:b3:9c:49:98:08:
45:8f:7e:86:60:e1:2d:cc:16:b3:b9:00:ae:26:4d:
c7:cb:38:24:d5:10:64:e0:bd:5b:10:3b:a6:a6:32:
1c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0F:D1:C9:D2:CF:60:71:DF:42:99:D2:7F:93:11:3E:79:A4:83:B6
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/4w_RydLPYHHfQpnSf5MRPnmkg7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.216.65.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:9a:31:2e:46:72:ee:36:05:29:68:e4:94:f4:35:57:46:a4:
68:da:f8:24:74:0d:92:b7:dc:4b:b8:b5:36:9e:df:a5:9b:b6:
25:c4:06:66:02:0b:cc:52:c9:fa:15:69:22:d7:e0:01:1e:de:
7b:29:f8:0c:ab:e0:55:fb:36:73:64:8f:a6:56:a9:33:1f:51:
0b:71:d6:d2:f8:49:cc:b4:de:83:f0:5a:16:c4:c7:b7:89:20:
67:be:e5:99:f6:30:90:1f:2e:fe:5f:f3:fc:6c:89:07:86:95:
4a:a0:ad:8d:9d:8b:4f:b1:20:23:fb:7a:b8:c8:2a:62:35:2e:
e9:14:64:99:c4:76:cf:0b:23:52:7e:e0:8e:d4:ba:a5:46:d5:
2a:c7:f1:ce:41:c3:4c:bc:43:2c:b5:6e:37:3e:a6:28:8f:ce:
b5:d3:de:66:40:b6:0e:52:ee:ad:31:eb:82:66:74:2b:ab:6c:
50:60:dc:e5:eb:db:d4:9a:4e:8b:15:62:44:be:90:24:65:ea:
d5:06:f0:a6:bb:fc:8c:2b:38:63:d4:9a:7a:48:5b:a4:8a:3b:
25:9b:1e:12:47:4e:ee:72:0a:7c:0f:3b:a9:54:31:32:4a:44:
a8:fc:4d:9b:94:e1:ce:69:7b:e2:53:39:6a:e9:98:e9:81:cf:
8b:68:83:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org