Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/rOCE7ctX7yLXRzJs8NtM9saTbo8.roa
File: rOCE7ctX7yLXRzJs8NtM9saTbo8.roa (raw, json)
Hash identifier: t7bo2F1Kuw9JI+Ny1OAOB0IED3to0Cjp0onUPzFCWIY=
Subject key identifier: AC:E0:84:ED:CB:57:EF:22:D7:47:32:6C:F0:DB:4C:F6:C6:93:6E:8F
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 01856B935E921B287B7C7A57B9EF30CBD5AD
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/rOCE7ctX7yLXRzJs8NtM9saTbo8.roa
Signing time: Sun 01 Jan 2023 04:24:58 +0000
ROA not before: Sun 01 Jan 2023 04:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22104
IP address blocks: 213.161.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:5e:92:1b:28:7b:7c:7a:57:b9:ef:30:cb:d5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 04:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ace084edcb57ef22d747326cf0db4cf6c6936e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e9:df:8f:92:68:6c:65:6f:1c:59:2e:a7:a5:
27:a0:c1:fd:10:4d:f5:d7:93:24:59:5d:98:1c:e2:
5c:c4:9f:c7:a9:58:5a:8d:43:83:58:e4:61:3c:2e:
3b:86:fd:6f:67:26:33:16:d2:93:5e:8f:26:90:4e:
c6:35:cf:aa:31:da:c8:bf:5a:c8:ee:a2:1e:1f:16:
d0:1c:23:a0:5c:a0:dc:32:3b:45:47:6c:50:1e:ff:
32:6a:e2:8c:9f:f0:0d:1d:8b:0b:1e:74:4a:14:ba:
ea:fc:e9:9b:af:39:e7:5f:d3:2b:ab:d8:d9:07:5b:
dd:3c:b0:da:4e:f4:ad:9a:45:dc:01:03:eb:2f:88:
45:fa:ad:cf:31:ad:59:6b:42:22:da:57:f2:34:3f:
88:02:e2:4f:38:31:08:8a:48:ed:a0:5a:bc:fb:50:
22:fc:9a:4b:fa:3a:e7:f7:f7:c8:45:da:17:d1:8c:
65:61:bd:07:f6:de:a7:0d:73:60:11:87:5b:2b:a3:
0d:77:5c:bf:9e:2f:a8:f6:14:ab:7a:6c:de:24:7c:
a6:6c:82:e1:fb:b5:39:ca:37:52:1e:41:c9:b8:63:
56:22:18:24:5b:de:5e:cd:1c:a2:ff:0a:12:3c:47:
2e:90:c1:f9:1d:f1:89:f8:18:4b:06:e8:fc:84:f1:
3c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E0:84:ED:CB:57:EF:22:D7:47:32:6C:F0:DB:4C:F6:C6:93:6E:8F
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/rOCE7ctX7yLXRzJs8NtM9saTbo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.161.87.0/24
Signature Algorithm: sha256WithRSAEncryption
70:53:37:c6:c8:e9:65:9f:88:dd:d5:18:d9:34:2e:1b:d5:69:
0d:3c:da:9f:30:d4:0e:f3:6e:89:0f:ef:50:f6:28:8f:2e:06:
18:69:71:71:7c:3e:34:77:b2:52:c1:c4:ac:9f:3e:06:65:6b:
8b:17:41:29:49:cf:7c:ab:02:8b:0b:0c:dd:8c:38:f7:93:43:
11:2c:bf:64:37:84:42:46:87:1d:bf:cb:65:2e:b5:f1:18:ad:
52:27:b9:5e:bf:9f:fc:3a:a7:d9:78:cf:d3:f8:3a:0b:0f:45:
fe:01:10:c3:ae:4b:0d:6d:de:7e:ef:24:58:03:69:b1:8c:cf:
73:1f:6c:1b:8b:72:57:e5:bd:7d:e9:15:09:80:bb:cb:b6:06:
58:e7:c0:ce:c6:af:ea:64:b5:97:b3:82:b9:1b:ea:76:70:3c:
22:44:da:72:f0:72:1b:32:c6:f1:9f:1a:3a:08:bb:33:c2:76:
31:69:a8:60:fe:3c:20:fe:c2:58:59:25:59:11:18:16:e6:27:
07:92:39:a6:6a:c3:86:a6:ff:9b:3f:c6:06:09:1c:b0:0e:5d:
7d:aa:8f:ba:75:69:e0:4f:26:31:5f:6a:2a:c6:92:f0:7c:de:
19:72:a7:2b:4c:65:ff:c3:ee:0a:dd:68:68:27:3b:6d:8a:bf:
99:f1:1d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:18 2024 by rpki-client on console-ams.rpki-client.org