Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/r2u7UNvoEDCDCrfAm1JLbQ5RzsU.roa
File: r2u7UNvoEDCDCrfAm1JLbQ5RzsU.roa (raw, json)
Hash identifier: qE5WtCiN+9wZIrEa5hgBAvMc53IMUaRVstTD0nlnBRU=
Subject key identifier: AF:6B:BB:50:DB:E8:10:30:83:0A:B7:C0:9B:52:4B:6D:0E:51:CE:C5
Certificate issuer: /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Certificate serial: 018A40ACDA5E334EAADAFC961C23E708FAB9
Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/r2u7UNvoEDCDCrfAm1JLbQ5RzsU.roa
Signing time: Tue 29 Aug 2023 09:43:04 +0000
ROA not before: Tue 29 Aug 2023 09:43:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39151
IP address blocks: 213.175.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:40:ac:da:5e:33:4e:aa:da:fc:96:1c:23:e7:08:fa:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Validity
Not Before: Aug 29 09:43:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af6bbb50dbe81030830ab7c09b524b6d0e51cec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a1:3d:ac:1e:41:d2:67:89:1d:95:51:41:16:
06:78:4f:39:29:4b:8f:59:a7:ac:b5:46:4b:fb:f1:
da:69:88:45:eb:4e:20:2f:89:7e:b5:7c:bf:34:6b:
fe:68:16:89:6d:17:26:4a:44:dd:cc:f1:3c:f5:ee:
a6:27:49:bc:11:77:93:57:9e:72:08:58:26:4e:fe:
9d:fd:c7:26:59:a4:96:fd:18:81:6e:77:dd:9f:dd:
d8:ea:b8:6e:a2:6e:3d:da:14:69:c9:8e:bd:95:25:
22:c0:ed:33:f8:e4:00:56:46:89:8e:7d:be:38:f3:
5c:3e:53:a3:d0:f1:12:f3:ba:de:bf:c2:c0:35:ac:
d5:5c:dc:20:f2:43:6d:a2:33:e4:b3:74:f0:b3:79:
35:da:24:c0:86:84:f0:51:0f:9c:0d:c5:77:00:04:
cf:c2:b3:ed:d6:7d:c5:c1:b6:b7:db:b8:6d:d2:c8:
7e:85:76:6f:90:2d:49:a1:57:66:0d:1e:a4:0a:02:
fb:24:b5:af:e4:61:a0:0e:cf:ce:04:a2:f0:bb:5a:
f0:de:32:b9:86:b3:07:99:42:10:26:01:a4:94:98:
fd:56:09:0e:38:bd:64:04:ec:b0:b6:21:16:d9:44:
f4:b7:2d:16:29:4a:13:bf:c8:6f:60:03:72:5f:95:
e1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6B:BB:50:DB:E8:10:30:83:0A:B7:C0:9B:52:4B:6D:0E:51:CE:C5
X509v3 Authority Key Identifier:
keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/r2u7UNvoEDCDCrfAm1JLbQ5RzsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.175.134.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:99:d5:19:d0:b6:72:2a:ed:84:eb:1f:56:df:6a:e5:ee:34:
98:2c:a9:ee:73:06:b0:eb:61:61:2b:73:3f:84:0f:89:f8:46:
6e:8e:52:96:cf:fb:f1:d1:0a:33:41:42:27:ec:e0:51:3e:f3:
91:82:12:ca:a2:3a:c5:7b:42:9d:39:2f:c9:51:6e:f4:de:c4:
d6:fe:a5:81:3f:8f:4e:7a:02:1e:9f:2f:7e:db:41:ac:f5:2d:
e9:cf:1c:88:dc:4a:99:07:c5:db:5f:71:c3:e5:91:b5:be:42:
5a:b3:40:b3:8d:fc:6e:78:d4:6b:6e:7d:0f:f2:11:0b:b0:d7:
83:cc:e9:14:61:eb:1b:03:94:da:e6:9d:05:0c:66:cc:b2:64:
c8:c4:b3:60:8f:7c:be:05:64:86:c2:56:f2:49:aa:96:0d:f5:
ce:83:97:7f:7e:3a:b6:48:02:e5:7e:db:ce:a3:1f:1b:36:44:
ee:09:43:8e:0f:1d:33:27:b9:cb:c9:37:de:7c:e7:79:85:82:
0d:3e:2d:15:6e:1d:60:1c:27:a2:7c:d0:da:63:28:63:aa:e0:
97:41:36:79:eb:48:a8:51:5a:a6:2e:6e:80:22:2d:a7:ac:3c:
12:4b:55:10:1e:51:35:5f:99:aa:e6:68:33:48:22:31:a1:7b:
bf:41:6c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:15 2024 by rpki-client on console-fra.rpki-client.org