Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/CXDgbpfE8jn--l9qWqZh1XcR1LQ.roa
File: CXDgbpfE8jn--l9qWqZh1XcR1LQ.roa (raw, json)
Hash identifier: 1JTJImx0jhP+JEmIZs5gQ4KHy+5PK85q0KOPSWre0lw=
Subject key identifier: 09:70:E0:6E:97:C4:F2:39:FE:FA:5F:6A:5A:A6:61:D5:77:11:D4:B4
Certificate issuer: /CN=e9e415ed5c0c7759981001b8db262da779a04b3d
Certificate serial: 0187E5763979C646BF1991E29DAAB44E6B78
Authority key identifier: E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/CXDgbpfE8jn--l9qWqZh1XcR1LQ.roa
Signing time: Thu 04 May 2023 06:32:23 +0000
ROA not before: Thu 04 May 2023 06:32:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6453
IP address blocks: 213.132.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e5:76:39:79:c6:46:bf:19:91:e2:9d:aa:b4:4e:6b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e415ed5c0c7759981001b8db262da779a04b3d
Validity
Not Before: May 4 06:32:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0970e06e97c4f239fefa5f6a5aa661d57711d4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:1d:45:57:e5:80:34:b3:f1:16:dc:bc:97:
94:ae:80:f2:f0:bc:ba:21:a5:dc:59:0a:21:bd:ea:
d1:e6:7f:26:13:98:ed:c3:99:3b:89:b3:a6:89:8a:
63:42:26:ee:6b:29:b2:ba:4d:49:94:82:a0:0a:18:
6f:61:f5:d3:84:7a:b3:07:37:08:51:90:91:68:2e:
6f:6b:3d:b5:38:3b:0b:e3:e1:4e:69:7f:3a:fc:e1:
9f:b0:dd:6b:6f:f1:8b:a0:97:71:78:b0:6f:5a:67:
dd:42:b7:f9:ee:49:08:57:24:3a:05:8a:bf:53:7c:
67:0d:05:33:60:ef:23:84:0f:ec:35:3d:7f:51:3f:
b0:6e:42:b1:80:a1:18:cd:76:f9:41:9b:5c:1c:13:
cf:e9:47:b1:f4:b7:e0:c2:41:26:95:83:d3:c5:08:
2c:de:f5:8b:20:de:cb:c5:44:6f:25:cb:9b:79:d9:
0d:5e:57:84:8b:df:af:1c:28:19:2e:7b:de:8a:84:
3f:ef:01:76:24:ed:60:0e:98:b0:b7:8a:09:1a:8d:
3f:9d:1c:db:7a:45:84:34:42:b2:d0:01:1c:2d:d5:
1e:7a:62:36:3f:86:cf:b8:0b:ff:cf:08:78:b7:f9:
01:05:36:66:a8:ee:f5:7c:54:81:a3:36:9f:d1:34:
a8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:70:E0:6E:97:C4:F2:39:FE:FA:5F:6A:5A:A6:61:D5:77:11:D4:B4
X509v3 Authority Key Identifier:
keyid:E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/CXDgbpfE8jn--l9qWqZh1XcR1LQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.132.251.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ae:16:ca:63:ac:70:e1:50:85:2d:8c:8c:6c:f5:99:7e:99:
3a:3b:fe:2c:fe:a5:54:04:9c:76:36:40:80:9f:e7:42:dc:cf:
87:04:91:aa:0a:79:60:7d:45:a1:74:ea:66:21:6c:36:80:ea:
f2:11:b9:fb:c8:39:b9:11:29:41:28:d3:2f:d3:5f:0a:4d:c2:
3a:15:18:e4:06:fc:be:f0:95:66:d3:0d:e9:e2:b3:49:b6:81:
94:7d:d1:1e:8e:72:6e:b3:90:57:9c:c7:50:d6:18:0d:09:ff:
49:ea:3f:ae:6a:3d:0c:2a:c1:7c:ef:51:81:7d:03:bb:00:27:
6e:12:d7:57:0f:ea:47:e0:f6:2e:dc:ad:8f:9c:d3:38:22:4e:
6d:97:59:13:f4:60:95:57:9c:c6:8b:db:51:f7:e7:81:c9:0a:
45:55:b5:67:7f:ce:64:65:16:1a:3c:1e:95:54:5b:28:98:35:
83:5b:64:3c:93:49:7d:7c:86:92:ea:cc:80:7c:83:42:fc:d4:
97:1d:75:2c:fa:28:6c:d8:c5:cd:9a:b3:63:fd:19:ef:b2:3f:
fa:fa:90:a8:b0:7e:05:5e:2e:1c:4b:07:dd:70:a4:c9:6d:45:
50:5c:da:77:7d:97:65:71:11:65:36:82:00:18:7e:61:84:85:
5e:92:c6:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfldjl5xka/GZHinaq0Tmt4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ZTQxNWVkNWMwYzc3NTk5ODEwMDFiOGRiMjYyZGE3Nzlh
MDRiM2QwHhcNMjMwNTA0MDYzMjIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTcwZTA2ZTk3YzRmMjM5ZmVmYTVmNmE1YWE2NjFkNTc3MTFkNGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCUdRVflgDSz8RbcvJeUroDy8Ly6
IaXcWQohverR5n8mE5jtw5k7ibOmiYpjQibuaymyuk1JlIKgChhvYfXThHqzBzcI
UZCRaC5vaz21ODsL4+FOaX86/OGfsN1rb/GLoJdxeLBvWmfdQrf57kkIVyQ6BYq/
U3xnDQUzYO8jhA/sNT1/UT+wbkKxgKEYzXb5QZtcHBPP6Uex9LfgwkEmlYPTxQgs
3vWLIN7LxURvJcubedkNXleEi9+vHCgZLnveioQ/7wF2JO1gDpiwt4oJGo0/nRzb
ekWENEKy0AEcLdUeemI2P4bPuAv/zwh4t/kBBTZmqO71fFSBozaf0TSoCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAlw4G6XxPI5/vpfalqmYdV3EdS0MB8GA1UdIwQY
MBaAFOnkFe1cDHdZmBABuNsmLad5oEs9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmVRVjdWd01kMW1ZRUFHNDJ5WXRwM21nU3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS83ZWI2ODMtZTIxOC00MzgyLWJmZDkt
MjhkYTZhMWJhMTI4LzEvQ1hEZ2JwZkU4am4tLWw5cVdxWmgxWGNSMUxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS83ZWI2ODMtZTIxOC00MzgyLWJmZDktMjhkYTZhMWJhMTI4
LzEvNmVRVjdWd01kMW1ZRUFHNDJ5WXRwM21nU3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YT7MA0G
CSqGSIb3DQEBCwUAA4IBAQBHrhbKY6xw4VCFLYyMbPWZfpk6O/4s/qVUBJx2NkCA
n+dC3M+HBJGqCnlgfUWhdOpmIWw2gOryEbn7yDm5ESlBKNMv018KTcI6FRjkBvy+
8JVm0w3p4rNJtoGUfdEejnJus5BXnMdQ1hgNCf9J6j+uaj0MKsF871GBfQO7ACdu
EtdXD+pH4PYu3K2PnNM4Ik5tl1kT9GCVV5zGi9tR9+eByQpFVbVnf85kZRYaPB6V
VFsomDWDW2Q8k0l9fIaS6syAfINC/NSXHXUs+ihs2MXNmrNj/Rnvsj/6+pCosH4F
Xi4cSwfdcKTJbUVQXNp3fZdlcRFlNoIAGH5hhIVeksYm
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:49 2024 by rpki-client on console-ams.rpki-client.org