Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/J752niGtpxIp4O7oMjjnYq-MrGU.roa
File: J752niGtpxIp4O7oMjjnYq-MrGU.roa (raw, json)
Hash identifier: 1TTp0b4rSSVYykTUN7Q4xM48Te8kXawEqQSJ64Esdr4=
Subject key identifier: 27:BE:76:9E:21:AD:A7:12:29:E0:EE:E8:32:38:E7:62:AF:8C:AC:65
Certificate issuer: /CN=e9e415ed5c0c7759981001b8db262da779a04b3d
Certificate serial: 0187E57639354641D1EDB64F1C2140CDAE3A
Authority key identifier: E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/J752niGtpxIp4O7oMjjnYq-MrGU.roa
Signing time: Thu 04 May 2023 06:32:23 +0000
ROA not before: Thu 04 May 2023 06:32:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4755
IP address blocks: 213.132.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e5:76:39:35:46:41:d1:ed:b6:4f:1c:21:40:cd:ae:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e415ed5c0c7759981001b8db262da779a04b3d
Validity
Not Before: May 4 06:32:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27be769e21ada71229e0eee83238e762af8cac65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:49:39:52:7c:6e:92:ef:b1:a3:79:41:86:
85:9f:0b:19:8a:51:f2:a4:26:23:62:63:74:be:79:
c5:76:74:b8:25:e4:6e:33:45:fd:1b:36:45:f2:ee:
a5:f5:09:1b:af:b5:3c:89:4e:dd:ee:ac:20:d6:63:
f2:f2:b8:82:14:27:b1:8d:7c:86:04:57:c2:ac:fe:
ca:73:da:cf:6f:ca:50:76:f2:3a:0b:a2:6f:f3:5f:
74:13:a8:33:fd:f6:de:e1:0c:f3:34:ff:cb:44:6b:
94:97:40:ec:f7:14:9e:d9:39:11:0e:de:c0:32:27:
ea:ac:09:5d:d0:43:d0:89:39:6a:92:9c:79:b8:e2:
c4:04:2b:ab:c1:58:c6:65:c4:fb:a4:6c:1b:8a:0e:
78:3b:61:90:7a:66:a7:f0:21:86:6c:54:61:0e:8d:
66:b0:f6:d1:d7:07:37:69:7f:c2:98:46:27:53:2c:
42:3a:c4:be:af:d4:6e:86:a1:6b:c4:0c:45:0e:13:
c1:61:c1:bb:df:5c:34:0b:61:f1:d8:c6:32:10:25:
a8:96:a2:97:a0:30:f7:8c:30:fe:f2:79:95:6c:79:
23:3f:bd:51:67:95:b4:21:3b:3c:9e:27:c2:35:3b:
2b:a4:a7:06:5e:ab:50:f8:6f:1f:cd:b8:91:5c:82:
cf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BE:76:9E:21:AD:A7:12:29:E0:EE:E8:32:38:E7:62:AF:8C:AC:65
X509v3 Authority Key Identifier:
keyid:E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/J752niGtpxIp4O7oMjjnYq-MrGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.132.251.0/24
Signature Algorithm: sha256WithRSAEncryption
19:63:10:80:5b:7d:78:91:cf:a0:d0:7e:e2:6f:08:9f:a0:f8:
d8:25:bf:e3:63:44:c1:dd:96:46:5f:b7:36:c4:9b:69:66:d9:
db:79:5c:f1:2a:7b:5f:cf:87:9e:73:13:d4:fa:c3:9e:b5:a8:
28:06:55:a0:21:dd:c5:32:09:f2:1c:2e:87:20:28:f9:61:69:
49:44:51:a2:55:de:de:47:56:7a:55:e9:13:de:ef:89:0f:e0:
a2:d7:80:1e:bf:77:51:01:05:39:d4:be:e3:85:f3:6a:46:a9:
07:32:8c:f5:b7:0d:7a:b1:3d:ee:40:f8:62:2f:1a:58:ff:cd:
8a:3d:ea:28:59:35:68:4e:20:8b:5f:d8:e6:70:a4:71:43:aa:
d6:73:55:63:0f:7d:ea:02:e6:4b:75:27:01:f2:22:f0:76:8b:
35:c0:12:5b:d5:5c:e7:b8:27:5a:fc:4e:21:15:d4:41:97:e3:
0d:df:aa:29:61:94:36:51:1e:fd:65:bb:8a:37:e5:3f:0f:ce:
e0:07:16:c1:3e:95:8b:af:1a:4d:2a:15:b2:64:a7:2a:ac:58:
fb:86:23:1e:b7:12:19:6e:e8:87:92:39:0e:5a:fe:77:54:f3:
6e:b7:9e:fb:96:5d:5a:68:a0:9e:0d:7c:00:02:73:d6:0e:0e:
5a:29:15:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:13 2024 by rpki-client on console-fra.rpki-client.org