Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/4oel4dOWuCGO4WVR60lXnAPvbD4.roa
File: 4oel4dOWuCGO4WVR60lXnAPvbD4.roa (raw, json)
Hash identifier: VRu9RNPfvZULWBkZd7+KlTKgNfm8WXb3qAwnvdM0lB0=
Subject key identifier: E2:87:A5:E1:D3:96:B8:21:8E:E1:65:51:EB:49:57:9C:03:EF:6C:3E
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 0185BAF38C8B1583EB63FA33B6D1B000A4E5
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/4oel4dOWuCGO4WVR60lXnAPvbD4.roa
Signing time: Mon 16 Jan 2023 14:20:01 +0000
ROA not before: Mon 16 Jan 2023 14:20:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206244
IP address blocks: 213.169.156.0/24 maxlen: 24
213.169.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Dec 2023 10:21:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ba:f3:8c:8b:15:83:eb:63:fa:33:b6:d1:b0:00:a4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jan 16 14:20:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e287a5e1d396b8218ee16551eb49579c03ef6c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b2:9d:1d:bb:19:c6:bb:1c:96:95:a6:66:20:
85:a5:71:70:50:aa:31:c4:4b:03:c8:28:12:32:d9:
fb:04:e8:e4:89:9a:e5:8d:04:99:85:b0:8b:df:c1:
e9:f3:b4:e8:06:61:7b:fc:e6:d1:de:ed:5d:a3:3b:
23:92:c8:1d:8f:32:9c:40:76:1d:19:88:ec:05:3a:
84:a2:42:3d:68:50:0c:c1:a4:21:e0:ce:4d:c9:d1:
c1:6f:67:3b:96:e7:9c:36:f6:a1:31:29:1b:4d:af:
0b:50:b0:88:4d:a0:48:e8:70:16:c1:5d:b7:49:22:
63:d4:95:59:ba:5c:85:f7:05:77:c2:16:af:51:25:
1e:b6:00:17:c6:07:c4:e9:3b:c1:d2:c2:0a:19:1c:
50:e4:81:82:df:6d:67:32:4a:98:ff:35:eb:b5:0b:
b1:d8:3a:0d:2c:ab:7d:f4:80:2e:70:00:ba:cb:f5:
31:92:3e:1b:f7:22:02:19:37:a5:df:a1:f1:45:76:
ce:ed:49:a0:e1:a9:11:53:0a:9c:4e:2d:8f:0b:72:
a7:f8:61:87:bc:60:e0:e7:3d:c4:97:99:76:b2:95:
3f:f3:7e:04:69:b3:3b:37:54:19:cb:c0:19:3e:07:
7b:66:da:9f:c1:9f:0c:db:55:df:b8:72:54:88:54:
50:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:87:A5:E1:D3:96:B8:21:8E:E1:65:51:EB:49:57:9C:03:EF:6C:3E
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/4oel4dOWuCGO4WVR60lXnAPvbD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.169.156.0/23
Signature Algorithm: sha256WithRSAEncryption
64:df:0e:35:2d:4b:19:aa:14:e3:55:9d:16:0f:2a:a7:77:1b:
06:54:fa:b3:6d:8e:3f:a1:4d:9e:30:77:fa:ff:e2:9c:70:e3:
66:2d:19:2e:29:a3:c1:00:0e:4f:04:a7:06:7a:49:99:73:cf:
c4:26:42:51:76:9f:2f:48:3a:0e:77:ce:d3:41:35:fb:54:af:
c0:f4:ab:8c:3f:8e:b1:b4:e3:2e:46:c0:13:1a:64:c2:74:30:
c1:57:0a:4d:83:a1:2f:ee:9b:8e:34:8a:7a:f9:8a:15:7a:87:
db:81:4b:a6:4f:88:66:e9:bd:a7:05:ca:2f:03:cc:1e:98:6d:
ef:5b:d7:29:73:82:6d:8a:68:86:b5:fd:c2:64:0c:82:55:29:
a4:c3:09:b0:98:d4:e4:80:44:fd:1e:5b:5c:0c:f3:76:5c:d3:
51:e2:c7:c4:9a:9e:51:08:9d:05:72:32:cf:c4:4f:42:1d:4a:
54:37:7e:f6:60:cf:fb:77:a4:62:15:6e:08:ad:a7:22:e7:51:
ce:00:50:16:86:a8:e4:e3:8e:5d:d3:90:a9:a5:cb:ac:b1:a2:
d9:37:0a:7b:22:9c:51:e4:64:1e:94:30:9b:d8:3f:8d:e6:3b:
e7:6f:79:ee:27:d8:c2:b1:ae:42:0b:41:7e:45:d1:1b:1b:7f:
f0:52:7d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:53 2024 by rpki-client on console-ams.rpki-client.org