Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/buUQSKE1gKMH_s4T6in4_WfM5wE.roa
File: buUQSKE1gKMH_s4T6in4_WfM5wE.roa (raw, json)
Hash identifier: //wKk7H9SKxwQniUoSaWG0X2sXdL6xe8xb35Iul1pVk=
Subject key identifier: 6E:E5:10:48:A1:35:80:A3:07:FE:CE:13:EA:29:F8:FD:67:CC:E7:01
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 01856E6675E1E21BF9ECEC739E060604886A
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/buUQSKE1gKMH_s4T6in4_WfM5wE.roa
Signing time: Sun 01 Jan 2023 17:34:46 +0000
ROA not before: Sun 01 Jan 2023 17:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203206
IP address blocks: 213.169.152.0/24 maxlen: 24
213.169.150.0/24 maxlen: 24
213.169.153.0/24 maxlen: 24
213.169.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:66:75:e1:e2:1b:f9:ec:ec:73:9e:06:06:04:88:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jan 1 17:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ee51048a13580a307fece13ea29f8fd67cce701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5f:91:38:8e:a5:52:53:6f:28:a7:77:e8:87:
da:83:3b:12:83:11:8d:eb:9c:a6:0a:61:03:d1:d1:
af:79:16:89:d3:bd:c9:ee:a7:88:03:67:43:b8:9d:
b1:2a:d6:b4:19:4f:5c:fc:0b:ab:3e:07:14:4f:f8:
15:e5:d2:5b:5e:34:73:bc:08:a1:58:ad:ed:6f:18:
10:70:64:5e:e8:f2:3d:03:58:4f:d6:b8:57:1d:57:
66:67:13:ff:78:5a:e3:8f:77:a2:5a:a0:46:8d:42:
b9:34:d8:01:fc:9d:9b:36:7d:de:7b:4b:ca:1b:51:
3c:d3:24:f6:82:28:cd:69:4d:42:05:a7:d1:6c:e8:
76:8d:5d:18:93:00:59:71:a9:ae:04:62:53:c7:68:
a9:dd:72:3b:be:e7:17:b6:e0:ee:fd:5c:b7:ec:62:
07:53:e6:bc:0f:3b:3a:62:df:02:8f:47:f8:10:a4:
f1:52:d0:17:e1:49:df:7b:26:c5:cb:7f:9e:37:4a:
af:7d:48:72:61:d0:28:b2:ba:e8:c0:3a:f1:90:a5:
20:42:ec:0f:be:f7:8f:44:45:65:ed:4a:8d:43:77:
a4:42:69:01:10:32:ba:82:c1:e0:95:1d:c9:59:00:
a0:b4:08:06:1e:cc:9a:9e:00:da:83:56:fc:7a:31:
07:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E5:10:48:A1:35:80:A3:07:FE:CE:13:EA:29:F8:FD:67:CC:E7:01
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/buUQSKE1gKMH_s4T6in4_WfM5wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.169.150.0/24
213.169.152.0/23
213.169.155.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:e1:77:86:b1:88:5b:d4:f3:02:04:58:fc:92:70:a0:d7:2d:
59:73:9e:c9:0c:c5:fd:04:77:11:7a:35:b0:2b:4b:58:39:75:
a5:69:f1:29:da:95:5e:e4:86:a2:14:7c:c2:5e:48:8a:ae:67:
27:a4:a4:b0:94:b7:2a:ef:87:a1:ee:7c:7e:8d:6a:fc:8d:8a:
01:d3:0b:24:85:f2:72:31:9a:7b:70:b4:39:c4:28:7f:24:1a:
10:77:2d:82:60:97:e1:a7:a6:7a:cf:46:1a:a7:be:6c:96:78:
aa:f8:71:35:b2:5f:25:1e:a9:0e:52:0c:35:53:39:c3:2d:32:
55:d6:ed:74:01:ad:bb:06:d0:2b:80:91:83:85:af:9c:09:db:
22:51:a0:14:9a:4b:99:75:48:6a:1d:34:bb:16:ff:6c:57:f1:
09:48:3f:9e:0a:b7:b9:b9:a2:c7:f2:99:28:97:6f:de:ab:2a:
eb:73:f0:fd:2f:cd:b8:92:f9:cd:9f:6d:97:60:94:11:79:b8:
88:6b:ef:32:c3:b5:40:0c:d2:cf:d2:e5:0b:f3:92:bd:3e:10:
1d:e9:07:7c:0c:36:04:c9:b7:15:3f:b7:ed:03:66:d0:49:88:
1b:41:19:9e:e9:76:b2:8d:15:2a:07:57:ca:0d:18:52:9d:5f:
84:3d:14:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:54 2024 by rpki-client on console-ams.rpki-client.org