Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/xy7kxt73HunugubmnZfCiqOO4Tc.roa
File: xy7kxt73HunugubmnZfCiqOO4Tc.roa (raw, json)
Hash identifier: yNVCBqHVxVta3c2CyU8EA2C7skRi2Spghm/RFFNCtQs=
Subject key identifier: C7:2E:E4:C6:DE:F7:1E:E9:EE:82:E6:E6:9D:97:C2:8A:A3:8E:E1:37
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 01856E6670E0D544CC46FDDB6FB181035869
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/xy7kxt73HunugubmnZfCiqOO4Tc.roa
Signing time: Sun 01 Jan 2023 17:34:45 +0000
ROA not before: Sun 01 Jan 2023 17:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16229
IP address blocks: 213.169.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:66:70:e0:d5:44:cc:46:fd:db:6f:b1:81:03:58:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jan 1 17:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c72ee4c6def71ee9ee82e6e69d97c28aa38ee137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:47:1d:1b:30:2b:01:fe:c7:03:f7:68:bb:30:
b6:05:8d:f1:19:cd:8d:57:7d:29:14:60:25:71:1d:
0f:cf:a0:cd:c0:a2:66:18:55:e6:d5:52:41:93:da:
1e:71:3f:78:36:27:e0:09:45:15:37:64:e6:a8:1d:
8a:ba:78:c0:91:af:ad:1c:ad:de:88:7a:26:78:f2:
bc:57:91:e0:f9:8f:7e:ac:c8:1e:7d:ef:63:68:f3:
8d:1d:d2:52:4e:84:1a:b8:f9:0e:6a:0f:19:a4:ff:
a5:5b:25:a7:eb:bc:3f:40:ec:f0:eb:82:eb:23:e8:
17:0f:c9:d6:5d:af:6e:c8:ef:ca:fe:c6:02:7c:db:
72:e4:a6:52:ae:5f:2e:b2:87:80:50:60:ad:c2:38:
bc:42:e8:81:cd:d6:d0:e1:f9:c2:1e:e2:f3:aa:fa:
d2:8c:c2:45:74:d6:b5:4b:19:68:41:43:67:d2:a8:
51:99:45:e1:45:59:91:6d:58:0c:e8:71:23:67:cb:
82:82:dd:7f:0b:33:28:5e:ba:18:93:0b:31:72:7f:
e2:a0:6b:26:7a:be:2a:ba:8a:f5:aa:ff:e4:6a:f2:
9b:62:cc:53:39:93:f5:04:63:79:6a:8f:73:6a:f5:
e6:5d:f0:c3:5a:9d:61:4b:4a:b1:76:73:9a:1d:e1:
a2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2E:E4:C6:DE:F7:1E:E9:EE:82:E6:E6:9D:97:C2:8A:A3:8E:E1:37
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/xy7kxt73HunugubmnZfCiqOO4Tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.169.154.0/24
Signature Algorithm: sha256WithRSAEncryption
85:39:3f:9d:42:a8:42:ae:e5:cf:b4:a2:74:eb:bd:d3:5c:2f:
26:1e:6d:ab:14:71:b9:2e:bf:32:da:2f:a4:c3:21:d5:f5:5c:
b1:ac:78:74:e3:b8:58:5b:d6:8d:a1:91:bd:be:16:a4:45:7a:
fd:61:35:75:c7:cd:63:24:f3:ab:7b:a6:4f:75:03:eb:5b:d6:
04:6e:35:a8:60:21:c3:98:5a:f2:9e:30:ad:92:b7:e3:ea:87:
b2:d4:32:c6:8c:29:25:0e:fb:76:0d:72:e9:94:2e:7a:a3:66:
74:eb:e0:e6:3f:f1:78:55:f3:11:dd:b4:18:26:f6:6c:83:9e:
4d:2b:89:93:68:23:14:cd:b2:ce:39:a7:83:4c:3c:2b:3d:93:
9c:0e:e4:b0:35:f8:ae:8b:12:64:20:e2:6e:85:50:fd:90:73:
d3:23:b9:7a:d6:51:97:ac:b6:da:2b:48:d3:d6:bb:93:8c:32:
6b:08:dd:2a:51:08:39:0f:d9:7c:87:cf:4f:ba:f9:68:73:c6:
33:85:f1:f5:22:46:05:55:f4:32:91:f4:e3:4a:17:ae:cc:2d:
bb:66:07:20:b3:6f:2a:0b:59:d1:8d:a3:59:2b:83:60:c9:15:
62:ae:dc:5c:29:fe:e6:d9:77:8b:84:40:8f:01:76:c5:80:ec:
c0:e5:0c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-fra.rpki-client.org