Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/2E_1XdBoREr8x2ayAGI76NVGkVM.roa
File: 2E_1XdBoREr8x2ayAGI76NVGkVM.roa (raw, json)
Hash identifier: Vp0IKqA6PyV1EMpDQ9dmteQtayH82FcctLyMaiab7gk=
Subject key identifier: D8:4F:F5:5D:D0:68:44:4A:FC:C7:66:B2:00:62:3B:E8:D5:46:91:53
Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial: 018D2893CE155D62B92AE3620FD38ABDCCF8
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/2E_1XdBoREr8x2ayAGI76NVGkVM.roa
Signing time: Sat 20 Jan 2024 20:33:11 +0000
ROA not before: Sat 20 Jan 2024 20:33:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 213.134.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jan 2024 14:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:28:93:ce:15:5d:62:b9:2a:e3:62:0f:d3:8a:bd:cc:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Validity
Not Before: Jan 20 20:33:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d84ff55dd068444afcc766b200623be8d5469153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:da:b4:ff:60:4a:4b:2e:66:5a:da:0c:58:94:
c4:3b:1a:7a:07:ab:ad:37:9a:a1:16:35:ba:7c:93:
1d:a7:c0:73:2e:ba:aa:cd:4a:49:a1:48:26:5f:0b:
4e:10:14:2b:bb:a7:e3:ab:08:8f:84:25:ab:d4:a2:
75:a2:f7:11:9e:a9:ed:68:10:f8:b4:e2:2b:84:da:
6c:bf:de:be:8f:b0:5f:57:c8:60:93:73:1b:72:e2:
b2:e5:19:3c:dd:ea:02:4d:47:4e:33:f7:11:6a:0c:
67:c2:e9:d3:7e:eb:7a:66:25:2e:3d:42:56:55:9e:
46:79:9a:17:50:3a:4a:0b:25:2a:7e:ab:be:ae:5d:
98:9d:15:ab:a6:6e:5b:e3:28:f4:f0:09:c4:12:82:
48:6b:64:a5:25:80:bc:3b:60:62:af:92:47:be:ad:
a0:05:84:e1:e8:88:d5:33:80:d8:27:fa:bb:94:73:
a4:f3:2f:64:4d:a5:60:5f:c7:7a:87:07:c1:cb:2f:
83:48:17:af:6f:0c:01:83:46:65:3b:16:1c:8d:04:
4f:9c:f7:94:3f:cb:7c:a5:82:e6:66:e6:ed:ff:1a:
ae:e4:82:06:0a:88:90:b1:39:f1:29:64:bf:7f:f6:
b5:57:06:e7:d2:f3:3e:e6:f1:0d:f8:00:62:ac:2c:
0b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4F:F5:5D:D0:68:44:4A:FC:C7:66:B2:00:62:3B:E8:D5:46:91:53
X509v3 Authority Key Identifier:
keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/2E_1XdBoREr8x2ayAGI76NVGkVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.134.17.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:55:0b:af:22:4e:71:3a:4c:d3:12:62:2f:8c:5d:eb:77:08:
42:b1:08:4b:e6:25:c4:e5:11:4a:2a:98:c6:2f:de:ee:43:53:
65:9b:2e:b0:90:f6:ae:d0:a6:62:0d:ca:ea:80:71:3e:99:9a:
94:07:d2:eb:29:9c:9c:98:aa:d0:f5:70:7d:ca:91:16:8c:a0:
ed:f5:11:cf:2b:bc:8d:01:17:28:bc:14:cc:1a:4b:b2:a9:da:
56:db:e9:e8:b0:9f:b5:98:61:05:b1:a8:24:61:dc:a5:b6:ae:
07:8e:71:78:5c:9b:15:a9:41:29:15:53:12:ba:47:9c:1a:45:
66:51:26:a1:5b:64:ef:bc:13:98:af:ee:05:97:73:d7:c5:6b:
cf:fa:a8:3b:08:6e:6e:85:e4:22:ca:20:e6:6c:2d:cd:13:09:
26:7a:3e:12:f1:60:fa:c9:d0:4f:19:03:0e:1e:05:f1:ec:0a:
52:dd:32:2f:73:79:95:8b:94:34:54:d5:82:5d:27:dc:03:81:
29:d4:be:79:f0:5f:3f:53:1b:db:6b:37:62:2f:45:44:29:c9:
3e:e3:0c:dc:0d:96:2e:e2:42:6b:37:e3:d8:22:2f:61:e2:5f:
2d:6a:bc:01:b0:40:79:d0:c1:b5:b3:61:f6:b8:2d:85:bc:07:
51:8f:b5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org