Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/FN9zJ0K0qC70OrtzEUJvfenPiWI.roa
File: FN9zJ0K0qC70OrtzEUJvfenPiWI.roa (raw, json)
Hash identifier: Lb0XMtHReGv7oLdKR2OnuCsAXK3Vj4dajIO+cxD9koI=
Subject key identifier: 14:DF:73:27:42:B4:A8:2E:F4:3A:BB:73:11:42:6F:7D:E9:CF:89:62
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018E13CCA1805186C04FCEED1E7CA4CE12EC
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/FN9zJ0K0qC70OrtzEUJvfenPiWI.roa
Signing time: Wed 06 Mar 2024 12:46:01 +0000
ROA not before: Wed 06 Mar 2024 12:46:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212609
IP address blocks: 2.58.235.0/24 maxlen: 24
213.109.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 16:52:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:13:cc:a1:80:51:86:c0:4f:ce:ed:1e:7c:a4:ce:12:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Mar 6 12:46:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14df732742b4a82ef43abb7311426f7de9cf8962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ab:51:3f:3b:68:cc:5b:07:c3:0b:b7:65:b7:
40:28:b2:50:38:86:d2:8f:8d:2a:b8:91:cc:13:70:
c9:c1:b6:d5:a6:ac:85:59:a6:15:15:2c:48:dc:43:
c1:36:ea:f0:12:41:e8:7d:6d:fa:38:97:15:59:32:
69:e8:77:9e:74:14:cc:18:12:03:dd:27:50:e9:b9:
e9:b0:3f:73:62:0c:65:e0:dc:7b:03:96:44:d1:45:
03:c8:33:00:58:6b:8e:4d:ec:35:82:79:8e:54:e9:
aa:2b:85:90:af:55:9d:42:c5:fc:24:b5:fe:b3:3c:
0b:7d:3e:04:56:27:7b:83:b9:65:ca:c5:56:16:7b:
d2:5f:b0:e7:d8:56:63:71:1f:bf:fd:b2:b7:e5:76:
75:e5:ec:0d:fd:57:34:4e:96:8b:71:ac:56:20:41:
a9:a1:b5:8d:f0:48:21:4b:1d:4b:25:72:d4:66:99:
6a:2b:97:87:5a:2a:03:47:5d:27:78:55:10:89:d4:
aa:97:74:0b:6c:d8:fa:2c:e1:f1:5b:83:23:e6:cb:
db:71:70:27:db:78:67:77:7f:9e:3f:48:7c:55:42:
73:36:fb:ca:90:5e:4b:ed:35:a3:56:c1:53:16:4b:
51:17:37:ee:54:6f:f3:ef:c9:17:28:e8:df:d6:96:
fe:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DF:73:27:42:B4:A8:2E:F4:3A:BB:73:11:42:6F:7D:E9:CF:89:62
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/FN9zJ0K0qC70OrtzEUJvfenPiWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.235.0/24
213.109.155.0/24
Signature Algorithm: sha256WithRSAEncryption
81:67:fd:21:43:2b:97:70:c7:0f:c2:23:92:6e:f5:5c:c5:4b:
e1:d0:8a:d3:de:f6:c9:73:dc:a5:9a:c9:88:16:36:ce:93:03:
86:1c:8e:68:ca:b8:fa:cd:f7:2b:67:e8:11:eb:de:77:1c:d8:
3f:3a:86:a5:92:0d:f5:d0:78:3a:77:83:8e:8f:30:73:a3:b5:
58:fa:4f:ad:3d:bb:46:a3:f7:ac:90:8f:8d:5b:3b:19:82:73:
d9:0c:e1:49:f2:9f:f6:5c:ec:37:65:ec:06:49:6c:5a:b9:39:
17:67:a2:dc:cc:7d:5b:8a:59:67:3e:f3:cd:9b:a8:f0:a0:6d:
af:c0:58:89:b2:33:d2:aa:80:19:05:5c:d5:f9:c6:08:02:f8:
96:d1:89:a7:04:ef:c8:38:b1:f0:f7:fe:bc:62:75:b7:84:38:
dd:cb:36:73:95:49:94:cb:21:e0:aa:d1:f3:18:95:a5:19:fe:
7a:40:74:c9:b2:a6:b6:d2:37:22:18:cb:1d:b6:90:f0:13:72:
5f:f1:c2:67:73:60:94:d7:d7:06:0e:8f:90:48:53:3a:7e:8f:
26:09:06:68:98:13:2d:5a:7d:43:59:f2:32:35:5f:58:a2:88:
8a:42:b9:3f:f0:77:5e:12:fb:fc:bb:06:40:68:f1:c0:2a:dd:
21:fa:e3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org