Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/Las3YwPDnoCqUjbFwNwT2wVbEL0.roa
File: Las3YwPDnoCqUjbFwNwT2wVbEL0.roa (raw, json)
Hash identifier: PNLtLLjVvtyta/cf8PJ2RzTPhSHd81st+2xkML6yfl0=
Subject key identifier: 2D:AB:37:63:03:C3:9E:80:AA:52:36:C5:C0:DC:13:DB:05:5B:10:BD
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 01856F0B659F72129251BCD3377C4B68AEE3
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/Las3YwPDnoCqUjbFwNwT2wVbEL0.roa
Signing time: Sun 01 Jan 2023 20:34:55 +0000
ROA not before: Sun 01 Jan 2023 20:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60162
IP address blocks: 213.128.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:65:9f:72:12:92:51:bc:d3:37:7c:4b:68:ae:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Jan 1 20:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2dab376303c39e80aa5236c5c0dc13db055b10bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:14:c3:dc:a0:6c:95:3f:f2:0e:bd:d4:66:
ee:de:c0:da:b2:f0:65:93:c8:49:5d:46:7e:56:10:
02:41:eb:ee:7f:34:c2:b5:09:96:34:a1:03:f5:02:
5c:3c:f9:eb:8e:8a:07:4f:44:c5:b6:d0:2b:d6:4d:
eb:b7:29:6c:11:a1:e4:10:43:c3:f3:0b:0d:31:2b:
db:66:f7:ba:24:80:4f:32:77:0e:3e:d9:8e:36:8f:
4f:33:6d:cc:e4:ee:2d:8a:e7:74:cf:d4:81:f9:6b:
6a:4e:c1:f0:7d:38:39:3f:59:34:8d:54:84:2d:65:
3d:a4:25:ec:0a:e3:32:49:8e:91:2f:fc:2e:92:c4:
88:23:5e:18:2b:db:4e:6f:18:9a:60:53:56:ff:62:
67:72:4a:9e:11:87:d6:cf:01:93:52:d0:1b:9d:56:
18:b9:88:74:3e:fa:2c:d7:80:58:da:d5:db:b3:ee:
64:9d:08:2f:09:00:05:97:b9:f0:6b:58:86:fb:44:
99:1b:cc:1f:70:37:4e:0b:b6:3a:3f:a7:c6:e2:50:
df:5d:8c:6c:e1:e9:78:db:66:45:f1:1d:7d:b3:91:
76:c2:1d:23:e3:13:4a:69:53:ba:55:14:6f:43:f4:
cb:8a:ec:f2:e7:11:88:32:40:63:2b:09:a0:74:a6:
21:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AB:37:63:03:C3:9E:80:AA:52:36:C5:C0:DC:13:DB:05:5B:10:BD
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/Las3YwPDnoCqUjbFwNwT2wVbEL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.128.208.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:f0:2d:24:69:e5:02:9e:65:43:c6:9e:74:0e:ef:54:25:10:
73:19:50:d9:83:1c:38:7c:6f:10:e3:ae:e5:36:4e:e0:81:6f:
69:ce:00:77:bd:eb:7b:22:9d:fd:58:dc:b2:74:d3:87:d6:4a:
25:dd:18:f5:3c:2d:8f:de:79:95:13:5b:2f:46:4c:0e:9b:bd:
1b:33:52:71:24:a8:f4:0b:fa:d6:d9:dd:00:6a:28:8d:3a:d9:
9c:41:73:f3:ef:e8:ad:cc:69:7a:a5:92:c9:b7:b9:2a:3e:1f:
d6:c1:92:bb:dc:c0:0e:b7:33:50:b4:24:b0:5d:fe:dc:4b:4b:
0f:39:21:9e:57:cd:a0:6f:9c:6c:6f:66:da:1b:bd:6f:df:72:
8b:2f:f8:ce:71:34:a0:f1:95:35:ba:eb:34:63:36:89:a4:4a:
b6:35:43:7b:20:6f:fc:a5:18:e7:9a:d8:38:0d:e9:be:11:db:
42:3f:ca:f2:ac:f9:93:67:f6:48:ab:65:0d:a6:a0:e5:cf:fa:
e9:d4:20:8c:dd:70:ac:49:90:0c:d9:d7:6f:c3:fc:70:11:8d:
a5:37:22:9e:34:d9:f9:fa:b4:bd:14:03:0a:cd:3e:0a:24:8d:
9d:e9:61:35:52:2d:28:9e:22:6c:c0:da:81:c5:e1:59:1a:47:
08:ea:93:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:28 2024 by rpki-client on console-ams.rpki-client.org