Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/00fe6e-1476-4288-8d15-9d4ae9d00c2e/1/GiLvbtwqI8U1Sbg6vTYhCGR4wPE.roa
File: GiLvbtwqI8U1Sbg6vTYhCGR4wPE.roa (raw, json)
Hash identifier: +2UgBth0LTsnR7XmSki3wsYdCZ4AV+SVXNgpULs2LVQ=
Subject key identifier: 1A:22:EF:6E:DC:2A:23:C5:35:49:B8:3A:BD:36:21:08:64:78:C0:F1
Certificate issuer: /CN=b6307b828ffc8515634ce97ae504f5a529cd2701
Certificate serial: 01856FC26C33542946C6E18601C5074EB76A
Authority key identifier: B6:30:7B:82:8F:FC:85:15:63:4C:E9:7A:E5:04:F5:A5:29:CD:27:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjB7go_8hRVjTOl65QT1pSnNJwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/00fe6e-1476-4288-8d15-9d4ae9d00c2e/1/GiLvbtwqI8U1Sbg6vTYhCGR4wPE.roa
Signing time: Sun 01 Jan 2023 23:54:50 +0000
ROA not before: Sun 01 Jan 2023 23:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57844
IP address blocks: 213.232.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:6c:33:54:29:46:c6:e1:86:01:c5:07:4e:b7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6307b828ffc8515634ce97ae504f5a529cd2701
Validity
Not Before: Jan 1 23:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a22ef6edc2a23c53549b83abd3621086478c0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:62:09:d7:5f:e4:58:c2:25:62:7b:39:02:49:
35:eb:4c:80:cf:ed:f7:cd:c3:f9:96:60:e3:c8:74:
8e:59:8d:da:c6:eb:f1:df:70:ca:ef:2a:97:09:db:
5f:7f:1e:2e:0f:66:fc:72:3f:ac:5f:39:ae:67:a8:
06:cd:20:a6:8f:3a:4b:aa:4a:14:44:2c:80:87:ff:
39:68:86:60:d5:10:3d:11:a1:7d:47:16:01:e0:a9:
85:17:3e:6d:c8:9d:45:70:58:19:4b:ae:88:38:77:
c1:1e:f9:24:60:97:16:d7:c5:f5:ce:79:76:c5:82:
16:46:ac:8d:ce:5b:6a:26:d8:84:43:eb:c8:7d:3c:
31:b3:74:51:c3:63:d8:be:0d:4d:64:51:04:41:c6:
f3:05:3c:9d:0c:35:e5:db:58:3a:3c:34:28:76:4d:
4c:8c:65:af:d9:39:64:77:cc:7a:b7:7f:c2:83:44:
a8:b2:36:1f:9e:36:c6:06:90:82:82:fd:3e:5c:6f:
95:85:15:65:03:a4:b5:d4:b3:a1:1f:3d:ff:dd:1b:
b9:33:66:32:0c:92:ff:6b:87:56:4b:fb:0f:60:f7:
2a:1d:a4:eb:b7:f5:18:0e:7e:bf:7b:1d:b8:ed:f5:
7f:8e:8a:c8:f7:4c:be:9c:7c:ae:e3:98:ca:f4:2f:
aa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:22:EF:6E:DC:2A:23:C5:35:49:B8:3A:BD:36:21:08:64:78:C0:F1
X509v3 Authority Key Identifier:
keyid:B6:30:7B:82:8F:FC:85:15:63:4C:E9:7A:E5:04:F5:A5:29:CD:27:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjB7go_8hRVjTOl65QT1pSnNJwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/00fe6e-1476-4288-8d15-9d4ae9d00c2e/1/GiLvbtwqI8U1Sbg6vTYhCGR4wPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/00fe6e-1476-4288-8d15-9d4ae9d00c2e/1/tjB7go_8hRVjTOl65QT1pSnNJwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.236.0/24
Signature Algorithm: sha256WithRSAEncryption
19:6d:2f:9f:b0:da:80:46:6c:ee:d2:b1:1f:c0:eb:7f:39:ca:
38:bd:89:ec:f9:75:63:f3:e8:34:a5:53:ac:af:02:ef:87:90:
8a:bc:38:cc:3b:7d:3c:f2:f7:ba:c0:88:e0:32:19:9c:31:b0:
44:4b:1e:88:29:02:52:e8:61:7a:17:94:58:e5:0f:38:19:9f:
23:e5:07:63:a8:70:4a:4e:03:db:8e:03:08:2c:e6:dd:b4:8a:
9b:cd:b9:33:9c:6f:fb:7f:05:e0:44:10:9b:ca:a5:78:04:a1:
a1:0d:36:88:96:fa:b2:43:8c:c6:a5:8e:79:cd:91:37:ab:f7:
3d:bd:35:26:6d:f8:f1:d2:9e:15:8f:75:66:c6:6e:7d:0d:f5:
09:42:65:c2:68:f6:77:e3:c0:04:2e:d1:53:d3:96:8c:62:d7:
58:03:c9:3f:a1:59:df:40:c5:88:0e:cc:e7:56:ec:e3:82:3c:
f3:c3:4e:ce:ba:91:3a:64:d4:86:8c:53:83:b9:9f:52:d9:af:
4a:a2:03:6a:7f:da:eb:10:32:ae:0d:28:db:40:85:1c:d1:35:
33:1e:f4:d1:c7:5a:92:d6:3a:22:be:8e:e3:5d:67:17:36:1f:
ff:e9:57:01:ec:d0:35:ae:1f:b4:31:7a:27:91:a6:ef:a0:9d:
be:15:02:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:44 2023 by rpki-client on console-ams.rpki-client.org