Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/00fe6e-1476-4288-8d15-9d4ae9d00c2e/1/iW_7HIaN5f4I78n0AzLP0eCcLoA.roa
File: iW_7HIaN5f4I78n0AzLP0eCcLoA.roa (raw, json)
Hash identifier: l8fAVkYr880nIp/EWD/Ap274U67gEYKZUhXoGVbotDc=
Subject key identifier: 89:6F:FB:1C:86:8D:E5:FE:08:EF:C9:F4:03:32:CF:D1:E0:9C:2E:80
Certificate issuer: /CN=b6307b828ffc8515634ce97ae504f5a529cd2701
Certificate serial: 0187983373601362249646746B074890D81D
Authority key identifier: B6:30:7B:82:8F:FC:85:15:63:4C:E9:7A:E5:04:F5:A5:29:CD:27:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjB7go_8hRVjTOl65QT1pSnNJwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/00fe6e-1476-4288-8d15-9d4ae9d00c2e/1/iW_7HIaN5f4I78n0AzLP0eCcLoA.roa
Signing time: Wed 19 Apr 2023 06:28:41 +0000
ROA not before: Wed 19 Apr 2023 06:28:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60912
IP address blocks: 213.232.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:98:33:73:60:13:62:24:96:46:74:6b:07:48:90:d8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6307b828ffc8515634ce97ae504f5a529cd2701
Validity
Not Before: Apr 19 06:28:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=896ffb1c868de5fe08efc9f40332cfd1e09c2e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:e2:87:26:22:79:87:1c:65:68:66:47:77:
c3:3f:39:79:ed:74:e7:06:04:a2:cb:3b:2d:12:3f:
b8:29:8d:f8:7f:13:31:27:af:98:50:56:31:fd:f5:
06:23:b8:ff:f3:68:18:74:e0:a1:51:10:5f:90:12:
f2:bb:e6:73:93:eb:55:4e:47:27:50:8d:7b:dc:36:
a0:e0:63:b1:bf:dd:22:f1:91:8c:60:10:c4:8d:b8:
43:fe:87:8b:57:1f:5c:3f:b4:99:75:da:90:79:03:
63:65:3a:3f:9c:f9:ce:de:9a:50:8c:11:46:c7:7b:
56:0a:df:d1:62:cd:9e:c9:a4:c7:ce:5d:3d:42:21:
4c:9f:53:e2:bd:9a:e6:0f:49:7f:15:5a:14:32:3c:
4d:20:fe:44:99:05:4d:4d:de:8d:05:a1:29:3b:da:
63:90:9a:67:ee:4c:a7:7d:5b:05:e7:e5:ab:3d:de:
7c:0f:e9:d5:0a:e4:cb:01:d4:c4:1c:b7:56:19:fa:
a4:9b:56:00:7b:83:dd:43:09:57:50:4f:20:c7:41:
20:f0:b2:39:4a:36:46:ff:2a:2d:75:a4:00:dd:5a:
41:da:a1:3b:00:8f:10:1b:7a:cd:c2:a0:2f:8c:15:
21:d6:e8:51:e6:16:1f:48:59:39:5b:20:b9:25:a5:
a7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6F:FB:1C:86:8D:E5:FE:08:EF:C9:F4:03:32:CF:D1:E0:9C:2E:80
X509v3 Authority Key Identifier:
keyid:B6:30:7B:82:8F:FC:85:15:63:4C:E9:7A:E5:04:F5:A5:29:CD:27:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjB7go_8hRVjTOl65QT1pSnNJwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/00fe6e-1476-4288-8d15-9d4ae9d00c2e/1/iW_7HIaN5f4I78n0AzLP0eCcLoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/00fe6e-1476-4288-8d15-9d4ae9d00c2e/1/tjB7go_8hRVjTOl65QT1pSnNJwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.236.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:cb:51:52:3b:7d:f0:a8:ab:2c:34:ee:61:c0:88:60:2f:57:
c8:f4:dc:cc:01:22:5c:7e:02:4a:02:22:b7:a8:f4:e1:5d:3b:
43:51:74:7d:a4:c0:de:b4:b8:99:b5:b1:42:9b:79:05:18:c0:
d5:20:53:d8:c1:c7:22:11:57:92:81:43:59:92:7f:15:56:84:
df:6c:a6:a4:9c:75:4b:85:3e:3b:8e:65:2a:f5:ba:60:32:e3:
79:33:a5:ec:08:49:f8:5b:e7:f1:0c:94:a6:17:12:2e:e7:4f:
11:04:89:d2:0c:c8:27:2e:4d:a8:08:4e:07:34:4d:31:c4:d1:
d7:54:a8:f1:5b:3b:51:6e:f1:e5:d5:d5:e6:ed:4c:90:8b:a0:
98:47:4a:b7:e6:51:38:29:a4:ae:a8:fa:af:fe:5b:b6:4b:3e:
94:7e:9c:51:ba:12:ad:b2:69:1a:df:3b:98:73:86:2a:e8:bd:
2e:f8:1a:43:47:b3:03:3a:42:60:51:30:d6:a5:49:29:89:72:
e1:dc:02:a1:41:04:06:d4:fc:80:19:1c:a7:58:d1:db:6d:ac:
b7:02:91:ea:37:15:5a:df:8a:f7:c0:5f:13:18:2d:65:b2:a6:
b4:ef:64:ae:08:08:61:cf:6a:5c:93:86:70:05:04:ce:63:34:
a9:41:0a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:44 2023 by rpki-client on console-ams.rpki-client.org