Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/EXVu6PbmNhIB0yWO4vE4SCBhD0w.roa
File: EXVu6PbmNhIB0yWO4vE4SCBhD0w.roa (raw, json)
Hash identifier: CryRqh/XXI60yKccSQOWixHrk1IFondcnkrgb/r09nY=
Subject key identifier: 11:75:6E:E8:F6:E6:36:12:01:D3:25:8E:E2:F1:38:48:20:61:0F:4C
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 0187B7DAD32942DD68038511C40990ED47E9
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/EXVu6PbmNhIB0yWO4vE4SCBhD0w.roa
Signing time: Tue 25 Apr 2023 09:59:43 +0000
ROA not before: Tue 25 Apr 2023 09:59:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201867
IP address blocks: 213.198.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:da:d3:29:42:dd:68:03:85:11:c4:09:90:ed:47:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Apr 25 09:59:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11756ee8f6e6361201d3258ee2f1384820610f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5d:1e:81:bd:ef:20:83:e2:0d:50:9e:de:dd:
52:e6:0f:92:41:38:d2:ca:20:ca:28:9b:88:5a:03:
be:fe:56:7a:6e:5c:0e:5d:68:61:44:a5:06:d5:82:
95:b2:a7:0d:67:d7:25:40:d3:c7:4a:07:8c:24:da:
0d:4f:b5:7d:4c:4f:90:f3:ee:a3:3f:be:af:9d:5f:
5d:96:3d:f4:fd:1b:36:c3:8e:f5:50:ca:38:08:bb:
2a:42:10:ca:f8:23:9a:97:1f:35:fd:87:54:4d:9c:
20:27:31:a0:0f:61:67:28:2c:cc:a9:d1:b8:13:20:
50:95:b0:dc:56:fb:f9:b7:2f:f5:43:6d:d6:1a:8a:
3e:0c:53:97:3d:ba:d3:28:1d:a7:c2:8b:0c:73:15:
bc:d9:d5:75:37:10:28:b0:bc:0a:1c:c6:3c:ed:82:
68:7b:2d:68:e4:eb:18:80:ec:0f:54:30:0d:ab:99:
d5:2e:bd:83:92:0d:be:fd:e2:8f:6a:24:7f:c4:8e:
ac:66:f4:ca:bb:95:7b:ba:b4:f4:8b:ee:c8:c4:41:
29:2a:f5:4d:25:45:96:f4:d3:99:f1:e2:f0:96:d6:
92:01:8b:2b:0c:ab:a9:e8:99:3e:f7:8a:34:ea:0c:
5f:0a:9a:e1:65:48:76:66:e0:85:a2:22:6a:af:57:
09:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:75:6E:E8:F6:E6:36:12:01:D3:25:8E:E2:F1:38:48:20:61:0F:4C
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/EXVu6PbmNhIB0yWO4vE4SCBhD0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.198.29.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a4:5f:47:73:3f:2a:3e:41:92:99:24:d5:09:2d:57:83:2d:
54:72:dd:fb:fc:c1:bd:bd:51:77:0e:4b:54:56:cb:b8:b2:fd:
ce:4f:b1:d3:56:21:f7:8f:cf:73:68:e0:48:08:dc:fc:48:2b:
67:52:96:f4:69:37:c9:4d:62:21:54:b9:bd:c9:82:de:15:19:
c1:5e:73:a0:d1:0d:31:a1:84:58:22:b3:de:1d:f6:66:62:7e:
a2:cd:8e:83:79:07:d7:f4:50:95:ae:09:a4:0b:ac:8f:8c:05:
9b:8b:07:76:a0:d8:87:c3:25:f5:05:28:a3:7b:e1:2b:a8:d9:
c7:0c:91:b2:23:65:10:75:c6:6a:51:87:3b:88:16:8c:0b:78:
55:55:85:29:b3:61:20:ac:a4:d5:b6:fc:39:f3:d9:17:d9:8a:
e0:53:74:4b:72:45:c7:e3:0d:95:4d:44:7b:08:4e:a6:1c:33:
27:82:a9:6f:b1:bb:2e:a5:6f:be:cf:6a:0b:db:67:87:7c:0a:
02:20:c1:cc:1a:87:6e:93:2c:cf:ef:e0:59:c8:ad:36:b7:6b:
59:24:41:a2:9b:01:10:d0:04:fc:ce:1d:d2:8f:14:f1:37:98:
d1:61:96:5b:a3:86:cd:69:0a:aa:cb:8b:7f:34:c2:7e:7a:57:
f0:45:90:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:03 2024 by rpki-client on console-ams.rpki-client.org