Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/h6DZsParcUFraNyATlfNePhB0Co.roa
File: h6DZsParcUFraNyATlfNePhB0Co.roa (raw, json)
Hash identifier: /1bS8cAK0fhrkNlojd60Ir+miWQEZ3+weVhm4oUPq8M=
Subject key identifier: 87:A0:D9:B0:F6:AB:71:41:6B:68:DC:80:4E:57:CD:78:F8:41:D0:2A
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 0187B8B8570FDC91F541D9194F01123C99FE
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/h6DZsParcUFraNyATlfNePhB0Co.roa
Signing time: Tue 25 Apr 2023 14:01:41 +0000
ROA not before: Tue 25 Apr 2023 14:01:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2723
IP address blocks: 213.198.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b8:b8:57:0f:dc:91:f5:41:d9:19:4f:01:12:3c:99:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Apr 25 14:01:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87a0d9b0f6ab71416b68dc804e57cd78f841d02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:68:6b:2c:ab:50:0c:db:63:55:06:07:7e:4e:
a8:2b:e7:81:cb:a5:b2:2c:ee:2c:f1:8f:f5:f6:ee:
26:70:c2:81:12:49:c1:31:d3:22:fa:d3:6d:a2:0d:
10:30:51:39:cc:41:18:12:7b:cc:fb:58:49:f2:51:
42:c5:29:50:b9:ef:53:da:09:9e:c1:be:38:15:ff:
4a:1b:eb:f1:24:12:31:4a:ac:c9:ab:fb:d6:be:30:
dc:fb:1b:eb:d0:51:18:65:40:a1:ba:fc:5e:d5:78:
67:b5:2a:54:a4:6d:70:24:52:9a:82:4a:ea:fb:bd:
e7:55:18:43:61:d5:c1:86:1c:65:dd:a0:1f:0b:ad:
7e:c0:14:20:bf:bf:8f:31:af:6b:91:d4:7b:44:54:
e0:31:09:b6:b4:fd:d3:d4:c7:d9:32:3d:02:51:4f:
f5:bf:a3:d5:d4:1c:21:2e:29:a4:20:e8:5a:20:a4:
3c:fc:33:c5:70:ac:28:6e:af:74:33:5a:b9:a0:f5:
bd:0c:62:fa:dc:8f:51:ea:e0:fe:27:b6:e1:5b:75:
7f:b5:28:da:14:32:36:ed:85:e0:44:23:4d:82:69:
8e:fe:51:11:47:54:c3:e2:ca:58:9f:e3:bd:64:7f:
6d:96:b8:5b:27:00:85:33:64:26:01:7b:b6:d1:b2:
3b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A0:D9:B0:F6:AB:71:41:6B:68:DC:80:4E:57:CD:78:F8:41:D0:2A
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/h6DZsParcUFraNyATlfNePhB0Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.198.50.0/24
Signature Algorithm: sha256WithRSAEncryption
99:6b:8e:1a:5d:79:eb:c8:ae:3f:a8:9b:8b:06:c1:1a:3c:59:
99:62:d4:15:f5:f0:e3:34:89:03:c6:9f:a6:cc:3d:1a:ff:3e:
e3:9c:54:96:be:0f:83:db:17:d9:4a:22:ee:bb:5a:c6:d1:0e:
6d:f1:47:f8:66:e2:7a:c5:84:91:a6:c5:a3:96:19:70:c6:4b:
ba:b7:28:6f:04:87:01:c4:13:c1:0e:3a:54:4c:7d:d3:79:94:
6e:19:42:c0:ea:e0:5d:a9:5c:4f:7f:ca:42:58:e3:b3:21:df:
e7:4f:bd:08:cd:76:6f:e8:72:5d:63:e7:96:41:81:51:85:9f:
e5:ec:6e:09:fa:45:6e:d7:1a:7d:c9:c6:49:99:91:ee:2c:b0:
1d:2c:22:2d:2f:4f:45:31:80:ee:40:76:3d:90:f8:90:e3:b8:
6a:af:3e:8c:c3:b0:dc:19:7b:8c:00:27:b7:44:10:46:4e:67:
b8:50:11:e5:bc:7a:e1:c0:cf:37:64:da:fa:a2:6b:04:8a:a1:
c7:85:e0:bd:e3:ce:5c:4d:65:c0:40:ce:d6:fe:cb:66:b8:b4:
5b:c6:5b:92:2d:3d:a0:20:aa:6e:1f:c9:c0:8e:05:4d:71:dd:
77:76:29:cf:0a:95:ab:37:49:d8:b1:b8:b2:22:ad:d9:6f:9e:
56:e9:51:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:35:46 2024 by rpki-client on console-fra.rpki-client.org