Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/LV5Qu2e7ZIo_IqdTHNR9JVUaTYk.roa
File: LV5Qu2e7ZIo_IqdTHNR9JVUaTYk.roa (raw, json)
Hash identifier: 92xgX2jEVLv0NELt/W0PkzktKfnLup3pa9AXpVJVwVw=
Subject key identifier: 2D:5E:50:BB:67:BB:64:8A:3F:22:A7:53:1C:D4:7D:25:55:1A:4D:89
Certificate issuer: /CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Certificate serial: 018CC6B9051F9C27270835C4FFF9CB0F4EBF
Authority key identifier: 74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/LV5Qu2e7ZIo_IqdTHNR9JVUaTYk.roa
Signing time: Mon 01 Jan 2024 20:31:03 +0000
ROA not before: Mon 01 Jan 2024 20:31:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212190
IP address blocks: 213.232.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Apr 2024 13:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:05:1f:9c:27:27:08:35:c4:ff:f9:cb:0f:4e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Validity
Not Before: Jan 1 20:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d5e50bb67bb648a3f22a7531cd47d25551a4d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:eb:64:c1:8b:71:cb:2d:40:84:34:3d:f6:5f:
03:05:e3:f9:da:66:63:73:ca:b3:31:c5:91:b7:bc:
4d:e1:8b:36:f7:9c:c2:14:e1:36:1c:e8:ab:41:75:
f5:0c:82:bf:24:26:cc:0e:5e:dd:af:48:d7:b0:90:
12:2a:2a:f9:ea:f2:c9:e6:74:6a:5d:a8:24:14:7d:
ae:23:85:ce:82:ea:3b:78:71:46:d4:6b:74:29:3e:
dd:c8:e8:db:2f:a3:39:d6:89:f9:78:20:ee:d8:a4:
52:9c:ed:44:34:8f:a7:4b:d4:6c:82:ca:5d:17:0e:
45:0f:26:44:2a:dd:9d:15:49:6e:ff:d9:f2:a9:a0:
48:3b:a5:c4:60:cc:be:ca:4c:4e:07:1e:7a:e4:b5:
9c:c3:6f:60:d4:b6:31:4d:86:16:80:c7:ef:fb:23:
08:75:f8:53:44:27:11:3b:31:e4:31:87:e3:47:a7:
0b:10:91:2c:5c:cb:ed:72:ae:15:03:88:de:24:52:
a3:ba:78:e8:49:01:c2:cb:b7:78:48:91:f9:78:d0:
db:1c:18:cd:98:66:0e:ea:de:fa:d3:19:0a:c5:60:
99:bb:52:15:47:b5:52:df:6d:3a:bf:61:d8:f3:26:
4a:18:9e:50:ba:b1:d4:93:07:5d:06:c9:6a:bf:42:
0f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5E:50:BB:67:BB:64:8A:3F:22:A7:53:1C:D4:7D:25:55:1A:4D:89
X509v3 Authority Key Identifier:
keyid:74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/LV5Qu2e7ZIo_IqdTHNR9JVUaTYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.217.0/24
Signature Algorithm: sha256WithRSAEncryption
81:3d:8e:13:f4:15:6c:fd:a2:d9:06:e8:d1:46:33:c8:30:fe:
3b:27:2f:de:46:73:93:78:98:0c:5b:91:95:54:6e:12:de:15:
f5:fe:0f:b1:15:0a:ce:7c:2b:62:fd:33:12:ba:be:03:ee:74:
12:f0:e6:e4:fb:13:ba:70:fb:38:89:19:45:86:09:90:e6:f2:
61:a9:ce:d2:d6:4e:c9:4d:9e:55:d0:93:1b:37:62:33:0e:d5:
2c:3a:3a:de:bc:69:b7:a9:64:09:2a:2a:1d:13:2e:a5:26:92:
86:e6:bf:43:31:ce:61:c3:12:d2:5d:59:39:26:b2:ec:46:7a:
20:92:f6:42:22:db:19:be:54:6d:9b:63:29:e6:95:2f:99:15:
12:84:ef:62:fa:0a:a7:4d:90:ba:16:7c:d8:83:54:47:79:c0:
5d:06:77:92:b5:e7:c8:02:b2:68:6a:cd:09:00:3b:e2:5d:30:
6a:b9:3f:fa:f2:8f:0d:85:d0:1e:05:87:1f:f0:2a:f8:94:0b:
59:97:1f:46:45:6a:97:09:47:e9:a8:d4:5e:6c:fb:2e:3f:3e:
18:d3:7d:1f:3f:47:68:81:35:f4:06:37:dd:5c:de:92:35:35:
3e:b3:7b:2c:b7:68:55:f3:99:09:62:35:17:22:b0:52:2d:69:
c2:d7:26:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:21 2024 by rpki-client on console-ams.rpki-client.org