Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/T-NkPrZpjrbF7nOu9luIW0OEyqE.roa
File: T-NkPrZpjrbF7nOu9luIW0OEyqE.roa (raw, json)
Hash identifier: aRcrXyxswWS86CFS7vPATDsA4ML4/F9H3aGunDslQkY=
Subject key identifier: 4F:E3:64:3E:B6:69:8E:B6:C5:EE:73:AE:F6:5B:88:5B:43:84:CA:A1
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 018B81DD74D3B4AE02408B3FEBF6419A20A7
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/T-NkPrZpjrbF7nOu9luIW0OEyqE.roa
Signing time: Mon 30 Oct 2023 18:34:16 +0000
ROA not before: Mon 30 Oct 2023 18:34:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 213.109.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:81:dd:74:d3:b4:ae:02:40:8b:3f:eb:f6:41:9a:20:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Oct 30 18:34:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fe3643eb6698eb6c5ee73aef65b885b4384caa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3b:10:b5:af:81:fb:66:fd:72:bc:ba:e5:a9:
51:54:8b:d3:a1:d9:56:e0:4f:e5:4b:a9:78:74:46:
dc:56:4c:6e:69:fc:3f:8c:40:64:7b:90:f6:6b:75:
80:9a:d3:82:c9:c4:f8:d0:9a:eb:53:f7:a7:e7:2f:
50:39:c3:24:0b:50:cb:a9:ab:8c:23:c6:eb:e4:2b:
54:4e:93:78:0f:24:60:c7:05:38:2f:37:bf:28:a4:
b0:cf:91:3b:6f:9c:51:20:9c:f5:47:bc:6c:a5:f6:
15:49:f5:8d:87:4a:37:86:dc:9b:dc:a1:f8:49:82:
40:1f:68:14:e3:1a:a2:8f:36:45:96:05:12:a4:8d:
c5:d4:db:3e:d3:2e:c4:21:5d:c0:69:2b:3f:79:4e:
72:f6:6e:aa:4b:60:12:82:aa:99:4e:76:7e:c0:74:
09:22:9b:94:83:ac:4b:12:e8:b5:e9:52:a6:e6:b1:
2f:33:6a:e8:af:16:b7:e2:75:71:75:ba:d2:e9:b7:
38:ef:14:7f:e6:ba:ea:94:c7:33:30:e7:50:47:c1:
16:61:52:8d:37:f9:37:ed:66:e6:2f:ce:46:2b:d5:
be:37:b1:fa:ca:a4:5f:ad:2d:c4:f9:98:66:d7:a5:
de:d5:dd:50:9d:d7:15:75:84:48:6f:da:47:38:dd:
52:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E3:64:3E:B6:69:8E:B6:C5:EE:73:AE:F6:5B:88:5B:43:84:CA:A1
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/T-NkPrZpjrbF7nOu9luIW0OEyqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.152.0/24
Signature Algorithm: sha256WithRSAEncryption
68:be:5a:62:c5:df:71:0b:1c:09:87:6b:cf:d8:4d:44:35:65:
f2:f7:8e:fd:49:28:95:57:40:38:54:3f:cc:49:df:1e:ef:47:
72:0c:e8:ce:87:8d:f1:47:a0:8f:86:b8:d3:31:78:f5:5f:4f:
92:36:e8:8c:96:3f:82:79:7e:a4:58:3f:b7:fc:e2:1a:58:d5:
b5:92:5a:e2:0c:7e:8e:9d:d5:4b:71:0e:ee:40:38:3d:be:9e:
d1:3b:27:b4:f7:34:6e:82:9e:f4:02:9d:be:7c:dd:3d:f6:3b:
81:49:9c:53:22:9d:b6:f1:97:26:ea:09:2b:a5:a0:03:6b:60:
89:5f:3b:a6:89:13:e3:35:d9:95:ea:25:dd:3f:36:ec:d5:b5:
94:30:8f:3a:f9:d4:15:d6:a6:c1:3a:ce:c0:1d:0f:f3:0c:09:
57:b4:dd:f9:26:df:cd:f6:de:83:8e:0f:f2:66:17:a4:ab:1b:
b7:65:b1:f8:33:3e:39:6b:4a:32:9f:85:7e:6e:35:fe:35:c7:
80:a6:5c:23:57:82:a7:58:29:ee:95:5d:3a:03:27:8a:37:87:
4b:2e:f7:0d:d2:dd:39:75:c6:5f:f1:d7:9c:3d:c7:2d:b6:93:
21:e4:c0:aa:7a:e6:a4:38:f2:95:d9:fb:81:30:19:2f:68:1f:
14:86:83:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:24 2024 by rpki-client on console-ams.rpki-client.org