Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/eW2FTvFEs7j1Jzgk8zyXTgqyBsk.roa
File: eW2FTvFEs7j1Jzgk8zyXTgqyBsk.roa (raw, json)
Hash identifier: nglsZS2PexWnKSXkMPMNN9GTBCKcRWgEbG9rsRNTMc8=
Subject key identifier: 79:6D:85:4E:F1:44:B3:B8:F5:27:38:24:F3:3C:97:4E:0A:B2:06:C9
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 018B1E2A132592842BC0A698EAF273810B7E
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/eW2FTvFEs7j1Jzgk8zyXTgqyBsk.roa
Signing time: Wed 11 Oct 2023 09:55:55 +0000
ROA not before: Wed 11 Oct 2023 09:55:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 212.24.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:2a:13:25:92:84:2b:c0:a6:98:ea:f2:73:81:0b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Oct 11 09:55:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=796d854ef144b3b8f5273824f33c974e0ab206c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:8e:13:7b:03:0c:20:09:f8:5f:2c:aa:51:
c4:50:25:db:16:b4:d8:23:44:c2:92:56:ae:de:97:
d3:4e:de:8c:6c:2d:9e:52:7f:1f:3b:c1:ae:e5:6a:
3e:d9:b3:97:79:d8:6e:70:0f:01:ed:7d:23:e8:20:
6d:92:42:2b:30:b6:bc:6f:cb:e7:82:c3:5c:19:68:
57:70:17:0b:22:fc:41:b1:be:01:87:7f:d8:a8:9c:
cc:bc:71:9c:2f:31:94:d7:78:14:4b:9e:15:c3:4b:
25:e8:f8:06:32:6c:aa:d7:cd:5c:b4:2a:d3:10:97:
aa:5d:91:fb:f6:a9:a7:17:43:48:f9:76:d8:ce:81:
b9:9e:4c:19:cd:e8:0f:b6:ab:10:be:51:90:d3:3c:
b3:ca:00:82:0c:4b:00:e2:30:d7:b6:3e:c7:96:b8:
32:d4:6c:dd:a4:fa:00:9e:3d:d7:e8:f9:f4:ca:69:
7d:42:c9:90:b1:dc:a7:c7:24:dd:cc:82:8f:b7:b1:
a8:2c:be:bb:8b:cc:83:b2:11:96:e1:ae:bb:f2:d6:
d1:41:9b:93:06:20:7b:e1:05:09:76:af:53:1d:4a:
63:38:0d:b0:8b:1f:48:71:31:f4:1f:7e:85:ff:47:
e6:90:b8:3d:56:bf:d2:6d:15:6d:c6:27:a4:e6:48:
c4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6D:85:4E:F1:44:B3:B8:F5:27:38:24:F3:3C:97:4E:0A:B2:06:C9
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/eW2FTvFEs7j1Jzgk8zyXTgqyBsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.113.0/24
Signature Algorithm: sha256WithRSAEncryption
60:1a:24:a3:f3:b8:24:95:af:af:a6:e0:7c:db:fa:24:c5:d6:
c0:c0:dd:6d:9e:84:5f:06:24:b2:40:80:57:fb:29:d1:bb:36:
ea:82:dc:ed:64:2e:d0:78:45:34:4d:0d:70:73:bf:41:3e:67:
e4:76:31:d6:34:37:36:99:2a:27:e7:3a:b0:45:3e:a6:67:f1:
fe:50:c7:4f:7a:bb:cf:f0:04:8b:07:7b:b2:5d:21:e0:ff:49:
e7:85:00:4b:97:05:5b:45:f5:12:c2:64:87:03:3b:fd:d8:ef:
1b:aa:b9:77:88:87:09:9f:d2:8c:99:1b:39:a5:24:a0:9f:e8:
c4:6d:b9:9f:0d:de:08:67:0e:28:c3:da:6c:7a:4f:c1:9f:80:
ab:f3:d5:10:5f:b2:14:0a:46:3a:22:b3:42:44:7f:d4:35:ba:
da:0c:36:91:1d:ea:51:eb:35:35:13:67:dd:2b:8b:91:30:5f:
e6:b8:8c:4f:e7:fc:50:71:e2:b4:bc:61:8d:36:51:08:75:a7:
10:45:ec:ec:9f:44:6f:ac:a5:bf:fb:8a:0f:85:c3:c0:c2:62:
5f:e9:bc:1b:84:2d:a2:fa:17:cb:be:16:11:6b:75:79:7c:ab:
ee:09:b1:37:d6:64:e2:f8:68:3b:a9:cf:5b:76:fe:30:dc:ca:
ad:b2:69:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 28 18:38:01 2023 by rpki-client on console-fra.rpki-client.org