Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/AUqpe3--AK-Ij8kmbzAXdLnRRBM.roa
File: AUqpe3--AK-Ij8kmbzAXdLnRRBM.roa (raw, json)
Hash identifier: mMZEBts/TLe8UcEOHe2uHpM2LGBjwvkTRxjeB58TfZ0=
Subject key identifier: 01:4A:A9:7B:7F:BE:00:AF:88:8F:C9:26:6F:30:17:74:B9:D1:44:13
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF98DB935C4C2E1BF4ACFA2C1F8FC6C
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/AUqpe3--AK-Ij8kmbzAXdLnRRBM.roa
Signing time: Mon 02 Jan 2023 00:55:03 +0000
ROA not before: Mon 02 Jan 2023 00:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206511
IP address blocks: 213.169.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:8d:b9:35:c4:c2:e1:bf:4a:cf:a2:c1:f8:fc:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=014aa97b7fbe00af888fc9266f301774b9d14413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:84:42:8d:06:ab:94:47:2d:2f:77:11:1b:be:
af:4f:6f:e1:29:73:34:f7:d3:ed:fd:64:04:36:2d:
33:a7:90:5d:a3:bf:65:9f:b2:12:87:16:28:80:06:
fe:46:f9:35:26:ba:6e:57:ce:27:82:e1:a3:a3:6b:
d2:c0:b9:25:40:fc:dc:b6:1f:c6:57:a0:84:17:95:
42:29:80:d1:71:36:cb:d9:42:b8:9a:df:84:c9:88:
fe:cf:8b:6d:d0:fe:a1:5e:3e:0c:e2:f2:93:44:22:
c3:bb:cd:89:a0:66:50:5f:c5:53:9f:29:0a:b6:20:
ec:d7:77:10:2b:16:47:09:de:99:19:ca:d2:cd:a2:
82:34:94:30:9e:d6:d6:ea:27:dc:fd:dd:99:8a:51:
9d:f3:b8:66:a5:95:29:0a:43:47:59:0c:8a:73:1c:
79:b5:54:11:b9:a5:67:98:bd:4e:67:c5:0e:3f:ba:
2d:ab:e9:db:93:16:32:62:10:cd:70:18:ef:64:0a:
7e:5b:a2:a6:2b:ee:ba:23:21:b3:d7:9f:b0:0a:c5:
4c:fc:3e:6d:f4:6a:2b:3f:63:79:2e:25:4a:e4:26:
c1:ef:5a:06:43:1c:cb:e4:4c:1e:23:b9:c6:3d:6e:
73:b7:b6:7e:31:bf:b6:91:dc:d3:bd:0e:da:43:02:
a3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4A:A9:7B:7F:BE:00:AF:88:8F:C9:26:6F:30:17:74:B9:D1:44:13
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/AUqpe3--AK-Ij8kmbzAXdLnRRBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.169.36.0/24
Signature Algorithm: sha256WithRSAEncryption
53:7b:4d:be:27:8a:ef:ef:9e:c8:07:c4:f7:67:e5:39:f2:92:
1a:29:fa:20:14:5e:d3:b2:7a:45:77:fd:4c:85:59:ec:61:be:
74:c5:a4:2d:8c:ee:53:11:88:83:b8:8d:89:3b:21:1d:7b:e3:
dc:ed:a1:96:9f:1c:14:66:03:e0:1c:3b:fc:ff:1a:84:00:d3:
0d:18:f5:5c:cf:b9:21:8a:da:39:5e:e3:96:79:1d:ad:3a:cf:
03:4f:ff:7c:6c:c2:b2:d7:f0:12:8c:b2:1e:1f:15:ec:9f:cb:
51:b7:78:b7:22:5d:75:51:77:62:b2:e3:c9:9c:68:ad:d6:24:
9a:88:eb:51:b6:eb:50:f3:1d:d6:02:ad:7b:d3:ae:84:bf:e7:
30:11:62:7c:20:d2:b0:86:7f:65:fa:9f:fb:88:aa:ae:51:4a:
ed:bf:fc:81:2f:5f:9c:af:64:4e:c4:e2:34:f5:53:59:95:f2:
80:94:d1:a9:d2:79:30:c1:02:eb:ba:13:ba:82:91:fd:98:fc:
b7:7f:f9:67:1c:23:5d:02:cd:69:18:cd:72:df:cf:a2:4f:e6:
7c:df:10:ba:10:f8:82:0f:1d:2b:b4:ca:64:e7:38:76:dc:c7:
c3:da:04:a8:f6:0d:5a:33:d5:f0:55:0f:79:46:69:86:91:9e:
2c:92:81:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:00 2024 by rpki-client on console-fra.rpki-client.org