Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Rh7gKmpdSn94EuVC1NrRVAMyvI0.roa
File: Rh7gKmpdSn94EuVC1NrRVAMyvI0.roa (raw, json)
Hash identifier: NO/U8VIyXi+QgqTFcjM8J7Q2H7SFgEjJLfGXgRsH6oM=
Subject key identifier: 46:1E:E0:2A:6A:5D:4A:7F:78:12:E5:42:D4:DA:D1:54:03:32:BC:8D
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF984F879221C3E4F0C3E13A9CF57C5
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Rh7gKmpdSn94EuVC1NrRVAMyvI0.roa
Signing time: Mon 02 Jan 2023 00:55:01 +0000
ROA not before: Mon 02 Jan 2023 00:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200422
IP address blocks: 213.169.58.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:84:f8:79:22:1c:3e:4f:0c:3e:13:a9:cf:57:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=461ee02a6a5d4a7f7812e542d4dad1540332bc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c1:b0:7c:be:c1:04:ef:2e:96:bb:41:48:c5:
60:0d:5f:12:89:01:bc:5c:b0:5d:6c:c1:4e:82:38:
79:51:8e:d1:83:02:62:a4:6b:6b:fc:2b:3c:1a:46:
da:8d:90:b8:3c:38:60:08:08:4f:7a:7e:ac:ca:f7:
13:44:36:85:43:05:99:11:0f:c9:50:c5:e7:e4:86:
dd:8a:ca:e9:0e:b7:80:1f:1e:46:5e:e6:2f:41:f3:
63:f5:02:f2:c4:d6:bf:76:22:37:ef:dd:b6:7f:57:
08:a8:b1:e5:15:e9:f4:9e:14:53:e3:de:ba:33:3d:
bb:00:d3:84:44:a4:ed:44:fd:8d:8b:82:ca:69:80:
4a:c5:a4:39:54:46:b8:7c:9c:77:aa:e1:96:ce:0c:
19:12:b5:0a:55:5a:d7:7c:a7:30:d7:58:fe:55:82:
ed:3e:b8:4d:a3:2e:14:72:d8:4b:fb:f3:60:c1:cc:
1c:21:a6:f9:96:2c:24:b0:1f:f8:12:84:c9:57:7a:
66:fa:b9:75:e5:e5:2a:39:e6:f9:b4:c1:71:75:2f:
8a:b2:6d:d6:8f:9e:6f:57:ca:24:9f:0a:ac:c1:50:
be:6e:65:f0:5a:a2:a0:37:2e:ca:74:fd:30:6c:69:
17:c2:82:37:e8:a7:1e:5e:62:ce:b9:60:2a:0f:c8:
aa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1E:E0:2A:6A:5D:4A:7F:78:12:E5:42:D4:DA:D1:54:03:32:BC:8D
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Rh7gKmpdSn94EuVC1NrRVAMyvI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.169.58.0/24
Signature Algorithm: sha256WithRSAEncryption
76:fe:bc:16:72:83:35:1b:78:b0:b6:35:7e:03:70:a8:5c:f7:
a1:e5:38:ee:dc:d8:63:48:f4:36:b8:00:3b:87:5a:fa:0e:37:
92:8a:40:4c:97:bf:9e:0e:29:1a:4e:1a:d2:1b:7c:30:03:ca:
51:34:45:2f:0e:63:bc:16:89:35:8d:99:6f:fa:34:cc:ee:5c:
74:90:e6:bf:ff:d8:6d:c4:2f:c9:9f:22:e0:4c:b2:5b:66:29:
15:40:e9:6f:a8:16:de:89:e5:e8:93:96:b0:d0:69:51:d2:a0:
a0:cd:3d:03:5d:af:41:5c:de:29:4f:81:b3:1f:94:f6:cc:9b:
0c:de:42:f8:02:a1:f6:00:77:4c:20:2b:fa:ad:25:ca:a3:4c:
b2:02:08:9b:82:87:61:fe:77:87:a2:bd:4c:a7:22:36:0a:bf:
a8:c9:54:52:b7:c7:a5:bd:e5:05:83:65:c9:31:c5:36:2e:f4:
55:b3:3f:75:5f:ee:1d:42:32:32:86:30:de:e7:c5:7d:4e:b6:
73:11:96:e2:5c:e6:77:2e:21:7e:b8:79:2c:39:25:51:af:64:
f1:8c:6c:f4:4a:56:68:0c:39:ec:f0:b1:09:dc:8e:b3:03:8c:
e9:a0:23:6e:a6:2d:31:4a:63:89:b9:eb:71:5a:b9:fe:93:18:
63:68:e1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:44 2024 by rpki-client on console-ams.rpki-client.org