Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/e20njvJYALb4xBoVpXEnBQuPJR8.roa
File: e20njvJYALb4xBoVpXEnBQuPJR8.roa (raw, json)
Hash identifier: Hou/R7ZfhK3MW++CTHTGfcat2HNiiIPH9/2PFkOHkhw=
Subject key identifier: 7B:6D:27:8E:F2:58:00:B6:F8:C4:1A:15:A5:71:27:05:0B:8F:25:1F
Certificate issuer: /CN=52056867e4d2885e99b549ed6fb786330adf8f44
Certificate serial: 01856C65C28BD72F2B74D3AD038F3260EEDD
Authority key identifier: 52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/e20njvJYALb4xBoVpXEnBQuPJR8.roa
Signing time: Sun 01 Jan 2023 08:14:46 +0000
ROA not before: Sun 01 Jan 2023 08:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30876
IP address blocks: 213.180.156.0/23 maxlen: 23
213.180.156.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:c2:8b:d7:2f:2b:74:d3:ad:03:8f:32:60:ee:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52056867e4d2885e99b549ed6fb786330adf8f44
Validity
Not Before: Jan 1 08:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b6d278ef25800b6f8c41a15a57127050b8f251f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:04:5c:45:3c:c9:6c:80:a7:d4:10:e5:b9:2c:
ed:a8:b7:e9:d9:70:3f:b3:c3:12:1a:84:9b:f3:e4:
6e:7a:f9:9d:36:67:2d:be:47:35:30:22:c5:34:10:
ee:1e:58:7d:ef:1a:21:45:f6:4b:2c:d1:57:e4:da:
5c:ec:85:f8:95:e1:1a:33:c3:a8:85:7e:5e:db:5a:
e2:04:44:8d:0b:0b:56:53:6b:c7:85:92:48:94:3f:
47:e4:e2:1a:e8:22:31:ab:32:18:05:bf:7d:d2:fe:
23:c0:77:6e:bf:5f:be:48:36:86:47:b1:b3:fe:45:
4c:a8:8d:0c:7a:50:c7:83:bc:1b:7e:03:fc:c0:07:
f2:23:af:78:37:35:93:9d:de:df:65:91:35:f9:ab:
02:08:aa:8b:97:05:33:71:22:a0:61:f3:fd:66:54:
4d:f9:31:f9:cb:b7:57:e7:ca:e4:fe:85:80:41:34:
6e:17:9a:9b:54:6d:e7:19:97:39:58:ce:bd:03:e3:
6a:8c:41:e8:c1:34:0c:cd:57:8a:74:5e:2b:e2:18:
aa:54:b8:69:9d:30:e5:05:d7:8d:38:d6:3f:c5:73:
58:07:bd:82:5b:85:73:ad:e4:80:eb:a2:ba:8c:2c:
d4:a8:a6:02:28:67:fa:99:e8:70:6d:3f:91:ed:4e:
ed:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6D:27:8E:F2:58:00:B6:F8:C4:1A:15:A5:71:27:05:0B:8F:25:1F
X509v3 Authority Key Identifier:
keyid:52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/e20njvJYALb4xBoVpXEnBQuPJR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.180.156.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:0a:1c:66:f8:cd:e1:bb:e0:b3:11:7f:95:18:3e:fd:21:a4:
46:0b:2f:aa:63:ab:ad:9c:5a:c3:bc:3c:74:10:d7:e0:e0:21:
e1:2f:58:ed:18:c0:6a:a5:e1:bf:e3:88:ff:19:2c:15:31:12:
55:cc:66:9d:10:7b:9d:b2:2c:c8:8e:b4:cf:42:2c:1d:1f:a4:
75:9d:55:1b:ba:ee:af:e7:ce:27:e0:03:81:e9:55:ed:c9:05:
58:20:00:15:cc:c2:b2:c3:c3:77:eb:1e:83:a8:64:cb:f7:78:
83:91:aa:d6:d5:45:d2:37:aa:4e:c7:41:89:cd:79:1f:70:bc:
a9:99:28:d8:73:35:f5:35:f5:c5:2f:bb:1e:77:b0:9d:5b:9f:
b6:b8:28:6d:28:15:dd:b0:7e:61:0d:d6:3e:38:11:76:6a:ca:
07:46:ec:7a:8b:a5:93:71:f8:2f:54:4b:a6:91:e1:f9:59:b0:
c6:f5:4a:84:3f:9e:0c:f0:71:2a:a7:19:bf:4b:83:ce:d9:fa:
0a:a4:aa:91:e5:1b:18:4b:00:dc:42:96:88:37:72:2d:c0:68:
28:c0:f9:2d:1e:a9:8f:3e:21:81:12:30:7c:b2:df:6c:61:53:
0a:c3:3a:24:e7:ae:cb:bb:f8:85:fc:c0:d4:d2:b5:90:5c:28:
3d:86:a4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:27 2024 by rpki-client on console-fra.rpki-client.org