Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/s7dNrs7Ceq13F0znC2wV71hTc6A.roa
File: s7dNrs7Ceq13F0znC2wV71hTc6A.roa (raw, json)
Hash identifier: Zq5uA4wpRVQj/BCJ+0g4vFGAeIXkX6xudK34pGwV8IA=
Subject key identifier: B3:B7:4D:AE:CE:C2:7A:AD:77:17:4C:E7:0B:6C:15:EF:58:53:73:A0
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 0185729EB4A329E796BDC024D59BF19D8241
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/s7dNrs7Ceq13F0znC2wV71hTc6A.roa
Signing time: Mon 02 Jan 2023 13:14:41 +0000
ROA not before: Mon 02 Jan 2023 13:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209281
IP address blocks: 213.232.76.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:b4:a3:29:e7:96:bd:c0:24:d5:9b:f1:9d:82:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 2 13:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3b74daecec27aad77174ce70b6c15ef585373a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:85:2c:05:f0:4f:e8:e1:cf:85:7c:d2:0a:
9d:61:02:4e:d1:3e:63:99:41:28:f6:f7:e7:fc:45:
07:67:de:5b:b2:15:c5:1b:5f:51:56:0a:12:63:82:
16:d9:ae:e6:1c:d5:2c:20:b7:01:d2:ff:e5:2e:70:
34:92:5f:bf:1a:94:e4:bd:5e:23:00:61:30:5b:8f:
21:16:ce:14:7e:6f:b6:7e:a5:2e:e2:42:b0:4a:46:
1c:bc:77:0e:5b:8a:a6:cd:e1:b4:21:03:77:34:48:
48:cb:b2:a9:d1:7e:d3:04:83:54:ef:d3:c2:98:a8:
4a:59:f0:20:88:5e:82:de:6f:7b:39:b7:31:c0:ff:
59:ea:e2:95:ac:23:34:6e:0d:65:40:c5:1f:c3:12:
06:03:ac:6e:2b:76:cb:59:f6:61:5c:52:d8:6b:b3:
af:d9:d2:d0:50:87:ca:c1:93:c3:bb:0a:c0:d7:73:
f6:d6:ef:e2:e5:6a:d7:05:d1:c0:72:4c:bd:77:79:
0f:7b:e4:2a:22:6c:e5:fc:d0:20:21:b4:88:f9:19:
9d:cf:e8:40:9b:2d:00:50:55:23:c4:17:7b:43:f1:
83:dc:28:5d:cd:35:8e:c9:2a:91:f2:30:be:95:1b:
53:df:68:92:6c:91:31:9b:ba:48:54:7f:aa:8e:45:
dc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B7:4D:AE:CE:C2:7A:AD:77:17:4C:E7:0B:6C:15:EF:58:53:73:A0
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/s7dNrs7Ceq13F0znC2wV71hTc6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.76.0/22
Signature Algorithm: sha256WithRSAEncryption
85:3e:4a:b2:13:de:fd:30:44:9d:90:e4:4e:12:a7:6f:64:c7:
b2:7a:d1:84:22:be:d1:20:08:d1:97:eb:27:fc:9d:71:72:7b:
2e:a0:e6:68:56:6c:7e:ed:1a:7c:50:bf:24:d7:a0:61:fa:2b:
8c:60:fd:f0:3d:ce:6c:d1:4d:74:4b:63:0e:bf:cc:56:56:df:
12:db:b7:6d:0c:e7:11:54:5b:da:d2:f7:15:ca:11:bb:7d:51:
35:79:71:a9:84:28:65:71:ad:51:bd:e5:8a:80:49:44:e7:0b:
1c:71:e7:8e:cd:73:86:09:bb:e0:d1:f7:d7:cd:eb:a2:32:02:
27:26:45:1b:73:54:6b:8a:a3:0a:36:e3:c6:cd:ba:2d:11:8a:
57:9c:ff:61:bb:21:e9:a0:9f:7c:7c:6d:c7:f3:c1:68:42:8f:
54:1b:a7:08:5a:58:f8:b2:70:b3:88:1f:70:4f:9a:9f:21:69:
ea:8b:b7:a2:dd:d9:94:55:4d:eb:7e:6d:8c:a5:38:cb:51:8c:
5e:d7:72:b3:56:25:61:00:24:5b:c0:80:45:b1:7d:d4:50:38:
ce:f1:c3:92:be:0d:00:e4:8a:bf:18:31:b9:85:a3:b0:50:4e:
26:b1:0d:ef:47:60:4c:45:cb:4f:f1:fe:4c:5f:93:6b:65:77:
35:a5:1b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:25 2024 by rpki-client on console-ams.rpki-client.org