Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Gn0MuNXE7xP99ZMWyNj_uOaDpX8.roa
File: Gn0MuNXE7xP99ZMWyNj_uOaDpX8.roa (raw, json)
Hash identifier: hSbWdhpf3n//+gHt16ahboDQtDMnoQKnwliiy7wIdmI=
Subject key identifier: 1A:7D:0C:B8:D5:C4:EF:13:FD:F5:93:16:C8:D8:FF:B8:E6:83:A5:7F
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 0189D5928DB11664D482AF89942450957EEA
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Gn0MuNXE7xP99ZMWyNj_uOaDpX8.roa
Signing time: Tue 08 Aug 2023 14:34:58 +0000
ROA not before: Tue 08 Aug 2023 14:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137502
IP address blocks: 213.248.254.0/24 maxlen: 24
213.248.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Sep 2023 12:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:92:8d:b1:16:64:d4:82:af:89:94:24:50:95:7e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Aug 8 14:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a7d0cb8d5c4ef13fdf59316c8d8ffb8e683a57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6d:a8:ed:4d:d8:fc:34:74:cc:7d:8d:bb:ba:
31:f3:1a:7d:a9:e4:2a:1a:e0:8a:ae:ea:1f:c1:cb:
8d:d4:fb:fc:a4:1e:a7:da:e7:12:5e:90:c4:21:ef:
c5:b7:e4:a6:c7:0f:ff:94:9e:3a:a7:e0:0a:2d:88:
1e:39:9b:1d:d7:2c:54:02:8f:60:12:3f:22:39:21:
98:6a:d1:81:9a:34:1a:aa:04:c8:a4:4b:e1:de:b4:
cb:63:01:08:e4:02:08:5f:12:87:8f:92:e9:c6:cb:
8a:cb:0e:a1:17:eb:d0:f2:4b:ba:b1:82:bd:5f:c9:
85:0c:43:7e:d4:3f:7e:21:9f:d4:ef:3c:01:35:29:
3c:8c:a9:23:1a:19:b8:83:6e:10:8b:c8:8a:63:50:
e3:88:d6:9b:2f:e6:6a:f9:d6:5b:84:49:ea:26:09:
6d:3f:8f:6b:dc:d8:ff:e6:cf:69:30:49:34:4c:96:
1a:fa:08:a8:58:f0:0d:9d:41:ec:e7:5b:40:16:ee:
7c:eb:b8:9b:73:8d:0e:01:37:4a:db:d9:30:6d:01:
04:83:6b:6d:3d:2e:07:e4:9c:26:2c:0d:71:8b:a0:
db:1e:f9:58:22:56:f0:d5:a6:b5:c4:54:ce:72:ea:
8c:6a:f5:b4:55:74:f7:1a:5f:0f:18:b0:31:07:35:
98:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7D:0C:B8:D5:C4:EF:13:FD:F5:93:16:C8:D8:FF:B8:E6:83:A5:7F
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Gn0MuNXE7xP99ZMWyNj_uOaDpX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.248.254.0/23
Signature Algorithm: sha256WithRSAEncryption
29:b0:f8:e3:4b:a5:e0:a5:ea:f1:58:50:d2:5b:93:18:fb:d4:
72:8b:0f:0c:42:b8:0d:10:03:d0:ee:ec:58:dd:31:23:18:62:
21:5e:49:bd:94:d6:93:c9:8b:2e:16:aa:09:6a:8a:29:ab:5f:
ea:ba:cc:7d:b9:d1:dc:ef:be:90:00:bf:06:65:b2:56:24:65:
b0:30:b9:7a:04:95:03:04:24:90:60:c2:25:d6:ff:c4:ef:50:
db:92:6f:7b:7d:d3:d2:07:93:ae:db:9f:6f:89:8b:3c:c2:f6:
1e:2e:73:96:37:cc:e2:4a:a1:e4:e5:ed:54:92:01:9e:d5:7d:
8e:da:27:37:85:9c:29:b6:2a:20:c0:6d:8b:15:f9:bf:e9:5f:
22:f2:46:62:76:89:de:d7:c6:9d:d1:22:76:6d:fe:a2:a0:7d:
7b:d3:78:44:ae:c4:1c:10:ba:8d:ab:66:19:12:b1:40:b2:a6:
fb:09:6b:35:b2:ec:50:10:9c:a7:df:ad:00:21:ae:9b:50:2d:
b3:cb:f4:0d:eb:89:f5:c5:5d:43:25:5b:b2:f7:7e:c8:36:2f:
d3:f8:54:cd:28:08:23:21:e8:4f:09:0b:cd:81:47:48:90:1d:
77:28:99:58:ef:95:41:78:0f:2c:c7:d3:ed:7c:22:37:9b:88:
55:87:50:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:56 2024 by rpki-client on console-fra.rpki-client.org