Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/cTv8qsBYGTZYMoGsykB1I8MeVVM.roa
File: cTv8qsBYGTZYMoGsykB1I8MeVVM.roa (raw, json)
Hash identifier: BFBdLo2N53/OkoUtCA99f/iPE54ulk2EwaRZd34uNlo=
Subject key identifier: 71:3B:FC:AA:C0:58:19:36:58:32:81:AC:CA:40:75:23:C3:1E:55:53
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 018AB2EAF5FCFEC3D6951809B243E13FB31F
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/cTv8qsBYGTZYMoGsykB1I8MeVVM.roa
Signing time: Wed 20 Sep 2023 14:07:37 +0000
ROA not before: Wed 20 Sep 2023 14:07:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137502
IP address blocks: 213.248.254.0/24 maxlen: 24
213.248.255.0/24 maxlen: 24
2a01:618:401::/48 maxlen: 48
2a01:618:404::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 21 Sep 2023 07:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b2:ea:f5:fc:fe:c3:d6:95:18:09:b2:43:e1:3f:b3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Sep 20 14:07:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=713bfcaac0581936583281acca407523c31e5553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2e:29:eb:26:3e:87:75:d9:db:32:5e:fa:4e:
f8:09:60:8d:71:71:c9:1c:02:bc:95:04:e0:70:cb:
b2:6d:35:08:fc:c7:12:b1:a5:f1:96:c9:9c:4c:fb:
20:de:43:d8:49:89:51:b1:b4:7d:91:52:46:99:f7:
c0:27:ca:47:d6:a5:92:f8:ea:73:0c:13:3a:be:17:
6a:b3:24:6a:26:e3:f9:2d:91:43:1f:9c:6d:f2:45:
e0:84:98:4f:f2:4b:7b:e0:98:4c:da:68:98:86:37:
2d:ab:34:64:d4:41:69:57:3c:b4:0d:e5:08:9d:d4:
bf:dd:d2:a1:ff:cc:6c:6a:83:93:49:0b:03:5b:06:
cf:17:71:9f:a6:c4:f1:95:12:77:3e:19:43:a4:e9:
a0:c5:08:b4:ec:6f:44:10:52:47:80:ff:4c:01:66:
c2:3c:db:ab:a4:a3:dd:da:81:90:45:3d:17:c0:61:
ed:02:6c:1e:29:31:55:66:9f:37:de:dc:4a:f6:1b:
de:01:a6:2e:27:b3:47:5d:a9:cc:a1:ef:43:4c:7a:
cf:4b:5d:a0:09:a3:82:e4:52:93:9b:79:1b:7e:c7:
1f:0b:6c:34:1a:61:ef:89:a7:7a:b5:40:b4:44:8c:
73:76:db:25:d7:6e:79:e4:12:f9:fb:0a:94:72:cc:
62:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3B:FC:AA:C0:58:19:36:58:32:81:AC:CA:40:75:23:C3:1E:55:53
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/cTv8qsBYGTZYMoGsykB1I8MeVVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.248.254.0/23
IPv6:
2a01:618:401::/48
2a01:618:404::/48
Signature Algorithm: sha256WithRSAEncryption
3e:ec:02:6d:6a:1a:2c:40:30:2a:47:f7:d7:c1:01:5d:1f:04:
fd:e3:c3:00:94:a0:f1:0e:2c:82:be:05:40:4f:65:91:f2:e1:
68:d3:92:1a:e0:27:25:6d:be:ea:39:58:57:a1:15:56:0b:66:
42:48:fa:12:15:6d:b1:49:d2:3f:5d:b6:60:12:ae:6b:ea:15:
6e:d5:da:49:65:56:d4:5e:11:d8:26:6e:c6:02:91:5c:fa:aa:
90:76:8f:5c:8b:6a:92:0e:68:87:47:dd:35:92:a8:55:69:1c:
c6:51:f8:5e:4c:df:35:9d:f2:2b:35:ff:0e:49:96:a1:ae:74:
b4:de:d4:4c:25:24:98:43:34:dd:e3:d7:75:4c:21:a9:45:7c:
e1:1f:e1:f9:14:c9:e0:d2:c9:bd:ea:e4:54:2d:a2:fa:fb:07:
37:12:fb:3d:c7:fc:bc:1a:be:ca:65:4f:d7:da:8e:d1:d8:fc:
47:71:0e:9c:b8:8d:6e:7b:00:bc:38:ff:8a:5d:d1:8a:cb:fd:
21:5a:d1:29:1e:f2:17:0b:d9:14:92:80:ef:36:44:c7:53:60:
08:4e:9b:46:13:47:2b:e6:8c:2a:a6:7d:98:47:41:b2:c9:d6:
8e:0b:50:4b:c7:cf:ec:ca:9d:3f:3d:f1:5e:2a:59:12:9e:f4:
89:d0:0c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:56 2024 by rpki-client on console-fra.rpki-client.org