Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/Q7Ht1kVbPp9HewXqkjogmxiyXCc.roa
File: Q7Ht1kVbPp9HewXqkjogmxiyXCc.roa (raw, json)
Hash identifier: nQMwkit4+mKgZswoqrFEOiQNPNBNWyOrLDg1bZJgZn4=
Subject key identifier: 43:B1:ED:D6:45:5B:3E:9F:47:7B:05:EA:92:3A:20:9B:18:B2:5C:27
Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial: 018C0A97116D7322ED638FD4525A3DD02A67
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/Q7Ht1kVbPp9HewXqkjogmxiyXCc.roa
Signing time: Sun 26 Nov 2023 07:45:21 +0000
ROA not before: Sun 26 Nov 2023 07:45:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34397
IP address blocks: 213.210.196.0/24 maxlen: 24
213.210.195.0/24 maxlen: 24
213.210.192.0/18 maxlen: 18
213.210.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 Nov 2023 08:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0a:97:11:6d:73:22:ed:63:8f:d4:52:5a:3d:d0:2a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Validity
Not Before: Nov 26 07:45:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43b1edd6455b3e9f477b05ea923a209b18b25c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:b5:2d:bc:eb:c9:5d:d4:5d:fe:ea:1f:34:
23:8e:2e:1f:b9:a9:4d:f2:8f:8e:a7:71:c8:5d:ea:
f0:8a:fd:b2:b3:a2:51:a9:d0:ee:0d:f8:89:f6:b5:
f0:7d:49:f1:63:9d:9d:bd:2b:54:30:09:b4:e2:96:
d0:e1:c1:5f:3b:4c:27:67:00:f8:c6:04:8a:e3:a6:
73:91:a9:97:c2:d1:d8:f9:0b:fc:59:e0:ff:2b:a1:
69:c5:84:81:b6:4e:1b:ae:e7:9f:37:cb:af:e2:e2:
7b:6e:c2:3c:5a:6a:2b:e2:ac:d2:1e:f9:ed:b5:77:
3b:14:c1:8a:e4:a5:96:69:29:e0:af:32:79:bc:4a:
9e:d6:87:0f:24:83:48:06:38:5a:13:a2:91:a6:35:
b6:f0:d4:95:73:fa:b2:4a:64:3a:d3:5e:82:e7:72:
0d:e5:9f:04:ce:92:fc:59:48:8b:35:3a:56:d5:9e:
67:c0:7a:8c:9e:3c:4f:fc:71:97:37:de:94:81:ec:
ff:eb:a5:c6:bc:d9:29:89:2f:81:c9:f0:71:ac:d4:
4b:09:e1:81:98:d8:ae:13:5e:bc:55:00:e6:e1:01:
14:e5:71:49:83:a8:a8:cc:fb:9c:4a:bf:aa:7a:93:
08:78:d5:3e:c5:78:f9:9e:31:35:e9:e1:9f:b4:1b:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B1:ED:D6:45:5B:3E:9F:47:7B:05:EA:92:3A:20:9B:18:B2:5C:27
X509v3 Authority Key Identifier:
keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/Q7Ht1kVbPp9HewXqkjogmxiyXCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.210.192.0/18
Signature Algorithm: sha256WithRSAEncryption
80:97:02:58:9a:a9:9e:dd:f0:f7:bc:83:03:30:81:8f:d2:4f:
10:55:e0:21:2a:2e:a1:8e:29:a9:c4:31:17:d4:a2:07:fa:0f:
92:30:ab:eb:38:44:4b:08:ab:79:8b:7b:15:8e:65:2e:7c:eb:
49:6b:67:ca:62:9e:ed:da:19:13:72:15:e4:ed:e6:bb:78:51:
e4:5a:76:d7:e5:2e:ee:5c:3f:8d:63:3e:7c:e5:72:d6:ae:d3:
6c:c9:c3:3a:42:08:54:21:ca:3b:e9:80:3d:14:45:82:1a:9f:
bc:9a:30:2a:2a:88:20:a5:91:b7:67:28:8d:04:fd:aa:89:de:
59:2a:87:cf:ba:48:36:37:d7:71:2f:49:4f:0f:43:bd:b3:b7:
f3:50:e8:56:5a:03:bf:90:34:04:d6:bb:6c:60:65:02:ab:69:
5f:ac:fe:ce:ec:25:45:68:9d:13:a1:42:e4:f2:ae:04:b7:b8:
b0:60:d8:75:fd:0d:a8:a3:ef:48:b9:43:3f:cc:c8:17:3d:80:
e5:02:1c:79:6c:ee:7d:5c:82:5f:f5:3d:7c:b5:44:ad:c8:92:
3f:4a:69:c5:56:ab:59:1f:dd:f6:b9:5a:3a:76:94:ef:99:c9:
dc:16:92:3b:e2:52:7b:b6:26:a9:41:df:32:92:e4:a2:6c:99:
cb:d2:45:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:10 2024 by rpki-client on console-ams.rpki-client.org