Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/_Gs33jYQhRkb9z7BU1716YXVjos.roa
File: _Gs33jYQhRkb9z7BU1716YXVjos.roa (raw, json)
Hash identifier: ox+y2cPOKBSzFCLxK8GcdS5gM3SsPlxf9dHs6xP4CK8=
Subject key identifier: FC:6B:37:DE:36:10:85:19:1B:F7:3E:C1:53:5E:F5:E9:85:D5:8E:8B
Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial: 018B8B0220B0EBDF8A3E86EA3FE7006FF7B4
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/_Gs33jYQhRkb9z7BU1716YXVjos.roa
Signing time: Wed 01 Nov 2023 13:10:54 +0000
ROA not before: Wed 01 Nov 2023 13:10:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32787
IP address blocks: 213.210.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Dec 2023 13:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8b:02:20:b0:eb:df:8a:3e:86:ea:3f:e7:00:6f:f7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Validity
Not Before: Nov 1 13:10:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc6b37de361085191bf73ec1535ef5e985d58e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:52:94:83:65:1c:8f:ac:ae:d9:c4:09:02:b8:
52:db:d4:59:27:c9:37:1b:a5:d4:6c:0a:26:be:18:
13:ca:63:90:0b:d1:18:66:b7:40:ee:37:8d:16:c4:
c3:6c:d9:21:86:40:a9:6b:ed:43:99:96:64:a7:49:
11:f8:31:23:7c:be:99:ee:da:48:2b:bb:a3:0a:a6:
56:d4:78:4a:ae:d5:d7:bf:ff:31:58:87:6a:5c:b1:
6f:64:45:34:67:b5:87:93:7b:7e:e3:e4:52:d5:28:
06:d1:8f:20:74:89:eb:e0:da:da:a3:a1:e8:c7:b0:
ad:ac:c2:5f:d3:0e:5e:02:c8:2b:9c:04:88:88:06:
4b:54:31:46:52:85:f9:f1:db:fb:2d:f9:e9:e4:96:
fc:03:6e:36:fb:bd:eb:84:d2:c0:dd:90:40:82:00:
42:62:d8:78:60:1a:25:07:c8:79:53:6b:43:51:f0:
5c:f9:7f:62:fe:71:00:82:52:61:58:00:b6:c6:be:
4c:fb:2a:d1:45:d4:53:3b:5c:6f:20:49:1b:05:9b:
ef:32:6a:30:26:7d:10:1d:29:87:2d:41:59:cd:d9:
1c:3a:d1:ce:3b:6e:4a:53:09:f4:a6:03:a8:99:19:
76:55:85:cc:38:0f:cd:77:da:7a:d7:ae:4d:fb:50:
6f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6B:37:DE:36:10:85:19:1B:F7:3E:C1:53:5E:F5:E9:85:D5:8E:8B
X509v3 Authority Key Identifier:
keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/_Gs33jYQhRkb9z7BU1716YXVjos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.210.216.0/24
Signature Algorithm: sha256WithRSAEncryption
67:85:64:c3:cb:e7:4b:b0:ac:83:e7:1f:50:61:a4:76:63:11:
b2:fe:3e:c9:80:a6:09:e7:ab:28:35:e9:94:26:d2:29:90:d3:
51:88:45:bb:8f:78:d8:c0:ed:f3:48:62:b4:7e:db:6f:c4:51:
63:9b:12:53:35:00:ea:c4:ff:df:ad:d9:d8:5b:a2:d7:54:d0:
f3:b4:38:e3:bd:c9:cc:76:5e:e9:87:2c:89:ac:c2:95:fc:1d:
b2:69:36:89:13:97:28:c9:ed:36:ee:c0:b7:eb:06:69:fa:03:
65:ed:10:90:a7:61:38:28:b8:3d:fc:05:bc:81:db:a4:53:38:
17:fb:44:2e:04:8c:1d:7b:35:69:4f:d3:88:48:06:2b:41:ac:
40:fe:99:6e:3f:0a:fc:ad:85:96:b8:a9:98:a4:6c:86:04:ed:
e5:3b:48:a2:fc:b6:5f:2f:de:41:c5:b5:c4:94:1a:6d:65:a4:
2a:df:a7:f4:43:0c:55:18:f3:ad:7a:58:8b:38:a6:e9:d7:b6:
e6:9e:81:a4:bb:b4:58:41:c9:86:8a:df:56:cf:b7:b5:22:26:
e5:ac:11:42:01:a9:f0:f1:d6:8a:7c:6b:1d:62:72:15:d4:d6:
c4:7e:dc:20:8d:4e:61:f6:84:78:3d:b9:b7:66:9e:14:b5:ba:
6f:fd:81:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:14 2024 by rpki-client on console-fra.rpki-client.org