Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/0hZ52cQUoALT1v05hSwvo_Jxi4U.roa
File: 0hZ52cQUoALT1v05hSwvo_Jxi4U.roa (raw, json)
Hash identifier: Wwyy3/1ZQKiC0P/KtyBAdeUgyezrBxD3cZDqFM9c4HM=
Subject key identifier: D2:16:79:D9:C4:14:A0:02:D3:D6:FD:39:85:2C:2F:A3:F2:71:8B:85
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 01856B5329FBC82AA946ECFF4E5A34BCE0C0
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/0hZ52cQUoALT1v05hSwvo_Jxi4U.roa
Signing time: Sun 01 Jan 2023 03:14:50 +0000
ROA not before: Sun 01 Jan 2023 03:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213107
IP address blocks: 213.238.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:29:fb:c8:2a:a9:46:ec:ff:4e:5a:34:bc:e0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 03:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d21679d9c414a002d3d6fd39852c2fa3f2718b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:15:46:e3:77:a6:e9:5c:ec:ad:ba:0e:c2:16:
a9:25:35:6e:0c:e1:2d:74:34:49:d0:a9:b1:35:51:
b4:81:22:0e:15:3d:da:a9:93:bf:ea:ef:16:f7:75:
f4:3f:f8:7c:43:b0:b9:28:e3:66:09:46:cf:20:7f:
a9:3c:f6:57:76:c3:cd:0a:25:63:0c:4b:01:73:34:
97:b5:7a:f1:00:d3:bf:89:a4:10:51:4e:9f:f1:bf:
f3:3d:57:ee:70:fb:e3:af:e5:3f:ed:3e:72:41:9a:
69:45:8d:46:23:6b:25:ec:37:fd:f1:82:a7:d8:9f:
fd:76:48:03:0c:c4:b1:14:d7:c8:ba:48:f4:d2:26:
08:10:3b:e2:93:7f:09:c6:e8:d8:17:e4:a2:fe:1b:
19:de:bb:c3:49:0d:7a:c1:78:84:ed:74:be:da:71:
d2:40:ac:cd:b5:6b:01:13:31:6e:ea:78:2c:fd:e5:
72:fd:2a:f1:e8:d9:d5:8e:dd:58:40:e9:3b:5a:e0:
37:dd:6b:ad:c8:d3:fe:be:e3:c4:05:d2:c4:3a:86:
89:61:45:31:38:57:95:d5:9e:2c:6a:37:84:76:6c:
de:70:5a:04:9e:73:6a:12:61:f5:94:48:06:12:ff:
34:6e:6b:00:8a:a2:63:20:2c:d1:d9:52:b4:42:ee:
a1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:16:79:D9:C4:14:A0:02:D3:D6:FD:39:85:2C:2F:A3:F2:71:8B:85
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/0hZ52cQUoALT1v05hSwvo_Jxi4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.184.0/24
Signature Algorithm: sha256WithRSAEncryption
15:31:48:df:b7:84:f7:2c:ce:c0:1f:3d:87:04:92:68:39:e3:
d7:db:42:54:99:da:34:68:a0:b6:2a:a9:f9:4f:38:22:b5:be:
39:77:19:7c:42:17:1f:2b:48:4a:bb:f4:18:bb:63:6a:39:ca:
3d:05:f2:e5:81:2a:eb:82:59:8f:02:f4:21:a0:b8:7b:cb:98:
77:f0:05:10:30:f1:f3:0f:d2:c1:ad:2f:93:61:ac:9b:dd:31:
84:da:64:60:a6:b0:90:98:d8:82:de:fa:c2:fe:41:a9:41:5a:
e4:7c:3c:67:22:f9:0d:bc:32:a7:b5:e6:29:88:85:06:49:fc:
26:45:2e:95:15:3a:20:46:aa:34:59:2b:2d:ad:d5:c2:fd:7a:
b0:4d:c2:99:9f:ad:1f:8a:df:57:ae:ac:03:5b:1b:86:7d:4e:
c8:f8:c4:87:ba:c7:3d:9e:a9:de:25:80:c8:c3:19:e1:62:14:
80:0f:b6:d7:50:57:dd:7a:e5:1d:3c:16:22:c6:44:c1:a5:9b:
db:8f:bf:45:c4:64:b2:05:65:ca:d0:42:99:0f:8f:3b:5d:ba:
aa:d0:47:aa:d3:29:2d:6d:1f:ba:c5:44:01:11:8d:f7:84:b6:
d7:aa:6d:87:36:4f:ab:2f:d7:90:84:d5:03:e9:01:f3:73:b9:
05:0a:c4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:27 2024 by rpki-client on console-fra.rpki-client.org