Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/1OZ4v_D6ufWI_-ZnX8xOvIj-0fA.roa
File: 1OZ4v_D6ufWI_-ZnX8xOvIj-0fA.roa (raw, json)
Hash identifier: IPOXn+SkeA81Y+NbJOpGNKR/i8BeAOx7Vz7BuWMhUfI=
Subject key identifier: D4:E6:78:BF:F0:FA:B9:F5:88:FF:E6:67:5F:CC:4E:BC:88:FE:D1:F0
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 01856B531BB8A8A205AC5EAA1F3156D6ACE1
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/1OZ4v_D6ufWI_-ZnX8xOvIj-0fA.roa
Signing time: Sun 01 Jan 2023 03:14:46 +0000
ROA not before: Sun 01 Jan 2023 03:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42910
IP address blocks: 213.238.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:1b:b8:a8:a2:05:ac:5e:aa:1f:31:56:d6:ac:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 03:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4e678bff0fab9f588ffe6675fcc4ebc88fed1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:c0:38:80:1d:9a:83:b5:07:fe:04:7a:08:
b2:bd:ad:0d:af:a5:55:a1:f3:f2:97:8c:9b:9c:ca:
85:c8:56:40:9d:cc:53:50:05:38:7d:f6:db:35:ab:
a1:76:b7:2a:e9:18:8f:25:c3:02:83:44:12:51:a6:
c0:08:68:b4:93:29:fe:20:fd:61:cf:20:d3:58:68:
8b:89:6b:38:8c:c4:9e:e4:64:4e:4c:42:e1:47:bb:
57:43:92:b9:b9:15:54:fd:9b:6e:d4:51:53:ed:ec:
3d:bc:f9:bb:ad:e2:82:f3:77:45:b7:af:0a:b7:f2:
37:d5:f2:9b:f4:47:47:8c:3d:ea:01:cb:94:93:c3:
ef:80:c8:7b:ab:31:a0:42:07:28:74:ef:5c:23:99:
96:7d:78:99:10:61:b1:31:fc:7c:e4:80:4a:eb:cd:
b5:7f:fa:2c:45:d4:de:20:22:cd:e9:da:15:32:7b:
2d:f5:2c:2c:f5:a1:88:2e:14:7e:a8:e7:ba:7c:76:
93:8c:5d:40:69:35:63:51:98:82:87:73:f5:5a:cc:
73:1f:a5:e1:7f:bd:6a:f3:eb:36:b4:71:74:a9:d8:
f8:5f:50:e5:8b:12:10:68:16:49:42:51:62:89:6b:
7a:9b:b1:a7:02:fe:94:a4:a5:ef:ac:ea:d6:39:ce:
c8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E6:78:BF:F0:FA:B9:F5:88:FF:E6:67:5F:CC:4E:BC:88:FE:D1:F0
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/1OZ4v_D6ufWI_-ZnX8xOvIj-0fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.175.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:4d:c1:f3:89:3f:17:c2:18:a3:a3:07:94:cd:c0:92:67:ac:
b3:7e:79:af:38:2e:0f:ba:ca:b4:b5:b4:53:a0:aa:52:56:31:
6c:09:07:dc:3c:d2:54:58:46:be:0e:41:56:1b:64:c0:9d:27:
0e:c3:be:dc:83:d1:00:e8:1b:21:b5:03:fc:88:f7:72:f1:df:
d5:ab:75:3c:e4:cc:a8:20:c5:44:5e:53:70:5c:0b:e7:70:db:
8d:68:ce:28:3c:f6:46:6f:6a:87:dc:f3:75:d2:51:59:36:f7:
d4:7b:9e:c8:27:d8:08:ca:52:af:1f:ec:26:07:97:74:02:fd:
99:2a:d9:25:7d:a7:55:ff:a6:9a:9e:c1:ee:3d:22:78:28:e8:
56:c0:41:c0:69:8c:85:07:48:d8:ab:8f:4b:31:26:69:12:78:
22:c2:d1:7e:cb:46:54:fe:0f:78:fe:89:6a:90:a4:f3:7a:54:
5f:60:5f:1b:b4:93:8b:d1:ba:34:ee:55:ce:01:1c:85:65:fc:
c0:f5:76:9a:7e:7b:6d:4a:d5:e9:bd:ab:02:41:49:8a:ed:ca:
e9:b0:61:55:db:c9:92:76:41:1a:d3:48:c8:e8:e9:9e:0d:26:
f6:88:d6:dc:0c:ac:3b:23:39:2d:c8:8c:4a:39:b1:d2:cc:35:
08:c3:1f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:36 2024 by rpki-client on console-ams.rpki-client.org