Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/2AgG6fkcZBTd5FjTuwapWE8JLyA.roa
File: 2AgG6fkcZBTd5FjTuwapWE8JLyA.roa (raw, json)
Hash identifier: 7xdqFbqY59bIfkIh2qBpSbF13uUgO9Rjg9q6Af1xMuE=
Subject key identifier: D8:08:06:E9:F9:1C:64:14:DD:E4:58:D3:BB:06:A9:58:4F:09:2F:20
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 01856B531B49077C12400AD4D3C03F9545AF
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/2AgG6fkcZBTd5FjTuwapWE8JLyA.roa
Signing time: Sun 01 Jan 2023 03:14:46 +0000
ROA not before: Sun 01 Jan 2023 03:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41683
IP address blocks: 213.238.170.0/24 maxlen: 24
213.238.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Mar 2023 18:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:1b:49:07:7c:12:40:0a:d4:d3:c0:3f:95:45:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 03:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d80806e9f91c6414dde458d3bb06a9584f092f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7f:d6:f9:26:68:07:95:03:02:7a:87:96:f1:
ba:6c:8f:2a:ae:ea:3f:19:21:f3:35:c4:47:10:2d:
ca:81:9a:84:ea:f8:ae:45:3d:e4:c0:08:4f:23:4f:
60:00:52:f1:ce:4f:5d:5f:52:2d:26:c4:96:e2:b1:
f3:a0:04:ae:b8:8c:49:87:73:8d:f4:63:69:68:96:
ad:70:77:fa:a5:27:a0:88:40:60:fd:43:81:98:48:
36:79:7f:ce:ca:66:b3:d7:61:96:33:d4:0b:68:29:
10:64:b5:d9:b6:a5:9f:79:36:64:e2:71:25:0d:eb:
be:bd:76:72:13:e1:68:a6:0d:2a:c4:f6:21:eb:aa:
a6:34:36:7f:75:ab:7b:42:95:29:27:e1:25:3d:89:
79:9d:08:56:f1:35:07:c7:fd:7e:a5:ee:ce:8d:42:
3f:9c:4c:62:f9:c4:9b:6b:c2:99:d2:46:48:7d:80:
54:58:e5:6a:fb:a8:95:94:69:e0:05:76:6a:e9:72:
14:62:df:3d:2b:e5:22:1d:fa:74:96:28:c1:c3:6b:
3e:b0:ba:7b:ce:6e:cc:a2:b3:a8:d4:77:fe:31:eb:
c0:ed:8d:ca:5e:a8:cc:f3:40:e3:9e:1c:68:a3:a6:
6e:6b:c1:08:c2:bf:27:ce:dd:5f:04:8c:07:06:0d:
c3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:08:06:E9:F9:1C:64:14:DD:E4:58:D3:BB:06:A9:58:4F:09:2F:20
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/2AgG6fkcZBTd5FjTuwapWE8JLyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.170.0/24
213.238.176.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:0e:a2:29:a0:a5:2c:1e:31:ae:6a:33:4b:11:3f:40:1b:99:
b4:ac:77:02:aa:f2:81:75:7b:ec:8d:a0:28:32:0f:80:6e:0f:
e3:bf:17:ad:63:3a:73:68:e0:90:f6:91:06:56:d2:71:eb:f8:
8d:fe:ce:b1:67:f3:9a:95:6d:9a:dc:41:57:45:41:fc:5e:7d:
a2:c1:0b:96:39:b0:2f:fa:1b:f6:b7:9b:d9:ac:92:ed:4f:e0:
e9:79:6a:25:46:02:4d:e2:fc:4b:fd:16:60:91:88:c7:1d:91:
ae:be:d2:5f:54:66:80:20:62:16:24:c1:82:8c:27:a8:2e:f1:
ed:02:c3:98:5d:f6:b7:6b:2e:dc:f7:8e:f4:53:4c:3e:d3:5b:
e1:4f:4f:0d:6b:90:36:93:4a:fb:d0:54:d4:9a:0d:34:b6:4f:
3e:e5:fc:25:80:8d:fa:4e:b5:57:a1:ef:8d:cc:79:f2:4f:27:
12:c7:44:72:50:dd:b9:2b:5b:3f:ef:24:f7:8e:66:dc:09:c5:
79:a0:9a:1f:4d:59:a9:89:2b:cb:90:11:76:13:9e:d2:74:98:
8f:73:da:95:f2:26:c7:7b:46:63:0a:21:b8:ac:83:b8:65:34:
2e:db:5d:4e:fc:59:e9:1a:aa:96:c2:63:e0:5d:13:05:49:71:
ab:23:6c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:36 2024 by rpki-client on console-ams.rpki-client.org