Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/4ViQ9Ggl7YXS-bHN0zdL1zpWp0A.roa
File: 4ViQ9Ggl7YXS-bHN0zdL1zpWp0A.roa (raw, json)
Hash identifier: 6hA5sZXBZl6ghHHF48KkjOim96dTLlqok+Dpbv0cXSo=
Subject key identifier: E1:58:90:F4:68:25:ED:85:D2:F9:B1:CD:D3:37:4B:D7:3A:56:A7:40
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 01856B5324C43238F768BFA0496746620242
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/4ViQ9Ggl7YXS-bHN0zdL1zpWp0A.roa
Signing time: Sun 01 Jan 2023 03:14:48 +0000
ROA not before: Sun 01 Jan 2023 03:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 213.238.167.0/24 maxlen: 24
213.238.182.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:24:c4:32:38:f7:68:bf:a0:49:67:46:62:02:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 03:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e15890f46825ed85d2f9b1cdd3374bd73a56a740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:96:48:23:43:60:56:5b:d3:0a:dc:68:9e:18:
a7:ab:42:8d:4f:c4:13:6a:4d:27:1b:6d:06:18:d8:
18:d0:1e:9b:73:1c:c6:6b:72:38:61:2c:76:05:b7:
d9:6f:8e:23:e4:91:cd:10:15:76:a5:f0:d2:7c:77:
72:d8:1e:cd:a4:9e:de:a3:24:54:2e:47:3c:28:da:
0e:4d:45:26:4b:32:79:23:2f:37:eb:a5:07:e8:9f:
e5:5e:d6:a8:e1:3a:8b:a3:f7:13:53:5f:36:fa:4f:
81:e7:b5:e1:99:24:2e:4d:bc:15:2b:77:3e:9c:bc:
eb:94:7b:ac:09:0e:5c:80:06:cd:9c:3f:3c:cc:72:
1a:1d:87:fb:02:4a:55:7a:81:98:54:d7:16:ef:bc:
ae:11:37:af:32:c9:10:3b:61:ea:9d:b7:39:58:0c:
91:84:09:41:c3:cf:98:c0:37:97:cf:5d:bb:2e:b5:
a1:d2:d4:eb:91:be:82:01:79:96:3b:12:96:07:2b:
c9:d6:1f:a2:16:de:ed:5f:41:fb:39:4b:dc:29:82:
31:7a:fa:4d:24:72:d7:70:30:04:51:73:bc:49:df:
b2:37:87:a6:ad:f6:66:df:e3:f8:6a:73:a0:7a:4d:
eb:c8:b1:71:36:10:1c:35:4c:ec:1c:09:39:db:5c:
ef:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:58:90:F4:68:25:ED:85:D2:F9:B1:CD:D3:37:4B:D7:3A:56:A7:40
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/4ViQ9Ggl7YXS-bHN0zdL1zpWp0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.167.0/24
213.238.182.0/24
Signature Algorithm: sha256WithRSAEncryption
57:c3:d0:96:e1:32:e4:84:04:62:8c:3f:fe:e0:90:7e:96:1e:
77:ab:3d:25:87:ab:7a:84:4b:87:e9:8f:8f:1e:d3:65:3e:4c:
01:af:dc:70:ef:cb:d0:59:ac:8d:91:82:5b:b9:15:1f:3f:08:
da:b7:6f:f4:cb:a7:12:a8:53:2a:99:fc:69:bc:bc:ed:07:98:
17:50:fd:8a:94:99:e5:06:72:c3:60:4e:17:77:0f:d2:ee:f1:
5f:73:35:d1:33:d4:4a:36:de:11:58:30:78:21:8c:2a:e1:c4:
15:fd:ce:7d:c6:95:3b:e1:71:58:7c:2f:8f:bd:c3:54:7b:dd:
29:76:ab:7c:a9:3c:06:6c:5a:f8:43:79:3a:53:1f:18:da:dd:
24:2e:f3:c6:e9:e8:ba:69:c9:b8:0f:4b:25:63:81:5f:5f:91:
b9:e0:43:cf:53:bc:20:65:f9:84:10:b3:99:2d:e3:fe:ac:da:
87:be:bf:47:db:e3:75:a7:8f:14:0b:b8:dd:90:06:8f:92:fe:
db:8a:a6:a3:d2:2f:e6:b8:1f:41:74:39:4c:42:1e:42:52:e3:
bc:0b:d0:7d:0a:ae:31:33:c1:7f:54:0e:c5:e1:eb:c9:fe:1c:
0d:82:4a:e5:31:ff:2b:c1:6d:ea:76:30:04:f2:8e:ee:21:1f:
14:06:4b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:32 2024 by rpki-client on console-fra.rpki-client.org