Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/89PtlXZgV8WMhXvkzriZRgRD-P0.roa
File: 89PtlXZgV8WMhXvkzriZRgRD-P0.roa (raw, json)
Hash identifier: ri81p7ar+xa1DormNa2nHnqzI7MsceXl7IXJlXhuaKs=
Subject key identifier: F3:D3:ED:95:76:60:57:C5:8C:85:7B:E4:CE:B8:99:46:04:43:F8:FD
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 01856B53260380023F5A9B99EB9E3DC3BC93
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/89PtlXZgV8WMhXvkzriZRgRD-P0.roa
Signing time: Sun 01 Jan 2023 03:14:49 +0000
ROA not before: Sun 01 Jan 2023 03:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209956
IP address blocks: 213.238.189.0/24 maxlen: 24
213.238.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:26:03:80:02:3f:5a:9b:99:eb:9e:3d:c3:bc:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 03:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3d3ed95766057c58c857be4ceb899460443f8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ef:c9:86:9e:ae:1a:2e:10:81:17:68:84:90:
ff:4b:b7:cc:fc:7c:cc:46:55:49:5d:34:bd:3e:83:
bc:b1:30:56:7b:31:e6:b2:f1:04:11:bd:6b:50:85:
c3:c4:02:98:0a:07:b4:51:63:bc:a0:26:01:33:96:
20:58:bd:fc:6b:41:af:85:d7:bb:25:d0:ca:23:ff:
50:1f:44:46:79:80:f0:14:b2:b7:8a:c0:10:cf:51:
ec:8e:65:a2:21:ac:4a:0e:cc:64:39:a8:2d:da:50:
c6:70:4a:7a:a7:4f:a3:31:39:da:24:1c:73:8f:ab:
72:57:2e:59:c7:86:a2:f4:04:78:00:23:38:44:04:
e5:b3:30:9b:c2:76:26:93:93:19:d5:87:52:73:8f:
4d:7a:bf:fd:41:0e:81:ce:b5:22:80:fc:45:f9:c3:
85:4c:f2:24:9c:c3:89:db:60:11:65:2f:8c:08:27:
95:84:32:67:69:fa:34:c6:0c:4d:6f:32:ab:fd:5f:
48:20:48:66:01:08:01:56:59:77:c2:5d:7a:fa:7f:
9d:4e:9c:ba:c9:86:5a:60:b5:e0:3c:9d:e2:2c:a3:
2d:0e:f3:0b:f3:8b:ee:2d:29:d4:80:8a:4d:46:0c:
c9:1a:f1:55:5e:82:90:85:89:be:5b:5b:25:96:98:
f1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D3:ED:95:76:60:57:C5:8C:85:7B:E4:CE:B8:99:46:04:43:F8:FD
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/89PtlXZgV8WMhXvkzriZRgRD-P0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.187.0/24
213.238.189.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:01:2d:ef:17:d2:e6:53:f7:f5:0f:a4:35:2d:6e:30:f2:5a:
b9:a9:74:ce:29:0d:b1:0b:aa:36:90:8d:21:83:05:7d:a4:cc:
5b:2f:e3:3d:d1:c0:db:16:6f:b9:53:3a:c3:3a:ce:34:c0:c5:
f5:52:55:d4:1c:f7:0d:f7:1c:fb:30:db:b2:ee:33:38:45:b3:
98:7e:f1:cc:ef:9e:71:1a:07:4d:df:a2:74:f1:e4:54:b1:54:
a8:0b:31:ef:de:16:91:aa:d4:6b:e5:e5:e6:a8:1e:2b:d2:2c:
e2:4d:58:5e:86:08:9d:f3:f6:41:42:d4:31:86:c4:3f:b3:e0:
06:30:f1:8a:80:a2:24:83:36:b3:87:a2:f5:5c:d8:df:f1:d7:
98:e5:21:b3:bc:84:51:6a:e1:e4:94:6f:5e:06:e9:46:7a:55:
8e:04:55:fd:be:75:cb:03:32:bd:86:f7:7e:8e:95:19:29:e2:
84:be:69:ed:5a:6f:3b:af:a9:1a:d9:7f:2a:40:47:39:81:1d:
c2:32:cd:c4:89:46:80:c1:f9:3d:d7:7e:67:28:40:af:b2:5d:
10:4e:cf:a2:9b:36:23:3e:08:e5:87:1e:6a:00:fe:0a:82:a9:
f7:e6:a7:93:49:af:0b:d9:8b:cb:fa:75:55:66:a1:9b:c7:2d:
3e:5c:bc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:07 2023 by rpki-client on console-fra.rpki-client.org