Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/8NUR0FHML8k8vwBhsPS0U6l50x4.roa
File: 8NUR0FHML8k8vwBhsPS0U6l50x4.roa (raw, json)
Hash identifier: u0gYYCpS9pBA9SPC3pRYmOAhrm+mVpKxS6KZK6VB0zA=
Subject key identifier: F0:D5:11:D0:51:CC:2F:C9:3C:BF:00:61:B0:F4:B4:53:A9:79:D3:1E
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 01881A0586CEFC5D20E73C11B8039107A46B
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/8NUR0FHML8k8vwBhsPS0U6l50x4.roa
Signing time: Sun 14 May 2023 11:29:09 +0000
ROA not before: Sun 14 May 2023 11:29:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48779
IP address blocks: 213.238.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1a:05:86:ce:fc:5d:20:e7:3c:11:b8:03:91:07:a4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: May 14 11:29:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0d511d051cc2fc93cbf0061b0f4b453a979d31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b6:50:e7:aa:87:7b:b8:dc:e4:94:21:9c:f2:
7e:dc:50:3e:22:3f:3e:9e:50:5d:d6:f4:13:f0:01:
ac:21:2e:5c:0e:5f:cc:5c:a9:54:b5:f1:fc:b0:4e:
dd:46:c2:46:0b:cc:79:32:55:50:43:2a:ff:03:c2:
96:5d:fe:14:bd:db:3f:cc:26:ca:3a:31:5b:a3:69:
5a:d1:5a:3d:8e:64:34:b9:3a:a9:a9:2b:a0:d6:0a:
7e:e6:7a:8e:a9:ed:aa:d9:b2:88:fe:ae:f5:da:fd:
53:9c:d2:11:7b:91:b6:65:6d:33:38:81:d1:46:a3:
2a:25:f8:ca:7c:e2:25:09:b2:96:b8:ec:64:45:5f:
44:f8:17:72:77:73:b8:53:a1:ee:1f:56:0c:1f:70:
8a:76:07:42:5c:ed:e7:9c:bd:2e:76:28:cf:e0:74:
95:9b:61:2d:d5:18:8d:6f:7d:29:27:62:45:3d:26:
fe:d3:01:77:50:67:23:4d:19:6f:97:cb:8b:dd:7b:
34:05:fb:2b:8e:46:36:7d:3d:bd:72:9c:15:8a:8d:
e6:b6:f3:67:fe:1b:c9:37:50:4d:21:c8:30:59:48:
37:44:e5:2b:04:2f:1d:74:4e:6c:34:be:dd:b5:db:
28:f4:1e:8a:24:8e:b9:7b:09:1b:b1:40:ac:f0:2e:
aa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D5:11:D0:51:CC:2F:C9:3C:BF:00:61:B0:F4:B4:53:A9:79:D3:1E
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/8NUR0FHML8k8vwBhsPS0U6l50x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.160.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:1f:8e:19:f5:92:09:cf:ce:45:0a:89:6b:fb:79:95:07:e7:
f4:d0:36:bd:8a:fd:f9:f2:53:70:bf:09:89:fd:73:c6:2f:39:
b9:c5:6a:d5:ce:77:84:6a:44:cb:29:e8:47:bc:65:c4:c7:f7:
b8:c0:ee:d1:2a:68:be:84:2b:69:00:3f:ac:3c:85:8c:de:7d:
04:16:26:82:91:c2:de:fe:85:7e:36:91:11:6c:cc:08:5a:30:
e9:dc:f1:6b:39:75:39:4c:3f:57:78:d9:90:d6:2d:a3:6a:fe:
d3:36:9e:a4:a0:a0:b2:30:c6:e7:6b:97:21:40:71:03:e9:33:
9a:b9:15:14:47:7d:00:5f:b2:b0:06:c5:ec:6f:06:11:18:ef:
47:8a:91:6e:31:73:3b:b7:55:85:c9:f4:5b:16:98:89:a0:26:
95:c5:b0:57:42:ef:d9:6f:99:cf:6f:de:22:c7:3e:93:27:e6:
05:ff:cd:f6:13:9d:07:77:0e:97:a0:db:63:8a:0a:5c:4c:a0:
e9:1e:a1:4f:3d:03:95:78:f0:ae:11:5e:b1:eb:cf:44:12:69:
2a:8d:db:66:54:c9:7a:5a:cb:de:23:59:50:fc:ca:45:ee:14:
9f:32:37:dc:e6:e4:e2:c5:ae:08:99:ee:8e:e4:a0:65:ad:89:
c2:fd:fd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:36 2024 by rpki-client on console-ams.rpki-client.org