Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/9ly56aOeIDhdSfNo12NWmvAD9wE.roa
File: 9ly56aOeIDhdSfNo12NWmvAD9wE.roa (raw, json)
Hash identifier: 1yOnFtOzmlEu/VX5Zx9S7uiCvDMKz6UD1y7IkBBFLgE=
Subject key identifier: F6:5C:B9:E9:A3:9E:20:38:5D:49:F3:68:D7:63:56:9A:F0:03:F7:01
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 01856B531E63EE3FCAD7C1CE888D7B492267
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/9ly56aOeIDhdSfNo12NWmvAD9wE.roa
Signing time: Sun 01 Jan 2023 03:14:47 +0000
ROA not before: Sun 01 Jan 2023 03:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48292
IP address blocks: 213.238.165.0/24 maxlen: 24
213.238.161.0/24 maxlen: 24
213.238.162.0/24 maxlen: 24
213.238.163.0/24 maxlen: 24
213.238.164.0/24 maxlen: 24
213.238.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:1e:63:ee:3f:ca:d7:c1:ce:88:8d:7b:49:22:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 03:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f65cb9e9a39e20385d49f368d763569af003f701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6b:b7:aa:f2:51:ef:02:fe:0d:85:c3:54:67:
e5:b4:4b:da:c5:e6:1d:7a:d3:e3:3d:ed:7f:57:4f:
b4:f9:ee:e1:6c:7b:74:fb:5d:40:47:ef:43:0f:ae:
e0:cb:57:49:2d:8f:c2:a7:60:6d:3a:fa:8f:86:ef:
dd:0d:e6:62:d6:4d:f8:07:f7:7a:55:0d:52:0b:85:
8a:20:6a:80:7d:4c:be:37:cb:c9:2b:1f:89:01:04:
8b:0b:6c:d4:55:ea:f3:14:18:a6:b3:c0:de:c5:8c:
41:9d:0e:47:c4:89:2e:9c:4c:0b:e8:74:45:2b:cd:
ab:5c:99:bd:58:8b:36:f3:7f:48:e5:b5:c4:a3:0c:
d2:fe:b4:40:83:9f:9d:10:7b:ec:e9:c5:3f:2b:2d:
9b:f8:70:ec:f9:7f:dc:89:e7:f1:b4:63:18:4e:4a:
79:6d:7d:d1:9b:2b:e9:f1:bc:ad:cb:8c:70:3c:19:
e9:96:28:98:5c:e2:18:d1:bf:93:c2:54:90:ab:4e:
21:9c:40:99:75:5d:ac:4e:c3:c8:35:58:5f:ac:3c:
4d:98:ba:1a:33:79:7c:0c:50:8b:b1:2d:59:29:51:
32:03:3d:db:e9:a7:78:4b:2a:19:72:d7:d2:64:33:
b3:22:b4:0e:68:68:29:cc:3a:05:ef:a0:b7:2a:b5:
3d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5C:B9:E9:A3:9E:20:38:5D:49:F3:68:D7:63:56:9A:F0:03:F7:01
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/9ly56aOeIDhdSfNo12NWmvAD9wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.160.0-213.238.165.255
Signature Algorithm: sha256WithRSAEncryption
aa:69:7d:5b:1c:eb:b6:f8:3e:5f:98:e0:a1:3c:36:46:ab:a6:
5c:cc:18:a9:bb:b1:77:18:cf:42:ee:8a:e2:04:db:34:dd:e1:
0c:b2:c9:c9:20:c3:1a:4c:c9:7b:6c:45:c6:b8:12:39:47:b3:
a7:5b:ec:b8:24:80:64:73:1e:94:85:d1:31:a8:18:ac:cd:96:
6b:56:b6:98:08:b5:85:e3:f4:8f:02:e3:a9:c0:0e:06:a3:24:
af:9f:ab:7a:02:a2:45:7d:96:69:79:2b:09:99:47:20:dc:af:
9e:2d:e8:16:e3:0c:0c:e2:e2:7d:d7:05:b6:49:c9:57:a6:fa:
51:d8:8b:93:32:82:76:c5:0f:7b:0a:f0:bb:0a:ce:3c:ce:e0:
8e:a9:bf:50:bf:10:0a:5a:6f:94:3b:26:14:a8:55:2b:7f:14:
0d:81:3f:0a:4c:c9:89:25:53:f1:37:07:f5:d5:8d:1c:a1:b1:
a2:65:0e:51:bc:1f:b4:d3:03:fd:e2:e6:ec:80:cd:b5:7d:59:
90:e7:85:58:08:94:0f:e8:cb:2c:c2:de:b1:5e:6e:e4:36:04:
b7:ed:f9:6e:e0:d1:a4:85:9c:7a:80:35:1f:dc:13:b5:81:94:
2e:17:34:15:a3:b9:9d:7f:8e:8b:de:e5:f9:c4:6f:ee:8d:8a:
6c:32:b4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:27 2024 by rpki-client on console-fra.rpki-client.org