Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/ET0_v9LX_rAK2xeBE_9y4EisRws.roa
File: ET0_v9LX_rAK2xeBE_9y4EisRws.roa (raw, json)
Hash identifier: OeBAkN76WIuo9kVt1EKcIjlWNHpb3Dcr9C26nGxQMfM=
Subject key identifier: 11:3D:3F:BF:D2:D7:FE:B0:0A:DB:17:81:13:FF:72:E0:48:AC:47:0B
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 0187DC396A4049ADCE75C35070F9871C19DB
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/ET0_v9LX_rAK2xeBE_9y4EisRws.roa
Signing time: Tue 02 May 2023 11:29:22 +0000
ROA not before: Tue 02 May 2023 11:29:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209275
IP address blocks: 213.238.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dc:39:6a:40:49:ad:ce:75:c3:50:70:f9:87:1c:19:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: May 2 11:29:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=113d3fbfd2d7feb00adb178113ff72e048ac470b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7c:5f:3e:a2:ef:0b:aa:21:03:0e:d0:bb:e2:
10:f9:c0:5c:2c:95:5e:8d:b3:eb:aa:c4:2d:f0:52:
cb:63:e2:83:15:44:58:b3:d7:55:21:c0:ed:8d:11:
89:a4:e2:b7:76:22:0d:96:c1:90:ca:9f:f1:f1:13:
ac:ed:fd:83:15:7d:54:c3:d4:a8:be:de:1c:99:be:
4b:38:12:e5:1a:cd:2c:d4:52:32:9d:6a:07:f3:c4:
ac:60:9a:ff:24:90:9b:0f:46:f1:9d:0b:a5:16:76:
42:b6:7c:08:96:14:f4:73:ab:a2:fe:6d:78:05:94:
39:76:2b:cb:28:3c:a6:a2:77:f0:5b:86:d3:2f:7c:
27:30:0b:b5:cd:62:83:dd:7c:6e:06:b3:a1:e0:60:
8e:cd:8a:eb:3a:f0:54:19:6b:6f:f7:57:be:f0:00:
73:ba:b2:92:73:da:10:fd:fe:75:6b:db:f4:f0:04:
b0:4b:be:e7:e0:4e:a2:12:be:78:e8:65:ef:e8:e2:
5d:99:a5:be:6a:b0:ef:71:06:9c:6d:3c:be:7e:ba:
a0:49:f1:71:8c:3b:a3:8e:6f:87:9c:d9:ad:12:96:
75:7a:09:63:da:45:02:8e:61:a1:1f:cc:b1:db:68:
07:ff:c6:ef:fa:d4:15:ad:40:bf:ca:e0:6e:12:73:
b0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3D:3F:BF:D2:D7:FE:B0:0A:DB:17:81:13:FF:72:E0:48:AC:47:0B
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/ET0_v9LX_rAK2xeBE_9y4EisRws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.160.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:0d:46:89:62:40:5e:48:83:fb:2d:ec:7e:56:ad:7c:39:6d:
a9:e5:be:8b:94:45:9e:32:c7:33:a7:07:68:ee:aa:42:8a:1a:
a7:fa:b8:fa:19:d5:9e:b2:91:9b:f4:0d:58:62:37:fb:7d:9a:
8a:6e:38:4b:28:95:9e:c4:57:78:c8:58:49:a4:8f:93:55:88:
cc:16:0a:2e:ec:d7:e7:22:3b:a8:5f:63:6a:97:a8:21:ff:9e:
47:f2:2a:09:99:72:40:46:ed:d7:f7:b6:91:49:b9:4a:c0:ae:
3e:2d:ac:ef:dc:77:e8:67:b0:46:a3:e1:ab:3f:cc:fa:5a:84:
05:3c:d4:d3:4d:6b:d6:d6:e2:0f:b3:bf:df:2e:e7:18:35:a5:
4e:ea:59:a1:77:9b:be:9b:8f:de:f2:11:8d:19:17:ef:19:5c:
70:8f:93:20:fd:35:8a:6f:67:3d:1a:67:ee:bb:b4:ea:2e:dd:
d1:86:22:c4:c3:96:8d:8f:0a:aa:15:53:44:4b:e4:fc:de:e4:
04:b6:35:4a:cf:64:85:79:ff:c2:a0:28:2c:4d:df:d0:c6:4e:
69:19:53:0e:3e:23:97:3d:1a:d5:a1:d3:d4:72:57:bd:36:3f:
bc:a9:93:fd:03:a0:15:42:1b:b1:17:30:e8:32:dd:a6:c1:bf:
f5:63:11:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:27 2024 by rpki-client on console-fra.rpki-client.org