Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/FVdyh8pYDZ6vQGUzDFjb61aqze4.roa
File: FVdyh8pYDZ6vQGUzDFjb61aqze4.roa (raw, json)
Hash identifier: Rv9nyfQgDQPJa2MxjEcYb2K/Np8m2TkzFDov8Lg0dt4=
Subject key identifier: 15:57:72:87:CA:58:0D:9E:AF:40:65:33:0C:58:DB:EB:56:AA:CD:EE
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 01856B5323414BD3D35C40B961D87EAEEAA7
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/FVdyh8pYDZ6vQGUzDFjb61aqze4.roa
Signing time: Sun 01 Jan 2023 03:14:48 +0000
ROA not before: Sun 01 Jan 2023 03:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202505
IP address blocks: 213.238.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:23:41:4b:d3:d3:5c:40:b9:61:d8:7e:ae:ea:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 03:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15577287ca580d9eaf4065330c58dbeb56aacdee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5d:2f:5a:5d:3b:d8:1b:14:3d:bf:82:e0:ab:
85:00:df:6e:bd:1e:a9:6f:7c:63:e0:1f:9f:8d:1b:
e6:5b:eb:82:7f:ff:88:35:ed:92:7d:c0:f4:88:9e:
4d:9e:80:05:43:98:07:9f:d1:fe:72:a5:05:83:31:
1f:d0:99:f0:cc:24:c7:61:b0:0c:7c:3b:a8:20:cd:
78:ab:c2:18:c3:73:29:e1:7c:55:87:cf:f0:8a:dd:
9b:90:7f:24:34:8d:e6:59:f4:b1:48:ce:3b:48:8a:
63:1f:b5:48:82:7e:38:dc:bf:af:50:5a:29:b1:9a:
d3:8b:1e:3a:18:f0:5e:91:81:46:b4:c5:23:dc:9d:
c4:7d:8e:b6:a9:07:fd:89:ee:7d:25:ea:3a:a2:06:
46:17:df:cf:b2:e6:7f:ec:e1:d7:e5:b0:cd:8e:1e:
7d:7c:68:0a:ad:72:1d:ed:ee:f6:89:a5:04:51:54:
a1:12:ff:63:cc:02:93:ae:80:0b:92:6b:ea:da:bb:
db:ac:dd:cb:13:55:41:a3:c8:29:8b:97:b0:eb:c0:
10:5e:32:36:e9:cd:8e:dc:20:61:d2:01:3a:e3:f3:
69:ef:b7:5b:9c:b6:61:d5:58:23:9b:60:bc:cd:dc:
95:72:da:32:30:f0:f6:31:a3:8e:8b:48:c6:29:b0:
4e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:57:72:87:CA:58:0D:9E:AF:40:65:33:0C:58:DB:EB:56:AA:CD:EE
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/FVdyh8pYDZ6vQGUzDFjb61aqze4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.180.0/24
Signature Algorithm: sha256WithRSAEncryption
42:b7:e1:e8:17:c9:cd:49:b2:69:e6:be:ce:a3:f2:07:6c:14:
5a:d3:ac:6c:d3:76:41:fe:50:64:ae:54:06:8e:03:a2:33:15:
99:9f:e1:a6:9b:e8:0b:8a:ce:de:b9:15:90:fc:ca:63:aa:c9:
2c:83:c7:14:a7:01:6f:a9:86:81:d3:20:da:c5:89:07:17:ac:
7e:b3:99:38:af:7f:9d:6a:d7:4d:d8:85:d4:cd:7a:e2:34:ea:
63:89:da:ca:31:d2:33:b4:2d:ad:8f:98:ba:0c:d1:78:92:dd:
a1:f7:2e:b5:c7:6a:45:34:1e:b2:53:b1:e0:c7:66:c9:ed:59:
6e:3d:cb:e0:cd:90:76:7e:07:f0:1c:01:35:79:27:25:66:48:
7d:0b:25:b2:2e:85:49:22:65:8d:81:b4:84:77:4e:05:9b:a7:
15:5c:3d:05:8f:24:e1:7f:a2:d0:dd:4e:35:dc:be:b1:73:80:
03:96:71:dd:e0:c8:da:f0:82:56:c9:40:b1:36:a3:63:57:b4:
31:d4:86:a9:f5:59:45:3f:71:b0:a0:8c:b7:4c:50:60:45:c1:
ab:c3:fd:b7:85:c5:7e:11:fa:79:8f:93:15:21:6a:b3:3b:e8:
8b:cd:17:1a:12:a0:e1:bb:77:30:26:b5:78:3e:32:a5:5b:b6:
ad:c2:0a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:27 2024 by rpki-client on console-fra.rpki-client.org