Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/I9MktBhv3yQ9TWAa-1vBT7v7BYE.roa
File: I9MktBhv3yQ9TWAa-1vBT7v7BYE.roa (raw, json)
Hash identifier: 6K/GLMXwoLApuLfC/uF524Ng4eVYBEqkNtE3c47XbDM=
Subject key identifier: 23:D3:24:B4:18:6F:DF:24:3D:4D:60:1A:FB:5B:C1:4F:BB:FB:05:81
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 01856B53198E9F171FD0CD8F1B77CAAE19BF
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/I9MktBhv3yQ9TWAa-1vBT7v7BYE.roa
Signing time: Sun 01 Jan 2023 03:14:46 +0000
ROA not before: Sun 01 Jan 2023 03:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20649
IP address blocks: 213.238.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:19:8e:9f:17:1f:d0:cd:8f:1b:77:ca:ae:19:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 03:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23d324b4186fdf243d4d601afb5bc14fbbfb0581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:61:00:8a:3a:8d:5b:2a:f6:d6:1c:53:41:75:
b0:cc:c5:60:93:10:0c:80:85:fc:9e:c1:82:e4:9b:
df:fd:6d:69:38:cf:ef:9a:9b:1e:71:ae:0a:f0:b9:
4f:9b:db:30:dc:f7:62:5b:86:16:d8:e4:bb:52:27:
a8:08:f5:04:50:a5:55:6d:f9:b8:68:6c:62:3d:31:
29:ee:c9:94:1c:4a:19:02:b7:98:37:24:f7:b6:ec:
23:d6:89:8c:6b:c2:5e:96:d2:e3:ad:66:1e:12:24:
a5:18:03:25:4d:14:e2:bb:0f:3a:4d:2d:4c:bf:5d:
ec:30:48:40:d1:c2:4e:c3:20:df:90:27:1b:4a:e3:
b6:9e:b4:15:3f:98:62:b5:7a:ee:0d:57:36:4d:58:
09:54:30:c9:75:92:a3:73:c5:5e:d2:71:df:a9:b5:
c7:23:62:f5:2a:8a:fb:94:f1:c3:0e:55:65:64:d5:
8c:8e:3a:22:b7:fa:5e:51:7b:97:f4:9b:cb:ab:26:
d7:80:f4:7f:46:63:b7:db:06:e2:66:d7:cf:cf:f2:
e5:f7:fb:95:dc:60:01:0b:59:24:f3:1e:73:64:33:
b0:16:b6:9f:1d:04:23:3a:fa:35:7c:58:ac:1d:af:
20:70:2a:7a:d4:91:e1:cb:cb:90:b0:dc:ba:cd:7d:
15:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D3:24:B4:18:6F:DF:24:3D:4D:60:1A:FB:5B:C1:4F:BB:FB:05:81
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/I9MktBhv3yQ9TWAa-1vBT7v7BYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.177.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:8f:54:73:08:93:78:2e:3a:95:b8:40:d2:bb:b3:cd:b9:15:
ee:30:d7:30:6d:a3:38:a3:66:ff:6d:1f:5f:8f:c7:bd:f6:e8:
8c:f5:85:e6:9d:52:02:98:c3:23:18:a2:c8:9c:f7:8e:fb:0f:
a8:9f:0d:63:fb:1a:cf:8f:d5:40:8c:6d:da:c0:d0:13:3d:5a:
d0:43:ea:4b:49:83:cd:04:97:55:36:5d:ce:ce:11:77:ad:d3:
b6:47:30:a8:b8:01:25:a7:01:26:49:17:20:63:4c:69:4c:01:
95:43:1b:93:d6:64:eb:ce:fb:85:5b:f8:3b:db:2f:05:90:0b:
36:7d:71:97:2e:8e:ce:a9:83:7d:9d:49:ad:37:d7:31:a7:36:
7a:0c:cc:69:9c:94:b3:40:2c:f9:e1:9f:8b:2f:d7:3a:c4:e6:
85:fd:3c:ef:9a:6c:69:42:78:1d:b4:62:2f:15:90:56:ab:bf:
f8:be:90:1d:1b:2d:31:6f:9c:6a:7f:99:58:95:65:c5:52:82:
75:6a:b3:7c:e9:21:ac:6d:5d:fd:f5:b1:b2:1b:05:07:e2:ca:
60:cd:ef:19:99:d2:f2:18:5d:a1:14:7c:0a:43:b3:71:3b:9c:
97:34:0d:d3:69:00:19:9f:8b:b4:46:2a:d7:30:5a:bd:36:02:
cd:4d:67:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:27 2024 by rpki-client on console-fra.rpki-client.org