Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/NhQ7fxTqVdDhLJxl67B0eQ6OvjU.roa
File: NhQ7fxTqVdDhLJxl67B0eQ6OvjU.roa (raw, json)
Hash identifier: w77KH++xtc8lGl8P5UjV6WQVE1I6ts+iz3AkU6K7UHg=
Subject key identifier: 36:14:3B:7F:14:EA:55:D0:E1:2C:9C:65:EB:B0:74:79:0E:8E:BE:35
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 01856B531D851170DE7D464F7ADEAD10184B
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/NhQ7fxTqVdDhLJxl67B0eQ6OvjU.roa
Signing time: Sun 01 Jan 2023 03:14:47 +0000
ROA not before: Sun 01 Jan 2023 03:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43391
IP address blocks: 213.238.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:1d:85:11:70:de:7d:46:4f:7a:de:ad:10:18:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 03:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36143b7f14ea55d0e12c9c65ebb074790e8ebe35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:de:b0:8c:17:98:e6:9b:be:52:1d:39:00:e2:
f0:42:5a:ac:e0:ea:e7:ac:a5:78:b8:62:ad:3f:4c:
a2:f4:2f:71:2c:dd:f9:52:ec:c2:ad:69:d8:45:f4:
2e:9f:c6:56:10:17:a3:a0:20:85:72:10:1b:27:46:
75:ae:2e:d3:ec:6c:68:99:6b:1a:98:f3:1f:85:4c:
5c:45:13:ef:ce:c0:c3:fd:ff:43:90:a2:5e:db:0c:
03:21:c5:f4:9d:eb:e9:27:2b:50:b6:7f:5f:06:14:
ad:d2:19:67:74:2c:82:6f:4e:30:1e:d7:5f:47:22:
1e:99:40:1b:96:9f:20:35:b8:b7:b6:73:d5:20:0b:
cc:c4:11:14:3b:0e:05:fb:f2:2f:a9:08:3b:9a:30:
2c:41:9c:4b:6c:ba:91:cf:04:6b:ca:68:79:cf:2f:
73:59:0b:21:63:25:25:67:4b:89:06:75:e2:c1:40:
1d:7a:34:ba:ab:7d:de:03:b4:52:30:b7:2f:18:a2:
df:4c:fb:81:87:74:bc:36:6c:c2:ee:b9:fd:35:a0:
69:75:e9:f8:46:fe:87:ad:6f:a9:ea:b3:8a:65:38:
0c:53:24:b6:bb:a4:5d:0e:83:71:aa:30:da:26:7e:
8d:f5:b6:ff:8a:ec:42:ba:43:fa:4f:88:a7:03:42:
8f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:14:3B:7F:14:EA:55:D0:E1:2C:9C:65:EB:B0:74:79:0E:8E:BE:35
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/NhQ7fxTqVdDhLJxl67B0eQ6OvjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.169.0/24
Signature Algorithm: sha256WithRSAEncryption
45:34:28:81:1c:12:3a:e8:09:05:55:79:ad:f0:2a:23:d5:54:
cd:d9:bb:55:f8:48:dc:27:82:ce:fa:65:dd:e6:bd:c2:75:52:
e7:cc:0c:ba:ef:ff:69:52:f3:23:59:c3:b4:52:e0:77:38:15:
a2:a1:55:f9:7a:c0:68:ff:12:01:cc:a1:ac:d7:68:7a:9b:0a:
fe:9c:f1:76:67:ec:db:4a:02:d0:98:b4:d7:6b:8a:11:ba:e3:
c6:5c:79:58:6e:ec:c7:1d:fa:12:06:5a:a2:53:4d:ba:d0:b0:
3a:1e:7c:57:d5:43:1c:4c:d7:ed:82:ae:73:13:b8:5c:ac:c6:
7a:2f:bd:09:bd:55:ac:9c:48:da:0a:3b:1a:19:48:47:d2:a6:
22:0e:b9:63:99:8e:93:75:19:09:f3:c9:4e:15:d0:95:be:25:
a2:e4:a2:95:e7:14:5b:76:af:9f:8e:0f:9f:51:7b:af:fe:10:
83:8e:da:6f:48:37:a4:13:eb:44:d6:46:cb:d9:51:c8:4d:c1:
c7:b8:70:93:aa:20:f2:8e:b5:6d:fd:52:20:77:37:be:8b:10:
68:1d:1d:0a:49:3b:c9:17:0f:e6:4e:2b:10:77:ad:5c:98:87:
58:87:70:ac:3e:00:08:5b:68:e1:49:a9:2b:72:ec:6a:f4:ed:
bc:c2:ee:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:36 2024 by rpki-client on console-ams.rpki-client.org