Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/RHeb9uaz-9s_CDnieZ-wRhcjses.roa
File: RHeb9uaz-9s_CDnieZ-wRhcjses.roa (raw, json)
Hash identifier: vFbTo1/H2FtHlntMDxDUt/JXy0bdwFLfVxdA5YB5rBs=
Subject key identifier: 44:77:9B:F6:E6:B3:FB:DB:3F:08:39:E2:79:9F:B0:46:17:23:B1:EB
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 01856B531F9A7A0EF238066E7EB112571BF9
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/RHeb9uaz-9s_CDnieZ-wRhcjses.roa
Signing time: Sun 01 Jan 2023 03:14:47 +0000
ROA not before: Sun 01 Jan 2023 03:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51559
IP address blocks: 213.238.179.0/24 maxlen: 24
213.238.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:1f:9a:7a:0e:f2:38:06:6e:7e:b1:12:57:1b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 03:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44779bf6e6b3fbdb3f0839e2799fb0461723b1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:26:a6:b5:95:ef:0f:f5:55:f7:70:a8:3d:f0:
98:8e:eb:cc:9e:91:c0:15:d1:90:bd:59:d4:48:d0:
c2:80:1b:6b:ba:e3:ba:1d:24:04:26:87:60:05:84:
50:ec:73:03:f7:68:2f:61:d0:37:66:cf:96:ec:1d:
19:b0:fd:6d:af:39:b0:0a:f0:a7:c1:d1:52:97:11:
db:d3:35:71:1c:40:a7:87:ce:79:79:b9:5a:91:a6:
0e:7e:d5:f3:a5:2e:25:a7:d0:34:22:1a:78:8c:df:
6b:bc:53:1e:69:3a:16:58:69:a9:81:46:c3:88:dd:
35:a9:57:cb:8a:a5:77:34:c9:75:fc:07:ce:37:dd:
85:f2:2e:9b:dd:d8:4b:32:ed:ba:0b:b7:22:e8:a3:
6c:65:29:05:4d:cf:4c:5f:45:a3:86:3a:5b:2d:04:
7d:bf:95:f3:89:a6:8d:34:da:60:26:a8:5a:7f:e7:
24:74:1e:ab:bf:17:a5:01:2b:ed:fa:61:3c:5a:ab:
cd:8b:af:78:00:f1:0e:32:4e:4d:6d:f5:1a:a8:e6:
0e:a9:25:27:61:a6:6a:b0:7e:46:a2:54:2b:f9:d2:
7f:4a:e7:e3:d2:75:bb:e3:71:62:22:70:e1:6b:89:
98:a8:2e:c1:5e:ca:73:5a:5a:b5:d6:78:15:3b:3c:
25:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:77:9B:F6:E6:B3:FB:DB:3F:08:39:E2:79:9F:B0:46:17:23:B1:EB
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/RHeb9uaz-9s_CDnieZ-wRhcjses.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.179.0/24
213.238.181.0/24
Signature Algorithm: sha256WithRSAEncryption
17:88:ed:26:ea:7e:92:94:c7:6e:a8:2c:a6:d5:60:27:a6:87:
34:aa:48:fa:e8:cd:55:07:22:cd:dc:8a:68:25:4a:34:cf:cb:
1d:4c:a6:3b:4d:89:63:59:2a:b1:fb:45:2c:4e:80:7e:d8:ed:
f6:15:a4:7b:36:f5:1f:5a:53:29:d5:ad:22:12:26:c8:89:9e:
0a:98:ad:ff:cb:c9:51:19:e0:a2:d6:10:7c:0b:34:29:8c:d9:
bb:6b:0f:18:b2:b3:30:b4:86:76:e0:02:bd:44:09:0a:c4:4b:
80:91:15:50:59:14:4b:8c:3f:cc:c8:dd:e0:c8:d1:d3:db:5b:
aa:7b:8b:00:f9:a5:51:f2:41:d8:df:f6:8b:e5:8a:d6:57:1c:
c6:8e:16:36:1f:96:5d:be:f4:fd:d1:42:e8:16:f1:c8:74:05:
62:bc:43:c2:cb:04:56:f7:29:fa:1f:b5:e6:fc:a1:03:42:aa:
3d:67:d9:45:f8:1f:f5:76:7d:a0:21:3a:86:7d:c4:7d:9a:9f:
23:46:6d:3d:cc:f6:4e:fb:65:26:29:fb:cd:7e:a1:92:6a:86:
47:22:66:aa:e3:6e:df:c2:f5:85:62:e5:7e:6a:c3:c7:6f:02:
fd:5a:89:f8:17:c6:f4:50:9e:e6:e6:bd:e9:58:4a:c4:06:9e:
c1:6f:f4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:32 2024 by rpki-client on console-fra.rpki-client.org