Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/gfH3ZlqkXHflGCrxd47OEl1B1cA.roa
File: gfH3ZlqkXHflGCrxd47OEl1B1cA.roa (raw, json)
Hash identifier: LBwFZuWLfcG2HSHpo9SOhe+DbqNSwxQjohulSn/Z8Xg=
Subject key identifier: 81:F1:F7:66:5A:A4:5C:77:E5:18:2A:F1:77:8E:CE:12:5D:41:D5:C0
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 018806F96BEED69C93195C3D3D69C85C2CE4
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/gfH3ZlqkXHflGCrxd47OEl1B1cA.roa
Signing time: Wed 10 May 2023 18:43:09 +0000
ROA not before: Wed 10 May 2023 18:43:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48542
IP address blocks: 213.238.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:06:f9:6b:ee:d6:9c:93:19:5c:3d:3d:69:c8:5c:2c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: May 10 18:43:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81f1f7665aa45c77e5182af1778ece125d41d5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:49:85:b0:97:41:5e:4e:1c:e6:67:da:21:02:
7f:d5:06:8e:3e:17:56:8a:cb:47:99:0b:c6:f8:f6:
a1:d2:1f:98:eb:10:01:84:30:76:f1:71:96:b9:57:
4d:9f:42:bd:63:e1:06:b7:06:55:ca:40:3d:71:17:
f8:1b:3c:dc:9b:ce:74:8e:4b:3e:f6:5c:d4:0e:5b:
d1:2a:80:91:18:7c:cc:40:8e:3e:fe:6e:a5:2b:22:
42:64:b4:bd:d0:f7:fd:f1:cb:c0:2c:ea:a1:dd:76:
fc:74:5e:77:7b:1d:8e:21:d6:58:04:44:f0:9e:93:
62:ae:1d:08:18:ab:d7:2d:34:23:87:ba:15:77:c1:
60:b0:b8:3c:d9:6b:d5:dc:a3:b2:65:3c:93:6e:06:
1b:3f:7a:62:7a:d1:55:1d:58:68:6e:bd:50:1e:a9:
d7:9c:bb:59:a2:f7:6f:eb:86:5e:4b:88:f3:11:04:
9a:db:89:f6:97:47:7d:56:60:6e:a2:51:18:f2:68:
cc:45:2c:ae:01:ec:10:46:22:87:0d:cf:f3:82:e3:
fe:e4:e1:24:96:de:64:17:9d:d9:e8:a7:ed:f4:90:
a6:d4:f6:e3:13:87:3b:53:d7:79:83:dc:69:91:d0:
f7:4c:ad:9f:4b:db:e0:5c:99:b5:1d:89:49:1a:18:
17:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F1:F7:66:5A:A4:5C:77:E5:18:2A:F1:77:8E:CE:12:5D:41:D5:C0
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/gfH3ZlqkXHflGCrxd47OEl1B1cA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.170.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:cb:73:a0:1c:e8:bc:8b:cb:95:52:5b:d8:1f:9b:8c:3c:9b:
74:2e:f7:27:87:ee:e2:62:3e:53:cd:c1:e8:12:53:88:31:c4:
8b:df:4a:ac:65:59:02:08:4f:eb:a2:d3:a3:53:df:32:fd:13:
fa:50:f7:19:ee:31:a8:c6:52:50:57:bc:13:92:30:20:eb:4d:
8b:56:41:3a:6b:61:d7:7a:19:b3:71:44:2c:ba:0d:49:57:c6:
ca:91:82:08:16:3a:67:22:c0:86:0f:3f:e9:13:b7:b2:f9:d3:
bb:c3:3d:42:0d:e2:81:a8:af:7e:29:75:87:9e:2f:25:19:6a:
64:83:fa:7d:a7:5f:30:d9:30:b4:9c:10:34:cb:6b:3f:28:03:
27:e1:fc:45:fb:4c:b8:4d:d5:57:0d:4f:30:46:91:3e:e3:59:
9e:c2:ae:4d:73:55:58:21:ae:3b:1c:91:e0:fa:41:9c:fe:0f:
fc:43:1e:3e:c1:5b:e2:de:10:0a:85:64:01:6d:e3:ef:8f:50:
35:96:a7:e4:5f:af:dc:96:66:4f:ad:55:17:19:a1:43:7a:53:
12:24:bb:fe:e3:4d:8f:91:b0:61:b1:77:ae:db:80:9a:ac:11:
bd:04:48:ee:17:fe:c3:01:7a:11:04:c6:d8:5c:2e:aa:87:6e:
54:f3:26:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:32 2024 by rpki-client on console-fra.rpki-client.org