Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/hCMEhnGr-QiYxcnRCftd-zruCao.roa
File: hCMEhnGr-QiYxcnRCftd-zruCao.roa (raw, json)
Hash identifier: dwow/cg7FKoEdkVEbRlkSdhsgX5g3tduSqAf/a+Fwf0=
Subject key identifier: 84:23:04:86:71:AB:F9:08:98:C5:C9:D1:09:FB:5D:FB:3A:EE:09:AA
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 01856B531CE2929400D68F34651251AEA5E1
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/hCMEhnGr-QiYxcnRCftd-zruCao.roa
Signing time: Sun 01 Jan 2023 03:14:46 +0000
ROA not before: Sun 01 Jan 2023 03:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 213.238.166.0/24 maxlen: 24
213.238.173.0/24 maxlen: 24
213.238.174.0/24 maxlen: 24
213.238.177.0/24 maxlen: 24
213.238.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:1c:e2:92:94:00:d6:8f:34:65:12:51:ae:a5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 03:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8423048671abf90898c5c9d109fb5dfb3aee09aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:5a:81:3a:3c:a9:5d:ab:a0:a4:f3:e5:45:
d8:48:1c:10:35:1c:d0:5c:92:5b:19:7a:cc:79:0f:
41:d5:cd:3a:b9:96:92:69:0e:f5:e0:4b:bf:3a:12:
fe:f0:44:a7:c9:b2:7b:0e:10:4c:5a:25:4e:f6:6d:
02:ad:51:be:d4:78:a5:86:32:92:8a:c3:99:4e:f0:
b0:e0:e3:a9:e0:2d:7b:ab:9b:8f:bf:db:08:6b:dc:
f3:f4:a0:a5:9f:c4:e7:c1:13:44:b9:2e:70:c4:89:
ff:3f:59:75:c2:9d:06:73:ee:ca:42:a8:45:59:5f:
6c:45:6b:d1:43:78:70:93:e0:36:13:75:92:2f:24:
b2:b5:c7:cf:28:64:d4:e5:aa:4b:63:2a:4d:aa:92:
e1:15:6e:fc:0d:d6:b3:39:fb:22:b8:cb:ab:f3:bf:
dc:6b:f3:21:c8:ab:46:26:ef:60:a3:d3:38:c1:6d:
30:e8:cb:1a:27:37:48:1d:f5:8a:8a:9b:3d:0a:9c:
23:1c:1a:65:a4:1e:00:88:74:b7:6d:af:f5:4c:32:
a2:e9:71:95:b8:f3:ff:ff:63:8f:41:38:03:1c:0c:
ee:56:b3:88:37:09:a9:3e:7d:80:c5:41:8a:49:81:
2d:37:88:ca:1c:b6:bd:e9:75:65:fc:7d:87:94:11:
63:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:23:04:86:71:AB:F9:08:98:C5:C9:D1:09:FB:5D:FB:3A:EE:09:AA
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/hCMEhnGr-QiYxcnRCftd-zruCao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.166.0/24
213.238.173.0-213.238.174.255
213.238.177.0/24
213.238.184.0/24
Signature Algorithm: sha256WithRSAEncryption
42:b9:78:05:d2:a0:77:c8:3f:56:b4:ee:22:6d:ec:84:ce:91:
1f:e3:b5:ff:31:b9:89:29:6b:5d:74:94:48:35:2c:23:5a:0c:
d8:d9:6a:df:1d:4f:1e:a4:fc:b5:e2:be:60:d3:bc:36:10:56:
e9:77:75:32:ca:16:e2:33:9c:0a:31:df:f4:3b:e2:2d:fe:19:
16:a3:ad:ac:da:7e:13:8e:23:eb:d2:59:2d:28:69:cd:64:c9:
33:36:80:2a:d4:d9:f4:1c:ee:07:e4:99:b7:72:eb:69:ac:dd:
fc:c2:75:90:98:0e:5c:95:15:f6:4d:7c:ca:6b:b0:ef:83:84:
9d:52:28:ef:42:5f:72:b7:02:d4:0a:fa:59:37:5a:fe:55:3a:
2c:15:70:49:10:6e:53:98:00:b4:a5:64:ca:5c:d8:71:61:52:
a8:58:b4:d3:71:57:30:69:28:a9:8c:0a:03:de:bc:7d:73:a4:
f8:7b:bd:6c:34:ce:45:c8:76:83:d1:ce:6c:d0:c1:80:dd:e4:
62:dd:ea:82:36:28:17:40:f0:d8:a7:76:cb:aa:aa:5d:1e:06:
a3:78:72:8c:a1:01:78:ee:20:4d:1a:d8:74:26:6b:71:42:16:
b0:2a:63:b2:cf:86:76:e9:b3:60:18:3d:82:da:d6:db:29:21:
e7:bd:a9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:32 2024 by rpki-client on console-fra.rpki-client.org