Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/q35XClELVCzNQCbk_Lmvn7IlOiQ.roa
File: q35XClELVCzNQCbk_Lmvn7IlOiQ.roa (raw, json)
Hash identifier: FKIbE71aUZS8FptyW2gvoRyYskApd4dmUqWN1KPjHgY=
Subject key identifier: AB:7E:57:0A:51:0B:54:2C:CD:40:26:E4:FC:B9:AF:9F:B2:25:3A:24
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 01856B53190DBD9F58E4BEE691F610894475
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/q35XClELVCzNQCbk_Lmvn7IlOiQ.roa
Signing time: Sun 01 Jan 2023 03:14:45 +0000
ROA not before: Sun 01 Jan 2023 03:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15464
IP address blocks: 213.238.144.0/21 maxlen: 21
213.238.158.0/23 maxlen: 23
213.238.155.0/24 maxlen: 24
213.238.157.0/24 maxlen: 24
213.238.156.0/24 maxlen: 24
213.238.128.0/20 maxlen: 20
2a02:50::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:19:0d:bd:9f:58:e4:be:e6:91:f6:10:89:44:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 03:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab7e570a510b542ccd4026e4fcb9af9fb2253a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:97:75:3b:aa:e3:a3:6d:fe:83:af:48:5c:
3f:8f:e4:03:dd:81:a1:53:87:8a:18:2c:30:99:03:
d5:33:55:20:e0:bc:98:e0:53:5a:42:4c:18:c9:27:
d7:f7:4c:dc:ee:c7:7a:a9:14:ac:25:1d:a8:58:ac:
68:90:c1:1e:da:b4:76:4f:2b:f9:78:ed:95:49:92:
2b:35:1f:9b:e2:45:8d:3c:2e:e2:5e:26:bb:ad:c4:
1a:a7:d4:d1:8f:7b:c8:d5:22:3d:f4:57:99:da:90:
a2:2f:96:b0:18:4f:4e:12:a5:13:c8:c1:e9:bb:37:
f6:07:6b:79:ed:f1:64:7b:4b:5e:70:2d:ab:51:46:
80:bb:b2:e7:48:b5:6c:10:a7:5a:4d:c2:1b:a9:fd:
51:f5:ca:82:d8:35:8c:42:fb:44:fe:9e:6d:b8:bf:
cf:b0:73:00:b2:5a:9d:5d:aa:85:32:13:7c:59:75:
f8:06:91:d8:db:20:17:16:6e:93:76:e1:2a:eb:c3:
a0:3e:5d:29:27:8d:4b:ab:49:b1:9d:8f:cb:06:73:
01:ad:bb:2e:42:20:5d:a3:6b:41:54:4d:36:0c:d8:
3a:68:64:82:3e:ff:a5:7d:e0:4a:64:b3:c0:02:90:
1a:ac:66:19:c0:d6:64:12:82:e1:c0:c5:5f:da:0b:
64:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7E:57:0A:51:0B:54:2C:CD:40:26:E4:FC:B9:AF:9F:B2:25:3A:24
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/q35XClELVCzNQCbk_Lmvn7IlOiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.128.0-213.238.151.255
213.238.155.0-213.238.159.255
IPv6:
2a02:50::/48
Signature Algorithm: sha256WithRSAEncryption
04:72:c0:a2:d8:7d:d2:6f:a5:85:51:7f:cb:b1:54:31:73:6d:
53:53:ec:de:60:c8:40:5a:cb:cb:ae:5d:0b:27:c9:59:9a:ee:
52:27:32:fd:35:8b:8a:d3:0d:b1:54:47:9b:96:16:c2:f6:8f:
88:83:3b:eb:28:af:4a:a8:dd:eb:85:4c:41:11:76:3a:97:40:
7a:25:f6:37:91:37:95:cd:26:fd:a5:a5:08:7c:23:fa:b5:c1:
75:ed:fc:0f:ee:e9:ae:46:db:d7:6c:6f:2c:66:af:29:dd:2e:
69:b9:5e:aa:f9:4f:64:34:37:d8:64:90:d9:ff:da:4a:99:91:
e3:cc:e9:4e:92:13:31:3c:43:28:b4:7d:75:92:71:b9:23:e6:
04:96:cc:9c:e8:1e:bc:6e:e7:58:95:d1:62:b1:fe:bd:e3:86:
28:61:c6:1d:c6:df:b3:ef:5f:c1:54:3d:47:d2:aa:bb:c4:19:
cd:98:07:bf:4c:9f:fd:24:62:89:95:36:88:7c:ff:1e:18:74:
fa:54:4c:49:09:e7:75:e1:b2:bb:6d:c4:4e:38:51:c9:bb:82:
be:b9:3c:4c:ad:6f:0e:41:8a:f4:c0:56:f5:06:86:cb:86:b8:
02:16:1d:d5:a7:ea:96:f2:2f:c4:45:f3:24:9e:a2:d6:0e:04:
32:e4:fd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:27 2024 by rpki-client on console-fra.rpki-client.org