Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/FUG8pWqumKA_7Fe79A1K1apS6aI.roa
File: FUG8pWqumKA_7Fe79A1K1apS6aI.roa (raw, json)
Hash identifier: J2q4+OtVV3jFSgV8pL59Eo84EFCW0YSmTxrGghjTLHQ=
Subject key identifier: 15:41:BC:A5:6A:AE:98:A0:3F:EC:57:BB:F4:0D:4A:D5:AA:52:E9:A2
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018982D6437D2B8D8B6957EE39D6AAADB985
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/FUG8pWqumKA_7Fe79A1K1apS6aI.roa
Signing time: Sun 23 Jul 2023 13:00:27 +0000
ROA not before: Sun 23 Jul 2023 13:00:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59729
IP address blocks: 213.209.135.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:82:d6:43:7d:2b:8d:8b:69:57:ee:39:d6:aa:ad:b9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jul 23 13:00:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1541bca56aae98a03fec57bbf40d4ad5aa52e9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:cc:ac:db:f1:98:9a:24:ac:d1:4a:bf:fb:
bf:db:6b:d9:1a:5a:30:21:3e:b3:96:ec:da:27:a1:
c2:4f:d3:4e:b3:bc:19:5c:5b:80:eb:d4:88:87:da:
bd:57:8a:b9:9d:b1:2d:39:db:ba:10:81:63:42:43:
c2:d2:a5:7a:62:8e:8d:60:1d:dc:61:0c:79:4e:c2:
29:53:7c:06:5f:6d:92:ae:fa:c4:6a:00:df:9e:37:
cf:d5:c7:6c:a9:3e:c3:d8:89:55:b6:bd:d9:bb:13:
7c:de:ac:5f:58:c6:16:48:52:0c:16:da:c8:4d:8c:
7d:89:82:91:00:6c:5c:7d:be:3e:ef:4f:31:5b:f0:
1f:39:67:50:ef:50:de:1c:5a:69:98:39:f7:b8:ea:
c5:ef:91:6b:b2:6f:ba:2f:67:4a:05:93:0b:30:1a:
33:3e:12:47:07:1c:19:f9:4a:3c:ff:cc:06:92:44:
5a:b3:d2:8c:ff:a6:17:02:e0:e2:bc:2c:a4:fa:7d:
db:45:3f:44:4e:35:4f:5e:c1:38:ce:a6:29:96:76:
c9:c3:39:1e:40:46:bc:e0:d3:61:f8:5b:e8:1a:94:
7d:f6:25:09:14:c4:43:81:ef:64:c2:ff:eb:3c:e9:
7e:4c:99:0b:c8:01:b7:1e:d6:44:2e:5a:30:0a:5e:
06:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:41:BC:A5:6A:AE:98:A0:3F:EC:57:BB:F4:0D:4A:D5:AA:52:E9:A2
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/FUG8pWqumKA_7Fe79A1K1apS6aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.209.135.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:28:8c:48:75:7b:19:06:18:ca:a4:37:52:0a:de:c2:46:92:
3e:0b:08:70:e8:82:04:8c:93:20:f3:6a:f8:7a:af:2d:8d:9b:
61:80:4a:eb:5d:d1:be:76:c2:fd:44:86:99:6f:65:99:2c:db:
77:51:e9:97:c9:af:98:91:b3:e0:ff:5a:0d:1a:bc:eb:04:87:
dd:e0:9c:47:de:5a:ca:b3:b9:2e:cc:1e:f1:10:a1:61:b6:63:
61:1e:63:da:85:51:92:0c:41:9e:1d:1a:8a:c2:f9:22:b5:06:
24:a1:58:f2:e3:76:d9:4c:d5:b1:22:00:7f:9c:ec:ae:25:95:
b9:69:11:35:ab:cc:31:1a:cf:59:2b:20:a4:0b:8a:1a:a6:7b:
aa:ad:ae:98:47:b7:ab:a7:7d:09:bf:fa:cc:61:e1:4d:92:3c:
43:fe:33:6e:6a:bb:bb:a6:99:c4:52:7b:3b:2f:6c:f8:7c:2c:
29:6d:e6:bf:ba:c2:86:0f:49:60:78:2d:2e:5d:ad:13:58:c4:
1f:c5:aa:19:16:44:45:42:32:31:68:14:43:31:6c:26:52:10:
6b:0e:f8:9b:58:c9:1d:6d:c7:c1:e8:93:2b:1b:b5:b4:05:21:
cd:6a:74:7d:e0:21:b4:65:3d:1d:19:db:d4:92:7d:94:f7:ca:
db:c5:f7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 10:31:48 2023 by rpki-client on console-ams.rpki-client.org