Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/_zNU9eJUMnk6lBL3ylL5Z6ehmyQ.roa
File: _zNU9eJUMnk6lBL3ylL5Z6ehmyQ.roa (raw, json)
Hash identifier: hhK/vNP55qHxYcR/e54KcTkutTfMbeC3YqFfsxZQLZE=
Subject key identifier: FF:33:54:F5:E2:54:32:79:3A:94:12:F7:CA:52:F9:67:A7:A1:9B:24
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018BCA25CE146150239766B935E2390C4660
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/_zNU9eJUMnk6lBL3ylL5Z6ehmyQ.roa
Signing time: Mon 13 Nov 2023 19:25:57 +0000
ROA not before: Mon 13 Nov 2023 19:25:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 213.209.145.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ca:25:ce:14:61:50:23:97:66:b9:35:e2:39:0c:46:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Nov 13 19:25:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff3354f5e25432793a9412f7ca52f967a7a19b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:8d:0b:0d:57:28:db:9a:1e:3c:4f:f7:73:
4a:a8:c1:50:0c:cd:97:57:72:85:25:4c:54:f7:a0:
04:d4:9a:68:c7:f8:c0:bb:34:14:fc:20:5c:ee:6f:
0f:24:ba:e8:cc:4f:59:13:0a:3c:bf:e6:90:e1:d5:
19:bc:03:62:4f:1f:2d:5c:8b:9f:3d:73:34:9e:f6:
02:bd:03:0e:03:be:2a:a7:d0:05:28:08:fd:84:06:
0c:57:00:3c:49:33:1d:ef:7c:d7:24:d3:01:7d:78:
35:19:ad:e5:1b:53:e7:d0:b0:e8:e8:ba:87:38:b0:
24:1c:61:52:ac:13:19:7f:b1:da:76:30:7d:16:25:
b1:b4:6b:97:b2:81:5a:e4:ad:6b:33:91:04:32:b8:
95:fe:44:d9:0a:bf:71:2b:ac:42:86:f3:78:11:39:
a6:69:c5:cc:15:eb:07:0d:58:34:44:06:cb:55:47:
40:16:3c:99:82:0b:85:54:aa:57:e4:97:2d:a0:98:
c3:50:59:05:c0:74:c3:67:c7:56:9d:5b:0e:10:65:
f1:5f:1d:e5:83:91:30:82:50:81:a5:7d:89:c3:16:
6a:6f:9b:0d:51:3a:05:f8:9e:9e:45:78:76:33:db:
a6:33:81:e2:1e:a9:c5:44:a6:b4:27:b9:ac:a7:6d:
58:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:33:54:F5:E2:54:32:79:3A:94:12:F7:CA:52:F9:67:A7:A1:9B:24
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/_zNU9eJUMnk6lBL3ylL5Z6ehmyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.209.145.0/24
Signature Algorithm: sha256WithRSAEncryption
52:ea:ab:8d:3f:ce:c9:04:36:17:fe:80:12:55:88:77:a6:04:
8e:02:33:1e:63:f0:42:de:87:a3:93:a6:24:e2:42:b3:78:1e:
f2:a3:f6:a0:64:b0:4e:2a:70:bd:62:b2:2f:28:d4:31:ab:2a:
1e:e6:cb:dd:2b:3f:ed:70:09:e3:8b:92:18:98:1e:7d:b1:10:
74:72:cc:ed:72:5a:02:71:27:6a:99:cb:e7:fc:87:0d:e9:9e:
cb:09:f7:7a:b9:b6:4e:8f:57:14:c1:6a:06:75:42:5b:3d:c3:
7d:af:97:1d:ff:24:85:6c:f4:3f:86:c5:89:69:87:e0:b0:27:
3e:53:a1:85:4b:af:9f:8b:be:93:41:0f:b8:ee:db:96:bd:89:
0e:fe:3f:bc:bd:1f:ad:16:86:54:ea:4a:b5:5a:86:77:62:b2:
51:d8:3c:45:e8:80:41:3c:dc:5e:78:47:ed:a3:60:54:03:e3:
26:0d:7a:a5:df:b8:31:e4:ca:f3:d4:f4:59:9d:cb:d7:38:bd:
a2:97:c2:3b:34:3d:c8:69:4d:e1:a3:e2:f5:66:03:32:63:c3:
5f:98:45:16:16:ed:ac:7a:80:7d:a0:b2:3b:bc:e9:ae:70:fd:
26:69:3a:d3:83:6b:dd:91:f4:78:9f:66:da:73:87:f5:c9:a1:
fe:2c:df:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 13 18:00:08 2023 by rpki-client on console-ams.rpki-client.org