Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/0D1HP6XGITfppTxcK2oLS0l9dR4.roa
File: 0D1HP6XGITfppTxcK2oLS0l9dR4.roa (raw, json)
Hash identifier: QDzxYOBY4JqH0kplVRE+CNzHWVROfLWEmSgGrOEheYU=
Subject key identifier: D0:3D:47:3F:A5:C6:21:37:E9:A5:3C:5C:2B:6A:0B:4B:49:7D:75:1E
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018571D7E15CE2DC2BFE6E4A51BA2A3AC5FF
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/0D1HP6XGITfppTxcK2oLS0l9dR4.roa
Signing time: Mon 02 Jan 2023 09:37:31 +0000
ROA not before: Mon 02 Jan 2023 09:37:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210703
IP address blocks: 212.69.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Apr 2023 19:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:e1:5c:e2:dc:2b:fe:6e:4a:51:ba:2a:3a:c5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 09:37:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d03d473fa5c62137e9a53c5c2b6a0b4b497d751e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5b:fa:f5:b4:00:20:bf:51:28:02:3a:48:90:
89:26:22:04:18:cb:43:73:5f:51:ef:91:36:96:d8:
dd:d9:61:31:fb:a6:ce:98:6a:7f:e2:e5:48:ea:64:
dd:37:18:46:d2:5a:21:4c:28:8b:7e:bd:cd:fe:e0:
35:61:7f:87:06:75:49:31:7e:a1:0d:58:f1:e2:7b:
4f:09:71:e0:95:d3:6e:68:bb:b9:fa:47:85:66:7c:
97:cb:d9:3b:8f:f2:6e:87:2e:10:06:d9:8d:db:db:
57:48:0d:13:6f:61:db:a8:63:5d:6f:41:7e:51:7d:
73:54:dc:26:af:3f:3e:96:a5:e6:77:8d:c1:96:b7:
97:81:c7:0e:33:e8:30:93:eb:c0:bb:b8:de:06:5a:
10:42:ef:a4:5c:ec:2b:20:e1:6d:5e:2b:21:37:bb:
73:35:fa:25:ab:c8:9c:58:ba:60:9e:84:89:66:aa:
de:be:fe:0b:6f:de:e0:25:6d:7e:7d:4c:46:12:b5:
08:e7:8c:70:28:98:55:57:8f:98:6a:8c:23:12:27:
cf:1f:4a:4c:1b:ee:3f:cd:9d:20:08:a1:77:6a:59:
3a:7c:e9:f4:3b:57:1e:0e:11:d4:da:f8:f7:60:ec:
91:09:dc:56:8d:02:2e:9a:aa:b7:41:44:09:aa:2c:
65:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3D:47:3F:A5:C6:21:37:E9:A5:3C:5C:2B:6A:0B:4B:49:7D:75:1E
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/0D1HP6XGITfppTxcK2oLS0l9dR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.13.0/24
Signature Algorithm: sha256WithRSAEncryption
91:70:29:5e:c2:c0:d4:ba:be:e5:1b:4b:69:c2:4a:68:44:ff:
87:2c:a9:64:fc:7d:1e:47:b6:b1:ff:37:60:94:15:7c:5a:c6:
e4:6f:5c:75:22:dd:d6:e7:ab:c8:b3:69:8a:38:b3:1a:0d:b4:
cb:d8:ce:a1:46:56:02:41:e2:ae:9a:d1:5a:bb:3e:62:30:ad:
0b:57:df:d7:8d:2f:eb:57:a7:a9:80:e6:cd:6f:19:ca:07:8a:
96:36:5a:27:db:22:b1:48:7d:e6:b4:89:98:93:14:33:15:29:
f9:d0:2f:69:94:d0:45:5e:ee:f0:c2:e9:43:66:0b:7f:97:32:
c1:8f:13:e5:f8:06:b5:61:42:3e:57:4a:31:2d:08:ef:e1:f3:
90:cc:9f:c0:f6:84:05:c0:f8:f9:e6:fe:10:4f:fb:61:12:da:
2b:13:7f:e7:02:2c:92:ff:78:e1:3c:f9:da:33:c6:ad:b3:ee:
f3:a2:3d:21:fa:cf:af:28:a4:17:7b:0b:da:fe:bc:88:ed:03:
30:e5:c2:de:34:49:5d:7a:44:2b:a3:e2:5a:98:ea:4e:91:1e:
71:12:d8:14:b4:f6:4e:5f:a8:12:5e:d1:cc:e9:50:95:35:89:
1a:4b:6f:96:1e:47:dd:a7:fa:44:53:ca:43:2f:a8:df:08:a1:
d3:6f:9f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:25 2024 by rpki-client on console-fra.rpki-client.org