Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/FXe8wfVw4H2evvy8eL6LrTAqqYM.roa
File: FXe8wfVw4H2evvy8eL6LrTAqqYM.roa (raw, json)
Hash identifier: 5Mi9wR3OUJN591ko3fwvPz0GY/XJsIgJKQCrkJw2Zuk=
Subject key identifier: 15:77:BC:C1:F5:70:E0:7D:9E:BE:FC:BC:78:BE:8B:AD:30:2A:A9:83
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 0185700276F0F6EED68027B21EBCD063B30D
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/FXe8wfVw4H2evvy8eL6LrTAqqYM.roa
Signing time: Mon 02 Jan 2023 01:04:47 +0000
ROA not before: Mon 02 Jan 2023 01:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38996
IP address blocks: 213.87.56.0/22 maxlen: 22
213.87.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:76:f0:f6:ee:d6:80:27:b2:1e:bc:d0:63:b3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 2 01:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1577bcc1f570e07d9ebefcbc78be8bad302aa983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ef:64:53:4f:8b:2f:e9:2e:40:67:4e:fb:eb:
f8:98:b5:eb:d7:0c:08:ad:1e:c9:86:66:98:69:c1:
5b:b2:6f:98:1a:c0:b7:6f:ac:7a:39:73:23:26:5e:
17:7e:9b:19:28:53:60:8d:bd:37:76:81:fe:db:57:
2c:29:e4:69:4d:b3:71:11:60:68:d2:df:1d:e0:cf:
ad:84:cb:57:22:c5:aa:f8:37:45:d4:be:3f:fa:99:
29:79:72:1e:5c:a0:09:36:2a:60:0a:3e:d3:3b:f1:
e2:2b:f9:d6:f2:e2:2d:80:b6:80:78:d5:90:f8:f9:
a4:d9:3e:3b:83:a8:dc:39:7d:0b:7d:1c:78:83:83:
73:8d:ed:11:c8:81:4c:a4:a3:21:b4:83:5f:27:c0:
50:a3:b3:0d:4c:e2:8c:d2:47:88:93:91:e5:8f:44:
fb:b4:2b:c7:b7:28:49:fe:d4:5e:22:e4:bc:af:16:
28:eb:82:b1:5f:7d:1f:a9:2e:c1:9e:4c:73:9d:f9:
2a:5a:13:87:c9:65:78:bc:a4:35:66:5c:37:a2:ea:
a2:7b:38:f0:87:12:96:27:90:a4:cf:8b:f9:42:ee:
40:b9:91:73:5a:2f:7a:9a:4e:aa:f2:03:b8:05:b0:
81:63:16:f0:b1:23:e4:42:b4:27:64:31:d7:13:20:
fa:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:77:BC:C1:F5:70:E0:7D:9E:BE:FC:BC:78:BE:8B:AD:30:2A:A9:83
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/FXe8wfVw4H2evvy8eL6LrTAqqYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.87.56.0/21
Signature Algorithm: sha256WithRSAEncryption
88:bf:13:e2:5c:ac:ef:b2:d7:39:2e:8e:d3:3b:81:2e:5e:45:
40:b7:de:ba:da:fa:ee:10:11:6f:02:90:81:eb:63:2b:b2:b1:
45:cf:55:26:02:11:b6:37:ad:de:e6:ca:71:47:59:3f:e0:03:
f7:46:8e:86:b1:9c:b2:84:1d:38:5b:13:02:6e:5e:83:e1:f9:
45:d8:b0:9e:e0:bd:f9:97:c4:8c:a3:ea:37:32:3f:4a:0a:c1:
50:3b:60:a5:b8:78:39:ab:f0:d9:ff:49:3e:e8:46:a9:3f:8e:
81:f6:28:04:fc:a1:e5:68:0f:0f:97:fc:5d:d6:36:5d:2b:47:
15:f7:bd:c8:9a:c5:99:ae:b1:c9:97:0f:1c:58:62:bd:42:51:
1a:d9:32:81:87:e9:7a:92:de:f3:2b:c4:55:da:a0:e7:14:7d:
d4:14:af:60:3d:ad:dc:73:3a:ff:46:bf:23:e5:c8:f5:20:37:
0d:20:26:a5:51:88:9b:5b:4d:21:22:51:ad:eb:6a:a0:aa:76:
5d:45:a4:14:de:0c:21:e3:e2:47:84:6c:f2:24:c3:30:2c:43:
e2:43:ee:fe:13:9f:2b:54:40:33:20:c6:54:6e:13:c7:5b:dd:
1b:1e:b0:41:19:bd:9d:f1:c6:d3:3b:37:8f:af:0d:8b:5d:f5:
a0:84:f8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:30 2024 by rpki-client on console-ams.rpki-client.org