Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/AQVfA6N-w9mjFh6dDPAl_dHvQVk.roa
File: AQVfA6N-w9mjFh6dDPAl_dHvQVk.roa (raw, json)
Hash identifier: rewpU5NI3CruefYC1pZYCq7b1SL69aqdV/t/+n39i0s=
Subject key identifier: 01:05:5F:03:A3:7E:C3:D9:A3:16:1E:9D:0C:F0:25:FD:D1:EF:41:59
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 018DE5DF39DEDF5BA4F2368BE952CFF9C69E
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/AQVfA6N-w9mjFh6dDPAl_dHvQVk.roa
Signing time: Mon 26 Feb 2024 14:43:48 +0000
ROA not before: Mon 26 Feb 2024 14:43:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198602
IP address blocks: 213.135.92.0/24 maxlen: 24
213.135.94.0/23 maxlen: 23
213.208.186.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Apr 2024 13:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e5:df:39:de:df:5b:a4:f2:36:8b:e9:52:cf:f9:c6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Feb 26 14:43:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01055f03a37ec3d9a3161e9d0cf025fdd1ef4159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:57:c0:48:d6:86:fa:c1:26:47:a2:ae:d4:9a:
50:43:75:19:ea:59:84:83:e7:64:7e:0f:6a:9c:34:
e9:40:84:a8:c6:d2:e0:5e:2d:c4:28:f0:d2:90:04:
6e:ae:95:ee:fa:51:30:e1:e9:df:16:7c:48:5c:31:
03:31:36:37:6c:c3:31:82:e6:84:93:a7:8f:48:d2:
b9:1c:f1:90:ac:28:a0:f0:47:50:d7:88:92:a4:90:
e0:f1:5d:9c:a4:3a:4e:96:49:14:9e:e5:c4:b1:9f:
67:f8:f7:11:ba:f0:e8:9b:80:0f:1b:3f:72:b0:9a:
59:d2:da:5a:1e:06:f6:ae:51:eb:f7:03:00:3f:1e:
c7:e8:cd:30:82:18:7c:31:7b:4f:87:20:1d:1a:22:
1f:38:c9:d9:e8:4d:dd:b3:98:a9:84:2f:1b:0b:47:
69:3c:fd:95:95:49:53:f9:85:57:de:7b:2b:11:46:
3b:f6:4b:61:76:47:b8:ce:8b:73:45:11:5f:c0:1c:
cb:dd:c7:4f:1c:a3:b5:ff:e6:29:44:59:ae:69:91:
9b:5a:7f:54:36:e1:65:f8:87:47:aa:1d:02:74:63:
0e:55:20:f7:78:2f:cd:b1:12:47:ac:57:fa:fb:33:
e1:5e:32:ee:ef:35:77:de:e9:2a:95:46:31:83:2f:
a7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:05:5F:03:A3:7E:C3:D9:A3:16:1E:9D:0C:F0:25:FD:D1:EF:41:59
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/AQVfA6N-w9mjFh6dDPAl_dHvQVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.135.92.0/24
213.135.94.0/23
213.208.186.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:68:52:b9:79:c3:eb:1a:1f:9c:de:1e:82:01:21:cb:c3:14:
4a:65:ec:63:25:37:db:63:d2:bf:b9:63:a0:a6:89:4d:17:50:
8d:e9:9f:e8:17:bc:a9:08:37:85:92:56:7f:b7:04:1e:ea:14:
c4:73:56:e6:09:46:12:8c:b7:57:da:0e:33:c1:42:a7:b9:ec:
39:ad:f2:17:1c:4f:3a:ed:6c:30:a7:ad:b2:50:a4:27:db:e5:
ae:1d:e6:1c:24:26:36:9f:d1:be:fb:00:50:77:ad:a3:78:4d:
11:7b:ac:0e:17:07:48:bb:2b:c5:5d:ab:b7:3a:4d:f8:49:74:
26:e8:b4:c6:25:48:84:b6:f9:44:61:4c:dd:03:13:c5:44:36:
c0:0c:1b:72:32:1d:e4:c5:b7:50:b8:bd:62:24:d6:3e:7e:d6:
1f:ad:04:89:fb:14:5f:53:ae:d1:24:a6:3b:b2:48:ab:b8:de:
c4:4c:a2:d4:36:b7:f2:53:ea:ec:e4:86:a7:01:e7:f6:65:9a:
d7:3c:7f:28:15:6d:55:fa:55:f7:1b:fc:57:c3:5f:98:07:05:
08:7e:60:4a:c3:aa:7a:b2:27:e7:72:b4:54:58:2b:66:f0:17:
54:84:bb:3e:ad:8f:1b:e5:5c:06:47:5e:25:01:89:be:91:56:
be:6e:0c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:05 2024 by rpki-client on console-ams.rpki-client.org