Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/Et6cUl-q54FzQc_9rlAGlgiYYEw.roa
File: Et6cUl-q54FzQc_9rlAGlgiYYEw.roa (raw, json)
Hash identifier: YOItiDtAWiWqj+lsAb6BBSXowqbmYdZzd4Sq8R2bEnQ=
Subject key identifier: 12:DE:9C:52:5F:AA:E7:81:73:41:CF:FD:AE:50:06:96:08:98:60:4C
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 018CA56525DE03A1ECD4F10BCDFB761953EF
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/Et6cUl-q54FzQc_9rlAGlgiYYEw.roa
Signing time: Tue 26 Dec 2023 09:11:58 +0000
ROA not before: Tue 26 Dec 2023 09:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50832
IP address blocks: 213.135.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a5:65:25:de:03:a1:ec:d4:f1:0b:cd:fb:76:19:53:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Dec 26 09:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12de9c525faae7817341cffdae5006960898604c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:a4:36:ce:56:13:45:5c:b5:a3:ae:5f:50:
2e:c8:7d:fa:ba:f4:72:ae:b9:73:56:13:d6:17:51:
6d:8e:a6:ab:50:db:d7:3a:8f:a2:6f:d1:24:cf:cd:
69:a8:a0:59:3b:0c:61:df:f6:32:ec:a7:e4:ec:f1:
e4:d9:45:4f:6a:20:45:19:1a:7f:79:89:4d:dd:e9:
2a:07:b4:1d:04:f1:ae:f6:f7:5a:66:26:23:df:00:
47:d3:63:53:4e:24:57:12:66:a3:1f:62:27:90:82:
c2:8b:3b:c4:37:99:53:75:3f:d0:a8:bf:7e:a0:fd:
d2:62:01:a8:80:3b:18:af:b6:e4:0a:be:88:b1:c6:
db:3a:d8:b5:3d:62:70:a0:fc:af:b5:d2:f6:be:4e:
ac:fd:92:80:83:24:4f:42:c0:76:e3:61:60:09:53:
91:24:af:cd:10:e7:a9:a9:8f:57:07:7d:e7:cc:59:
98:d7:6f:37:59:1f:31:23:f6:5a:ef:e6:9d:76:98:
77:47:91:64:d5:99:75:ca:2f:09:d5:7c:4d:98:30:
f3:22:a1:06:eb:6e:60:08:17:d8:9e:64:55:fd:77:
b4:f8:9e:df:94:72:69:3e:5a:55:79:76:72:ac:59:
d3:4c:9a:42:a7:b4:db:c1:95:ca:8a:0b:8a:1d:4f:
0b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DE:9C:52:5F:AA:E7:81:73:41:CF:FD:AE:50:06:96:08:98:60:4C
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/Et6cUl-q54FzQc_9rlAGlgiYYEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.135.81.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:14:83:2e:47:53:4b:62:4e:18:66:ba:16:48:e2:58:9a:b5:
39:62:43:f3:c3:83:34:a5:40:ec:01:70:0a:20:24:77:e3:99:
d2:64:d2:5e:8b:e8:aa:cb:e2:47:a8:1d:52:16:1d:79:b9:14:
7f:af:fe:4a:76:a8:70:8d:af:1a:df:e1:e9:a5:fb:7e:ed:40:
0a:24:35:08:0f:ed:73:c5:30:5a:d2:f8:cb:e6:04:83:cf:e8:
cb:ff:4e:4a:24:f0:32:b6:4d:9c:7b:4e:bf:61:06:d7:c1:a4:
9d:d5:b3:0a:fe:b0:5a:3f:3b:b0:41:52:08:02:b2:0f:eb:53:
71:d0:ec:9f:14:c6:c4:a7:97:3d:74:b0:68:e3:01:94:30:e5:
73:a3:2e:73:18:4a:64:64:32:79:ef:0f:fc:c4:b7:a8:cd:4a:
1a:4b:5c:f7:84:d3:59:84:5f:ee:ee:36:c4:19:78:aa:bc:82:
5d:a0:e8:cf:02:40:61:7b:0e:6f:4c:80:ef:3f:46:9b:bb:28:
59:4a:bd:5f:8f:52:f6:36:3b:63:0b:42:4a:b8:ff:eb:c1:a0:
22:7b:4b:ab:47:95:13:ac:e4:93:b5:fa:89:22:aa:9e:67:41:
cb:84:d1:30:fb:c8:fb:11:3b:d9:44:a6:30:8a:81:26:c8:c5:
4c:ab:c9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:14 2024 by rpki-client on console-ams.rpki-client.org