Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/bRRt_W-HIzHp8jwrWO26cgPhI_s.roa
File: bRRt_W-HIzHp8jwrWO26cgPhI_s.roa (raw, json)
Hash identifier: e8NxWB87ppxnnCrYR0NIMT0/WBB+ahFqAxOrzAiI8H8=
Subject key identifier: 6D:14:6D:FD:6F:87:23:31:E9:F2:3C:2B:58:ED:BA:72:03:E1:23:FB
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 01879DF2B42F98F4126BC2A3E565928CEC0E
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/bRRt_W-HIzHp8jwrWO26cgPhI_s.roa
Signing time: Thu 20 Apr 2023 09:15:41 +0000
ROA not before: Thu 20 Apr 2023 09:15:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210600
IP address blocks: 213.135.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9d:f2:b4:2f:98:f4:12:6b:c2:a3:e5:65:92:8c:ec:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Apr 20 09:15:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d146dfd6f872331e9f23c2b58edba7203e123fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:74:e4:36:79:9f:54:85:69:4a:9e:76:c1:12:
fd:70:cd:2d:69:c7:66:57:13:68:23:91:e7:03:d3:
d1:d8:00:16:d4:68:31:5d:a0:3b:b2:7a:05:ff:aa:
3a:20:bd:ce:6e:d2:36:af:46:53:74:b2:30:61:86:
0b:1f:4c:06:f1:9f:00:ac:7b:54:d4:45:61:c2:53:
20:c3:86:a7:f5:ab:d5:cf:4d:e9:04:0c:5e:0d:7f:
66:ce:a5:24:be:32:39:6d:b9:fa:e3:30:1b:9c:72:
ec:be:a7:76:56:a7:58:a8:82:ad:78:b5:ed:1d:f7:
d8:0a:a8:45:ed:81:8f:c3:90:78:41:b8:0a:21:8f:
26:59:20:41:75:41:1c:60:0c:7e:37:2b:36:2a:28:
70:d6:6b:80:49:d7:90:14:62:e5:86:57:a1:49:c7:
9d:d4:a1:53:14:7f:3f:d7:b7:d6:5f:bd:bf:4a:c7:
eb:4a:a0:cc:3f:73:9b:08:08:6a:08:76:5d:0e:23:
55:02:b8:3f:a2:6f:68:c7:26:5e:c1:19:c4:7e:40:
c6:93:06:32:fc:7f:c5:93:3c:f6:4b:b6:f1:bb:07:
eb:2e:96:96:2f:a0:a8:c0:5b:5f:a2:be:58:66:7f:
a4:ac:32:66:80:c2:2f:5d:a6:5c:e3:b2:4d:86:44:
32:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:14:6D:FD:6F:87:23:31:E9:F2:3C:2B:58:ED:BA:72:03:E1:23:FB
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/bRRt_W-HIzHp8jwrWO26cgPhI_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.135.74.0/24
Signature Algorithm: sha256WithRSAEncryption
01:08:29:c4:32:30:8a:ac:5d:53:44:e6:da:52:7b:da:87:b7:
67:46:5c:87:3b:fa:02:53:c6:56:42:3a:5e:c5:ee:50:73:26:
95:ab:c5:5d:a4:57:7a:b2:dd:cb:92:8e:64:38:d1:72:a4:e0:
cd:c4:da:9c:25:6f:1e:a0:33:57:df:e7:f6:72:d5:60:6f:a7:
af:49:60:1e:2a:bc:3d:0a:e2:ae:83:77:95:bf:be:7b:08:94:
08:b9:a8:af:06:d1:51:ad:63:85:7d:be:90:93:e7:67:98:a2:
04:61:5d:b8:56:0a:48:9c:5e:f2:8b:8b:2d:cb:b9:29:a8:8d:
c3:44:10:81:55:18:ee:c6:6a:b9:2e:10:44:e4:be:e6:82:30:
9c:e5:84:8e:de:68:07:15:2c:53:59:b8:76:ac:7e:93:3e:a3:
2c:2c:05:da:dc:97:a3:c3:16:46:80:48:7b:05:43:72:81:06:
d6:a1:92:81:db:c0:b3:1e:fb:3b:07:5e:66:b9:6d:89:89:e3:
90:10:33:a2:e9:39:db:20:97:1e:6c:86:eb:56:50:17:78:26:
0a:04:76:f2:ff:9d:c5:aa:76:0b:dc:05:7d:3a:ea:be:f1:42:
57:91:57:f2:c5:f3:a0:72:d0:27:fa:98:e1:c8:af:6e:91:a0:
88:0e:c4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:36 2024 by rpki-client on console-fra.rpki-client.org