Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/wXeItoEJVIBb7O1rMPDhouLchqc.roa
File: wXeItoEJVIBb7O1rMPDhouLchqc.roa (raw, json)
Hash identifier: 2Vjpk7BTBv9E4AE7J1qkIDuXqhG723mXndgLHFKBNFY=
Subject key identifier: C1:77:88:B6:81:09:54:80:5B:EC:ED:6B:30:F0:E1:A2:E2:DC:86:A7
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 01856C53CBA03CF6EBCB521348F9402AFF8D
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/wXeItoEJVIBb7O1rMPDhouLchqc.roa
Signing time: Sun 01 Jan 2023 07:55:09 +0000
ROA not before: Sun 01 Jan 2023 07:55:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64409
IP address blocks: 213.135.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Dec 2023 09:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:cb:a0:3c:f6:eb:cb:52:13:48:f9:40:2a:ff:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jan 1 07:55:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c17788b6810954805beced6b30f0e1a2e2dc86a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:50:57:ca:f6:49:03:a4:eb:4c:3f:ae:68:
9a:18:07:e5:b2:d3:fb:45:19:ad:e6:f5:cd:47:b2:
d5:21:04:df:26:1c:7a:af:6f:86:db:ca:04:6b:34:
91:cd:51:31:de:d6:4a:07:c4:8a:3e:02:c8:14:b4:
9c:82:b1:a2:1e:aa:76:04:ec:38:e2:86:73:75:32:
c7:8b:03:7f:26:39:94:2f:e7:0d:c7:ab:53:06:db:
89:ff:f3:d8:a0:84:41:e8:04:98:82:d2:b0:1b:d0:
54:75:dc:d7:1c:4b:12:39:79:40:c8:ae:0e:31:70:
2c:b2:e1:a7:57:47:f3:e5:16:cc:f1:2d:6f:1b:04:
9d:29:e5:12:61:42:2d:76:db:3e:27:36:56:0f:e3:
7d:e7:b9:f3:cd:b2:b9:5c:18:ac:a7:35:1b:c1:2b:
1e:47:ff:43:a7:69:7f:32:96:b2:0f:fa:5d:62:53:
57:f1:15:74:65:77:4b:83:96:79:e6:72:8a:a0:f0:
14:c5:18:3a:de:47:12:92:d1:c4:9d:11:65:96:73:
db:3a:73:fd:cd:48:54:36:1c:6f:df:cc:47:44:27:
bd:e3:4e:1a:aa:72:d7:6b:9f:b9:0c:90:9f:1e:15:
0d:97:a5:7e:ce:92:9d:2d:98:5c:5f:58:14:19:80:
52:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:77:88:B6:81:09:54:80:5B:EC:ED:6B:30:F0:E1:A2:E2:DC:86:A7
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/wXeItoEJVIBb7O1rMPDhouLchqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.135.81.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:d0:17:96:65:f3:03:62:4e:f3:45:6a:b4:cc:ca:da:07:13:
99:71:ba:d0:7e:5b:1d:28:b7:64:f4:9c:b2:95:e6:5d:29:95:
6a:bb:8d:a3:75:12:e1:5b:bd:cf:84:fa:d4:72:cb:69:55:8a:
e9:d1:1b:c5:33:eb:1e:9f:28:64:21:13:65:fb:da:c7:6c:2c:
4b:65:27:54:79:62:c4:56:b2:84:d6:93:54:24:83:7b:fa:f5:
db:a3:7d:bc:33:72:e1:d1:a1:ef:34:a9:8d:70:c8:9d:0a:79:
85:ab:72:47:22:80:03:bd:3f:74:4e:86:b4:c2:46:37:21:0b:
58:51:d2:39:a6:a8:0d:16:6e:c2:03:fc:76:16:c5:b6:42:29:
88:4a:22:c6:e7:be:0d:d0:a4:00:e1:45:84:e7:ca:35:31:35:
a5:ab:64:b6:7e:73:8f:23:20:62:66:d3:e5:21:e4:8d:da:24:
4e:09:29:55:47:0c:a7:34:59:1e:5e:70:a4:4c:06:59:7b:0e:
97:f4:98:f3:6b:c8:d3:a0:ff:3a:2d:c5:b5:7b:b5:cc:18:27:
50:92:a4:5e:0e:7b:2e:d5:e8:a3:60:44:a3:13:95:a5:1f:d2:
e2:cf:8b:59:2d:30:91:22:7f:07:67:59:be:ec:a0:60:4a:45:
ab:1e:61:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:05 2024 by rpki-client on console-ams.rpki-client.org