Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/yEjSMGd_lEZmWJdAtg208cM0F3Q.roa
File: yEjSMGd_lEZmWJdAtg208cM0F3Q.roa (raw, json)
Hash identifier: M3GPM4WDf7/xT/hOUTCVwl6hISeNzUw51Rhf/UOUzQw=
Subject key identifier: C8:48:D2:30:67:7F:94:46:66:58:97:40:B6:0D:B4:F1:C3:34:17:74
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 01856C53CAA5750C7BC44A8E2A6BD1548FDD
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/yEjSMGd_lEZmWJdAtg208cM0F3Q.roa
Signing time: Sun 01 Jan 2023 07:55:08 +0000
ROA not before: Sun 01 Jan 2023 07:55:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31600
IP address blocks: 213.135.66.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:ca:a5:75:0c:7b:c4:4a:8e:2a:6b:d1:54:8f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jan 1 07:55:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c848d230677f944666589740b60db4f1c3341774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:2f:74:c0:16:7c:cc:ac:66:bf:b0:0d:ed:
0f:50:ee:5d:8d:70:00:08:50:31:da:b0:1f:c8:d1:
a3:33:42:2c:5e:04:0c:6b:99:18:0b:10:9e:c5:71:
8d:fa:d7:17:38:2d:0c:9d:ad:ab:ad:83:c4:fc:40:
b6:16:5b:56:14:1e:db:fa:ec:7f:85:12:b5:06:81:
98:a8:36:6c:4b:4f:0f:9c:55:7f:da:92:3e:6f:af:
f6:9d:7c:e2:fd:1f:42:e6:c2:f0:68:81:99:74:1e:
e6:bb:ff:74:9f:13:6d:f9:b8:16:42:8e:51:e7:4f:
18:f3:b2:41:95:6a:39:b3:cb:46:24:59:8c:8f:f0:
d9:50:b2:e0:e6:14:45:bb:fc:4a:b3:d9:f5:f5:e0:
09:41:b4:a5:ad:95:e4:bc:f9:e0:31:74:85:0d:cc:
10:08:f4:68:64:e9:c1:ca:2c:aa:0b:cc:2b:e0:ef:
3c:96:31:55:a0:7d:99:65:26:3c:1c:46:80:71:6f:
d1:40:65:ff:40:53:2c:cc:78:d4:00:dc:80:c4:cc:
6f:c1:9d:46:a1:e4:38:78:18:e0:8c:8d:16:aa:d5:
11:a5:14:10:7e:97:7c:56:47:4d:05:63:e9:df:ad:
62:c4:2f:5e:90:6f:1c:f9:31:03:d6:c3:13:25:4a:
4e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:48:D2:30:67:7F:94:46:66:58:97:40:B6:0D:B4:F1:C3:34:17:74
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/yEjSMGd_lEZmWJdAtg208cM0F3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.135.66.0/24
Signature Algorithm: sha256WithRSAEncryption
32:88:4b:c4:75:9d:3e:df:a0:20:05:0b:a6:19:1d:df:52:b8:
a8:9b:35:c1:fa:fd:9b:ba:ef:3f:9f:75:05:3d:34:c1:db:35:
a4:a3:ee:d2:a7:2c:21:46:e5:9d:50:f9:fa:4f:b3:b4:32:14:
92:b3:d7:13:00:67:ac:79:21:d0:45:18:0f:7e:d3:e1:f7:9c:
61:66:aa:3e:2e:87:06:e6:e8:29:51:dc:74:a6:f4:94:f9:47:
9b:72:f4:50:5e:d6:ab:61:e7:8f:f4:b6:b5:97:83:79:9c:0b:
60:89:3c:cd:ac:5e:ab:b2:d3:f4:10:ca:f6:40:ca:6f:48:cb:
18:bc:9b:13:0c:de:4c:8b:5f:31:3d:a1:a4:dc:e4:41:c1:0a:
9f:cc:7e:e2:ca:70:c9:49:58:31:f4:3d:d7:7c:77:84:d0:f3:
29:1f:a2:f3:bf:66:b9:2f:3a:fd:a6:6b:82:59:07:fd:32:08:
e8:73:d0:03:c4:ab:75:c5:99:48:3e:ec:33:c5:0a:4e:f3:86:
d1:4d:84:6a:b3:37:a6:1f:4b:be:d8:a9:6b:77:32:09:1f:21:
18:fe:65:b5:f2:be:ce:ce:ac:d6:fe:d0:83:7b:f2:5d:22:7f:
ea:88:a7:1d:f3:23:51:a3:f1:51:20:42:38:2a:ff:8a:f7:ae:
0c:fd:33:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:21 2023 by rpki-client on console-fra.rpki-client.org