Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/iG6QyQdjFQBgdO7SsgIcni8gDuk.roa
File: iG6QyQdjFQBgdO7SsgIcni8gDuk.roa (raw, json)
Hash identifier: wFVcv37ouqOuYeSz3BQMPskgFXrY51J1pxFbY1Txrpo=
Subject key identifier: 88:6E:90:C9:07:63:15:00:60:74:EE:D2:B2:02:1C:9E:2F:20:0E:E9
Certificate issuer: /CN=7373c1ff55403d4792346493f769f8d033bef02c
Certificate serial: 01856CAF28B53F19E26E23A999FE2AB1AF9E
Authority key identifier: 73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/iG6QyQdjFQBgdO7SsgIcni8gDuk.roa
Signing time: Sun 01 Jan 2023 09:34:56 +0000
ROA not before: Sun 01 Jan 2023 09:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2856
IP address blocks: 213.230.244.0/23 maxlen: 23
213.230.246.0/23 maxlen: 23
213.230.242.0/23 maxlen: 23
213.230.251.0/24 maxlen: 24
213.230.252.0/23 maxlen: 23
213.230.248.0/24 maxlen: 24
213.230.214.0/24 maxlen: 24
213.230.225.0/24 maxlen: 24
213.230.224.0/24 maxlen: 24
213.230.226.0/23 maxlen: 23
213.230.230.0/23 maxlen: 23
213.230.232.0/24 maxlen: 24
213.230.233.0/24 maxlen: 24
213.230.228.0/23 maxlen: 23
213.230.238.0/23 maxlen: 23
213.230.234.0/23 maxlen: 23
213.230.240.0/23 maxlen: 23
213.230.236.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:28:b5:3f:19:e2:6e:23:a9:99:fe:2a:b1:af:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7373c1ff55403d4792346493f769f8d033bef02c
Validity
Not Before: Jan 1 09:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=886e90c9076315006074eed2b2021c9e2f200ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:b9:e6:98:18:58:81:07:d3:b4:20:67:1a:
c7:8e:e7:33:cf:e0:db:3b:6b:11:5c:6f:43:72:8c:
50:52:20:ae:bb:93:73:71:52:d5:b5:63:f6:c8:cc:
0b:f7:be:79:25:23:f8:db:bd:1c:ef:c8:81:3b:28:
28:90:52:67:f7:87:85:cf:95:b8:1a:1d:9d:ca:bf:
a5:22:5f:be:32:8c:63:f0:7d:6b:50:c2:15:68:6d:
7e:6b:b6:7d:00:b3:5d:40:1a:4b:f1:5d:48:f2:db:
35:57:05:d6:99:2e:f2:d3:e0:6a:73:e1:44:ff:37:
96:c9:ba:2f:f9:7b:14:64:2f:4e:01:98:37:43:26:
10:11:63:de:53:d9:58:90:47:cf:60:51:f8:ce:d8:
0e:68:45:9d:ac:07:f1:0d:1d:11:12:89:22:a2:44:
d5:94:10:a6:ec:8c:1a:df:93:92:b8:68:55:dd:50:
5b:8b:81:76:11:0e:b8:bd:ec:c7:33:28:69:d1:32:
01:46:35:44:6e:d3:a8:32:d4:00:bf:db:04:9a:f6:
97:1d:a9:15:43:36:76:8c:c5:f5:7d:b7:19:44:17:
d6:ae:85:49:aa:0c:85:19:e7:b5:c1:bd:9d:b4:17:
e6:ab:81:fb:a0:2e:75:1f:0d:2f:dc:f5:b2:f6:42:
2e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6E:90:C9:07:63:15:00:60:74:EE:D2:B2:02:1C:9E:2F:20:0E:E9
X509v3 Authority Key Identifier:
keyid:73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/iG6QyQdjFQBgdO7SsgIcni8gDuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.230.214.0/24
213.230.224.0-213.230.248.255
213.230.251.0-213.230.253.255
Signature Algorithm: sha256WithRSAEncryption
17:90:ac:fc:84:12:a6:b2:6c:d4:b2:07:10:48:9f:6c:12:9a:
9c:b5:ae:7b:5d:d6:7e:21:98:f7:2c:1e:83:3c:19:39:f8:e5:
7c:dd:2b:08:3c:c3:35:b0:11:37:d6:ff:ee:d5:72:4b:b1:bb:
5f:d8:b4:12:0d:d8:15:d6:1e:6e:11:fc:d8:fa:ba:21:bf:ea:
c6:33:a5:ae:8a:f6:e2:8e:f4:89:28:87:97:76:ed:d6:39:5e:
7e:18:c7:f2:d4:9f:b7:b3:8d:39:b2:9c:f9:46:43:ec:ce:2d:
83:ef:bb:86:ca:d2:b6:e0:d2:91:41:61:51:ff:87:b4:e2:1b:
08:5f:aa:fa:59:95:0f:d5:74:dc:9b:2c:00:ea:7d:5d:fd:10:
5d:15:35:0c:86:00:05:0a:a0:55:d5:a4:1c:02:ef:15:65:ba:
e3:8d:f6:7d:d8:c5:1e:17:e3:4a:d4:94:2a:de:0b:da:db:8d:
06:36:76:fd:00:62:37:46:69:b7:fe:92:30:ea:14:fb:03:6c:
00:39:a0:da:77:df:81:67:50:5c:e4:8c:d1:b7:c1:7e:5f:0c:
20:76:ac:1d:f7:a2:cc:3f:48:ac:61:c8:22:8b:80:d4:30:24:
7e:c1:d5:3b:d5:a8:f1:ad:36:57:08:90:71:45:ba:8c:3e:df:
3f:aa:6e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:29 2024 by rpki-client on console-ams.rpki-client.org