Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/3E3i2WkaTozP3MX5e2S_MeobfGo.roa
File: 3E3i2WkaTozP3MX5e2S_MeobfGo.roa (raw, json)
Hash identifier: eMNMavj66EuQG3SO+ScW6OpZar5AGr2PzUPLVhBoq7w=
Subject key identifier: DC:4D:E2:D9:69:1A:4E:8C:CF:DC:C5:F9:7B:64:BF:31:EA:1B:7C:6A
Certificate issuer: /CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Certificate serial: 01856E2F865BE6956F79791EF78DCAC15AE6
Authority key identifier: FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/3E3i2WkaTozP3MX5e2S_MeobfGo.roa
Signing time: Sun 01 Jan 2023 16:34:46 +0000
ROA not before: Sun 01 Jan 2023 16:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44621
IP address blocks: 213.168.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:86:5b:e6:95:6f:79:79:1e:f7:8d:ca:c1:5a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Validity
Not Before: Jan 1 16:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc4de2d9691a4e8ccfdcc5f97b64bf31ea1b7c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b1:b0:00:0d:7a:53:35:cd:6a:4d:a1:bf:8f:
aa:e2:2e:32:2f:27:16:c3:05:1a:35:fb:60:08:9e:
3f:cf:c0:39:7b:fe:59:57:80:ed:40:64:2e:de:a5:
3e:3a:41:22:c2:fd:0d:6c:e5:90:d3:80:ca:b2:d9:
23:9f:5b:58:c6:95:25:48:e0:e0:61:c6:5e:28:30:
d6:17:c5:c5:d5:72:d5:85:c1:fc:73:0f:9a:7c:68:
5d:27:8e:43:16:04:dc:b1:9d:1f:a3:bf:fc:4f:6a:
fb:ff:a8:d3:9e:9b:86:a5:46:54:bc:d6:c1:5b:dd:
5d:b8:b1:47:6f:72:83:cb:b6:7e:d8:97:77:81:d5:
a8:2d:ab:9c:ce:93:fd:ca:b3:44:9e:2e:c8:69:85:
01:96:5f:0d:36:5a:cf:8f:a5:5e:42:63:e0:b9:9f:
b0:9c:17:c9:3c:40:a3:41:8a:9c:79:d1:7b:d4:95:
ff:ff:2f:69:b3:55:dc:16:4f:5a:f8:ee:d1:2c:f4:
5f:3b:c7:48:3e:eb:eb:33:57:4d:77:cc:80:57:b3:
36:9d:90:12:89:f0:3f:88:a5:d9:5c:e3:87:a2:76:
19:fb:35:f0:fb:01:20:da:da:b0:9c:97:bc:5c:19:
8a:c9:39:6a:0c:e6:4b:5f:f1:17:98:31:76:0e:bd:
3b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4D:E2:D9:69:1A:4E:8C:CF:DC:C5:F9:7B:64:BF:31:EA:1B:7C:6A
X509v3 Authority Key Identifier:
keyid:FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/3E3i2WkaTozP3MX5e2S_MeobfGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.168.158.0/24
Signature Algorithm: sha256WithRSAEncryption
77:a3:30:98:7b:bb:f6:49:45:f2:33:b8:9c:ed:51:e5:67:fb:
8f:00:ef:7e:d0:81:34:d8:6b:15:0c:d8:8c:03:c5:1c:04:f4:
21:03:f1:49:05:11:29:a0:ef:6c:c2:15:76:62:8e:3f:4f:eb:
b6:60:ac:21:61:0d:d9:7c:50:d2:f5:4b:bc:c5:22:11:8d:c6:
d0:a7:16:06:ee:09:af:98:b8:36:1a:dd:66:d4:78:76:62:20:
1f:a8:7f:26:0c:e3:af:70:01:a5:4a:58:39:40:7d:ee:85:67:
60:1e:ea:9e:45:e0:5c:b6:4c:8b:ca:cd:6d:b8:36:42:63:55:
e7:a2:ef:4b:11:a8:17:11:aa:b2:dc:ce:a0:b8:b0:97:a7:1e:
90:f2:3e:ca:7a:98:8c:79:26:d4:08:1c:a9:36:3a:7a:cb:b6:
4c:5d:11:bd:92:86:ef:ec:f6:e6:e4:d1:d6:d5:c9:0e:d9:fb:
6b:47:2b:00:50:55:76:75:5c:3c:80:88:28:79:03:b1:e0:7c:
e3:4e:fa:9d:13:ba:76:d3:74:35:05:ea:50:b6:2b:02:2e:45:
29:5a:51:85:10:3d:bc:1c:8f:ec:e0:80:40:c1:f3:94:4d:2d:
58:91:cc:d7:d9:c7:bb:a6:d9:72:f8:71:10:ab:9c:b0:f9:24:
f7:45:84:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:29 2024 by rpki-client on console-fra.rpki-client.org