Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/R6j-FPq2zaiQ6yuTm5GFF5CefvM.roa
File: R6j-FPq2zaiQ6yuTm5GFF5CefvM.roa (raw, json)
Hash identifier: AHuF3H60NUQjyCe4msCRBuJwVlvKnYqiFsCN8QRcb1Q=
Subject key identifier: 47:A8:FE:14:FA:B6:CD:A8:90:EB:2B:93:9B:91:85:17:90:9E:7E:F3
Certificate issuer: /CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Certificate serial: 01856D662003C1B7676775A17BE12FDE1DCA
Authority key identifier: AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/R6j-FPq2zaiQ6yuTm5GFF5CefvM.roa
Signing time: Sun 01 Jan 2023 12:54:47 +0000
ROA not before: Sun 01 Jan 2023 12:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212451
IP address blocks: 178.213.48.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:20:03:c1:b7:67:67:75:a1:7b:e1:2f:de:1d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Validity
Not Before: Jan 1 12:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47a8fe14fab6cda890eb2b939b918517909e7ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:3f:6b:fb:ed:ee:e2:62:f5:cb:d3:6e:87:
55:77:60:61:05:d1:99:55:bf:8b:ca:96:9c:61:58:
03:ea:7c:db:17:c0:2f:8a:7d:c3:a5:47:21:2a:79:
91:4f:26:51:fc:6d:c1:1a:2d:99:44:d7:f1:88:2d:
42:a1:bf:87:7c:b2:3a:83:fd:cb:a6:14:cf:a2:fc:
8b:5d:e0:36:bf:13:d9:5f:a0:00:ca:6f:25:cd:b3:
62:72:b9:ef:cb:f5:0d:b9:3a:ee:27:f8:76:c5:40:
68:7e:84:50:9d:ab:89:07:6d:97:ee:7c:96:9a:56:
54:fd:45:c5:14:16:9e:0a:88:ec:9f:34:68:f8:e1:
8e:10:0f:cc:38:4c:eb:ab:05:fe:9e:83:8d:74:d8:
4e:48:8f:86:60:2b:c6:d1:61:c7:3d:c6:d3:ed:23:
5f:26:3b:2c:08:4f:15:bc:62:60:44:76:97:e8:54:
c4:7f:d8:3d:ce:c5:ca:aa:01:31:89:72:2a:73:63:
62:60:d9:f8:78:09:ad:90:e5:3c:50:72:d9:5b:9e:
32:69:55:38:93:69:ec:5a:d8:18:e7:ca:59:76:da:
22:d2:a4:6b:a0:ca:af:65:51:89:2d:df:42:7b:9f:
b9:79:9c:5f:ab:00:79:e2:1e:78:aa:bf:f6:5f:d0:
00:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A8:FE:14:FA:B6:CD:A8:90:EB:2B:93:9B:91:85:17:90:9E:7E:F3
X509v3 Authority Key Identifier:
keyid:AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/R6j-FPq2zaiQ6yuTm5GFF5CefvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.213.48.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:b0:34:2d:3e:93:82:85:74:03:2c:06:86:6c:f6:a4:0a:6b:
0b:49:b2:77:36:62:64:fc:d6:f6:b1:8d:59:85:4a:b0:57:ee:
45:57:3f:2f:86:7b:8e:1e:38:22:12:71:54:af:54:71:6a:71:
f3:43:66:b9:3d:66:6e:74:63:75:f9:2f:6f:81:18:60:63:a1:
4c:6d:19:2a:aa:18:33:95:6e:99:ba:87:c6:65:cf:76:8e:5d:
fc:0f:73:e3:34:01:d4:1d:39:3a:fc:2e:bd:5b:19:4b:23:6f:
31:51:24:3d:25:94:1f:b1:8d:2b:d2:4a:ad:32:0a:ee:69:45:
74:59:c9:a8:8b:3a:e0:be:ff:ce:58:b0:b0:5f:24:61:e9:55:
24:fe:b0:40:0d:86:86:f3:83:c5:6b:12:27:b9:6c:98:b7:e6:
6a:0a:c5:5a:ee:e9:44:07:5f:d8:c6:fd:5e:c3:8f:16:d0:10:
05:e5:b7:f6:9d:c1:9c:3f:e5:72:d7:32:c4:51:5c:12:4f:15:
e3:a5:81:b8:d9:cf:9d:ea:f0:5b:68:30:e8:fc:64:b7:fc:c0:
18:0b:0a:3f:2c:e0:89:b6:55:9f:fb:0b:45:e0:8f:b3:34:cd:
2f:b7:e8:66:95:48:e3:65:55:80:d5:d6:50:68:f7:c8:51:1b:
b1:b9:bd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:54 2024 by rpki-client on console-ams.rpki-client.org