Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/FW7wf0ByUDI_C5xFnDMx8c_EA3s.roa
File: FW7wf0ByUDI_C5xFnDMx8c_EA3s.roa (raw, json)
Hash identifier: LRGQMpuS1JKLUiRNdCUcLprghTS+nFpIojN6oiYXaus=
Subject key identifier: 15:6E:F0:7F:40:72:50:32:3F:0B:9C:45:9C:33:31:F1:CF:C4:03:7B
Certificate issuer: /CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Certificate serial: 01856F38FFFA5AD9F9E66C3C99E4B118A881
Authority key identifier: 5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/FW7wf0ByUDI_C5xFnDMx8c_EA3s.roa
Signing time: Sun 01 Jan 2023 21:24:44 +0000
ROA not before: Sun 01 Jan 2023 21:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199382
IP address blocks: 213.140.140.0/24 maxlen: 24
213.140.140.0/23 maxlen: 23
213.140.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:38:ff:fa:5a:d9:f9:e6:6c:3c:99:e4:b1:18:a8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Validity
Not Before: Jan 1 21:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=156ef07f407250323f0b9c459c3331f1cfc4037b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:52:31:e5:30:01:53:6b:9f:bb:f2:41:da:ce:
63:02:53:f0:fa:ed:16:e0:a1:a0:0f:43:5d:3e:01:
9c:4b:a9:02:02:c3:a7:d9:43:e0:6f:7a:c0:ca:65:
67:13:50:75:1c:e1:f2:ee:09:b0:29:39:5e:30:48:
5d:f6:df:aa:a6:f8:ef:a0:62:16:ec:0e:6f:00:c2:
55:f9:c6:30:58:d6:ed:57:c4:b1:1e:0e:48:fe:e7:
04:75:b7:3f:2a:e1:22:e2:6e:9a:2d:7e:16:7f:20:
a1:4b:27:cd:e9:f8:72:64:0f:f6:05:4e:88:1b:97:
37:6f:17:5e:05:5a:8a:c8:59:f1:01:28:0b:d2:ca:
83:c4:fe:2b:fb:00:ef:2f:ec:36:43:58:fe:f9:88:
fa:96:f9:b8:2d:c2:b7:55:aa:65:7f:95:68:2b:73:
b4:1d:12:09:31:02:13:30:27:99:be:23:13:74:e6:
6a:50:2e:28:cb:96:c8:f4:e8:ea:e2:20:45:da:ca:
3c:fa:58:67:18:7d:7d:b9:5e:a4:d3:18:d9:da:e4:
26:4a:44:4e:01:72:0f:30:24:5d:58:71:75:2b:6d:
6a:64:c6:da:65:ab:ff:c4:15:67:6d:aa:96:a7:6c:
46:dc:1e:70:91:94:08:60:8f:a7:61:12:ac:45:41:
1f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6E:F0:7F:40:72:50:32:3F:0B:9C:45:9C:33:31:F1:CF:C4:03:7B
X509v3 Authority Key Identifier:
keyid:5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/FW7wf0ByUDI_C5xFnDMx8c_EA3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.140.140.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:24:a0:85:80:a7:18:d3:c3:b9:f3:8d:ac:0e:05:c5:53:30:
a5:6e:8d:39:41:be:8b:cf:36:36:2c:3b:a1:9e:c2:0a:a4:1d:
d9:2f:fa:99:0b:00:d1:96:26:e8:93:8d:c0:48:09:ed:08:02:
a1:d5:b1:2e:64:5a:14:5b:92:4a:f7:09:fb:dd:99:4a:8f:db:
c1:7f:31:8a:6a:7a:6f:61:14:cb:ec:df:70:98:77:b9:01:37:
ae:fe:74:55:b9:49:a8:80:84:3b:f3:0a:a4:09:ee:fc:fb:4e:
d6:81:4d:f7:0b:08:55:ee:c9:0d:61:da:56:35:08:fa:40:25:
0c:95:4e:9b:de:d8:e2:f9:9f:f7:42:2c:4d:01:cf:d7:1b:e5:
4a:3b:bf:16:e6:96:a6:28:6c:8b:4f:2a:0d:56:8d:5c:94:a5:
06:bd:58:e8:ad:91:0e:ef:22:a5:aa:45:86:3b:79:f6:ba:bc:
2e:a6:0e:3d:0f:cb:27:e7:b5:14:3f:1f:7a:ad:46:f2:66:73:
29:ce:ee:a3:32:a1:17:ed:0a:ed:cb:37:c6:64:c6:61:87:50:
34:c2:d2:ca:7d:8d:f3:21:80:27:97:6e:e9:7b:07:c3:81:90:
5c:24:a4:77:d4:de:cd:82:0b:92:8c:41:4d:78:33:05:30:68:
a7:6a:b6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:57 2024 by rpki-client on console-fra.rpki-client.org