Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/_8MVzIgZZ873zpfO-ZYd4uXNsEE.roa
File: _8MVzIgZZ873zpfO-ZYd4uXNsEE.roa (raw, json)
Hash identifier: l9kz5VpZrhLaMdsO6MdjVA/x7I+GtnUrPgT0sQ/5PFg=
Subject key identifier: FF:C3:15:CC:88:19:67:CE:F7:CE:97:CE:F9:96:1D:E2:E5:CD:B0:41
Certificate issuer: /CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Certificate serial: 01856F3900C10B1E00178C3719B6EE249B59
Authority key identifier: 5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/_8MVzIgZZ873zpfO-ZYd4uXNsEE.roa
Signing time: Sun 01 Jan 2023 21:24:44 +0000
ROA not before: Sun 01 Jan 2023 21:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203780
IP address blocks: 213.140.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:00:c1:0b:1e:00:17:8c:37:19:b6:ee:24:9b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Validity
Not Before: Jan 1 21:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffc315cc881967cef7ce97cef9961de2e5cdb041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:11:9d:c7:8a:95:16:d9:c1:97:4e:f2:6f:62:
74:06:3c:e0:0b:83:b3:01:06:88:1d:98:eb:4a:d2:
79:f0:be:56:0a:51:c8:27:ad:06:c9:e1:66:49:93:
51:56:2f:25:38:8e:c8:7c:a0:0e:77:28:a4:bb:b2:
5c:55:21:f5:74:9d:f9:66:18:18:63:dc:cb:6d:f5:
cb:e2:86:87:e4:20:3f:cd:2e:03:7b:86:18:0c:83:
c8:07:31:66:96:72:a0:f8:23:4a:dc:7e:87:bc:55:
f8:ba:ce:65:d5:c0:00:42:9a:81:74:96:5c:9e:01:
da:76:79:25:0c:33:94:6b:67:79:62:df:77:7f:58:
69:8d:b7:12:45:1f:75:67:d2:09:e7:7f:6a:14:c3:
e2:7d:ef:64:fb:ba:20:c7:64:f9:c7:83:01:8c:06:
a6:57:92:76:40:17:4a:fd:3d:db:2e:61:85:44:dd:
ec:22:35:e8:69:86:88:d9:76:fc:0a:ca:62:46:de:
50:fb:05:51:fd:3c:99:36:f2:50:39:99:80:80:a4:
db:4a:55:6e:60:f1:00:10:ca:96:09:3a:4d:30:be:
bc:be:83:cc:ac:8b:49:96:80:7c:be:2c:07:6c:26:
15:1a:62:9c:e3:35:08:84:22:c7:c1:27:e1:b0:01:
5a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C3:15:CC:88:19:67:CE:F7:CE:97:CE:F9:96:1D:E2:E5:CD:B0:41
X509v3 Authority Key Identifier:
keyid:5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/_8MVzIgZZ873zpfO-ZYd4uXNsEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.140.144.0/24
Signature Algorithm: sha256WithRSAEncryption
46:3d:6b:be:47:82:24:c3:cb:7c:f8:71:0f:b5:3e:c4:10:01:
41:e8:9a:9b:63:bf:de:7e:fa:65:ed:37:9d:b7:a5:44:8a:9a:
f6:a2:8c:eb:6b:ac:ed:ef:5f:30:b7:89:c8:69:1c:01:9a:25:
e9:e3:dd:b3:64:d0:52:e2:76:37:d3:50:04:93:df:84:7d:b2:
44:d9:cd:fd:b5:37:ae:11:7d:4d:f2:c9:74:18:27:0e:7b:b9:
ef:0f:0b:a7:f4:55:e1:7b:4f:93:16:e1:3c:17:9a:fa:53:e4:
1e:77:38:96:ba:81:c5:66:ee:28:1d:5c:ac:5c:2a:72:4b:5a:
6d:4b:53:13:96:08:fc:54:ee:08:52:00:90:73:63:fd:ef:eb:
9d:1c:c1:58:3a:95:86:aa:c3:8e:64:6f:9f:68:cd:cd:ec:7b:
0c:19:f7:be:c9:6f:6a:e9:92:ab:95:d3:80:42:db:5f:e2:ad:
f3:ac:e6:8d:13:a0:d9:ee:38:46:20:09:5b:dc:67:f8:4f:eb:
bf:70:4a:99:11:10:53:a0:83:8c:0f:ca:9e:25:d1:8a:39:35:
e4:0f:28:fb:7a:b4:86:e6:55:62:aa:ea:d3:73:f1:56:c9:36:
50:34:6c:09:24:43:83:66:e6:9a:a0:96:94:8c:f1:0e:d6:0f:
81:50:3d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:17 2024 by rpki-client on console-ams.rpki-client.org