Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/7hfBy9434p0OhlGzJurznt1M5bc.roa
File: 7hfBy9434p0OhlGzJurznt1M5bc.roa (raw, json)
Hash identifier: rWg7God7sb/7glcEChRkzpeA/yz/7S//LeHg+2EaBlc=
Subject key identifier: EE:17:C1:CB:DE:37:E2:9D:0E:86:51:B3:26:EA:F3:9E:DD:4C:E5:B7
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 01856B9366417475BC609E44B68E88E2C26A
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/7hfBy9434p0OhlGzJurznt1M5bc.roa
Signing time: Sun 01 Jan 2023 04:24:59 +0000
ROA not before: Sun 01 Jan 2023 04:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204242
IP address blocks: 213.152.241.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:66:41:74:75:bc:60:9e:44:b6:8e:88:e2:c2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 04:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee17c1cbde37e29d0e8651b326eaf39edd4ce5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f7:58:96:73:2f:f8:e7:18:9a:bc:0a:cf:56:
64:ed:c6:a7:a8:08:84:ad:fa:b6:df:19:83:b6:2b:
86:da:41:bf:cd:86:b6:e7:19:7b:77:b0:2b:29:ed:
2b:21:93:88:97:ec:34:93:9b:25:63:76:b5:5e:18:
21:76:fc:37:16:2a:25:5c:18:aa:ef:e2:13:85:46:
40:d6:41:c4:1c:16:10:e9:e5:be:78:b8:e6:e6:cb:
3c:43:d7:13:6d:55:4f:c0:18:ed:62:99:2c:88:5c:
48:28:70:a0:d4:d1:d2:47:23:c8:77:88:f8:4a:53:
94:6b:3f:5a:eb:b2:a8:da:98:b5:af:68:b7:70:8c:
9d:b7:79:a6:3d:dd:3b:80:88:3a:7b:2c:9f:24:35:
a9:e2:ee:ed:ee:8b:86:c4:ed:01:6d:df:c3:22:e6:
9c:9d:0c:c3:94:8c:15:3e:df:28:d1:c7:41:af:af:
a7:a4:d3:33:05:5f:6a:b8:41:d4:c3:25:53:d5:de:
d9:51:67:ab:b3:bb:16:a9:7e:34:7d:a5:31:51:0b:
01:f7:38:a0:f0:85:fd:9f:94:86:bf:4b:95:43:49:
10:57:14:f4:98:b0:45:9f:2e:09:0d:62:cf:7d:02:
9c:47:b1:f5:88:b4:08:e4:e6:43:86:10:18:a4:b5:
e8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:17:C1:CB:DE:37:E2:9D:0E:86:51:B3:26:EA:F3:9E:DD:4C:E5:B7
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/7hfBy9434p0OhlGzJurznt1M5bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.152.241.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:91:b2:85:a4:28:3d:cd:88:32:e0:5e:c0:33:46:db:72:9b:
42:28:2a:35:16:a6:d7:e0:6d:7f:30:98:b2:f7:44:09:af:37:
fc:8b:80:74:56:bf:ba:94:61:f0:27:5e:94:09:76:7a:3e:e7:
8d:f3:e8:b8:0e:d5:aa:d3:48:fd:eb:cf:65:b9:12:81:29:f1:
69:13:11:72:5e:9a:83:fc:a9:00:21:3a:86:4d:f5:2b:08:f5:
ba:21:72:a4:a4:1b:9a:f9:38:56:b7:a7:13:b3:4e:6d:07:1f:
b6:4c:e1:bd:e4:11:a0:c5:2e:2c:58:83:be:6b:96:24:2f:d2:
e4:db:f4:2d:91:bd:fd:83:27:3f:ff:11:99:83:82:1d:b3:a1:
16:5c:09:12:ba:89:69:ae:3d:4d:9b:3d:10:97:47:1c:1c:ea:
8e:2f:79:e1:86:c7:d7:dd:b6:c7:e4:57:9d:f2:a7:60:41:1b:
e9:da:7f:c9:85:76:84:e3:c6:85:b3:54:e9:ac:d6:d0:11:49:
51:80:1f:03:59:be:cd:07:2e:08:d0:19:b0:d1:14:76:83:af:
40:44:30:5c:b8:c4:e4:40:b1:fb:46:6e:10:d5:05:2f:1c:68:
0b:d7:6a:07:08:7b:4e:bd:4c:1c:5e:74:2a:60:c3:90:05:76:
24:6d:4f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:46 2024 by rpki-client on console-fra.rpki-client.org