Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/I-T7AHBCtZGA8TfIcMfta8CfVgM.roa
File: I-T7AHBCtZGA8TfIcMfta8CfVgM.roa (raw, json)
Hash identifier: O6qEM1+kNcmAlBqcodx11NvStNfGUkHFY4EdkoJ3T6w=
Subject key identifier: 23:E4:FB:00:70:42:B5:91:80:F1:37:C8:70:C7:ED:6B:C0:9F:56:03
Certificate issuer: /CN=51618df006d548d1d87ed6419550662db6fc0606
Certificate serial: 0185F1A396A1CE0070FA2F45AD911F00E669
Authority key identifier: 51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/I-T7AHBCtZGA8TfIcMfta8CfVgM.roa
Signing time: Fri 27 Jan 2023 05:11:48 +0000
ROA not before: Fri 27 Jan 2023 05:11:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50022
IP address blocks: 213.110.240.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f1:a3:96:a1:ce:00:70:fa:2f:45:ad:91:1f:00:e6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51618df006d548d1d87ed6419550662db6fc0606
Validity
Not Before: Jan 27 05:11:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23e4fb007042b59180f137c870c7ed6bc09f5603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:aa:d0:11:50:e9:e9:d8:5e:88:7e:1f:3e:69:
bb:60:53:f6:f7:75:ec:7c:80:4c:b5:9a:b7:89:af:
01:9f:ed:c8:ff:72:ae:8a:94:62:17:c5:7c:55:63:
b3:41:d0:9d:13:eb:e8:85:b8:b6:ee:05:33:c8:d5:
25:77:1a:dd:dc:1c:0c:55:4c:7b:d9:54:0b:6d:e6:
92:6d:47:02:0b:d3:ae:81:3b:d8:59:b8:0c:c9:e4:
53:5e:86:2b:2c:89:a3:f8:d3:f7:fb:5e:fd:bb:6b:
f6:f8:a8:d6:a8:9a:70:50:b9:0c:61:56:6e:d4:c6:
68:af:eb:80:8d:18:78:10:b2:e1:f7:5f:a6:31:e1:
ff:67:ec:a3:84:8b:b8:2d:36:d5:23:23:c1:44:5f:
93:e3:55:c0:20:9a:e2:ca:e6:d5:26:c8:8a:69:1e:
98:8f:04:de:b3:97:65:b0:4d:bc:1d:9c:ab:c5:1e:
1c:71:34:d3:d0:97:d7:1d:ce:ec:5a:59:4c:f0:3c:
cc:b2:eb:fe:d5:32:a4:ec:e4:74:f3:af:04:bb:92:
12:cc:1b:c0:ce:57:41:a7:8b:f4:c0:bd:ce:61:03:
07:71:7f:84:bd:5c:c4:08:42:21:dd:f9:1f:f4:e9:
6f:f2:75:84:60:c4:29:f5:99:8c:ee:14:58:67:e1:
6e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E4:FB:00:70:42:B5:91:80:F1:37:C8:70:C7:ED:6B:C0:9F:56:03
X509v3 Authority Key Identifier:
keyid:51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/I-T7AHBCtZGA8TfIcMfta8CfVgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.110.240.0/20
Signature Algorithm: sha256WithRSAEncryption
93:2d:4d:8d:e8:d9:d7:31:64:a3:32:68:b9:5a:f8:5c:ab:16:
2c:b9:73:e8:ac:33:ca:84:e1:30:24:45:35:96:c4:8e:94:b8:
fd:98:07:9c:09:eb:c4:8a:31:2a:03:ef:fd:8f:b3:a7:57:d3:
d2:7f:9b:d5:7a:d6:d4:49:a5:fe:c7:fc:c9:48:85:6a:b2:16:
f2:0c:8c:04:37:a5:22:fc:b9:cd:df:d8:21:41:31:86:d1:c4:
14:a1:87:07:ac:85:07:a0:50:69:5c:d2:ca:2b:cd:3b:6b:ca:
fb:3a:18:7c:86:87:5e:d9:e0:33:61:af:37:d6:e6:e3:ad:ec:
f2:aa:d3:ed:b6:a1:d8:9a:bf:46:9f:09:c2:1f:ca:7c:92:ba:
48:f1:5b:2f:f1:b0:da:56:dd:8a:30:0c:16:51:1c:c7:24:e6:
b3:61:aa:13:0e:fd:a2:36:f4:6e:36:86:c7:bd:4b:cc:05:5f:
17:a1:86:0c:92:11:e4:66:af:f3:28:34:9f:66:a8:e8:f6:36:
6c:43:ce:eb:d6:8f:9d:1f:3e:b5:87:48:d9:fe:b5:df:5b:f5:
34:c4:72:9b:4b:bb:8c:76:ca:bb:76:30:e6:0e:9d:1c:db:b7:
72:b4:22:f3:85:d0:cd:35:9f:fb:ba:6a:6b:4b:9b:cd:6c:54:
e5:da:66:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:58 2024 by rpki-client on console-fra.rpki-client.org