Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/qSsbworgCspnGLGVISjIgVmIzjc.roa
File: qSsbworgCspnGLGVISjIgVmIzjc.roa (raw, json)
Hash identifier: 9soJYrPoMF4XBWiPAQhYeFoUGkiPlqZ1bELZ6Y8cqhk=
Subject key identifier: A9:2B:1B:C2:8A:E0:0A:CA:67:18:B1:95:21:28:C8:81:59:88:CE:37
Certificate issuer: /CN=d39696a7680e955291feafa1efba9fbcff2f888b
Certificate serial: 01856D41AB63B44951EB875154D2D904BAEE
Authority key identifier: D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/qSsbworgCspnGLGVISjIgVmIzjc.roa
Signing time: Sun 01 Jan 2023 12:14:58 +0000
ROA not before: Sun 01 Jan 2023 12:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 702
IP address blocks: 213.208.0.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:ab:63:b4:49:51:eb:87:51:54:d2:d9:04:ba:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39696a7680e955291feafa1efba9fbcff2f888b
Validity
Not Before: Jan 1 12:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a92b1bc28ae00aca6718b1952128c8815988ce37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:84:91:ff:41:06:fa:88:d6:e2:a3:f4:13:
4c:cd:01:ae:bb:24:5b:0b:42:99:dd:cb:50:81:bd:
0f:2a:2a:dd:52:7e:b5:b5:37:fa:c7:62:b7:da:18:
69:11:cf:e4:c8:d0:25:e5:ee:0e:b3:1a:c3:d9:5c:
59:c3:33:8c:52:72:24:50:65:93:31:bb:49:5a:04:
f6:2f:8b:fa:f8:32:00:b1:b1:bd:76:68:bc:80:fa:
be:66:88:47:d1:cc:bf:da:b3:c4:eb:dc:29:8e:5a:
3f:c1:80:d3:95:1d:ea:50:07:a4:78:5e:3e:95:f8:
8c:a9:64:ca:ff:c7:04:f8:2c:fc:e0:a4:1e:c8:f6:
8b:e0:d1:a0:bf:cb:1d:10:55:06:e5:3e:f6:1c:4e:
af:d8:05:9c:8e:ca:af:b0:dc:cb:38:73:07:77:6d:
49:ab:0a:55:7a:27:49:21:4c:2c:aa:d3:c5:c7:87:
e5:6b:f9:93:ba:e5:09:f8:74:68:01:b8:38:58:6c:
c8:6b:4d:70:36:aa:6d:67:64:38:7a:25:21:b4:24:
1c:d2:1c:27:ae:3a:11:71:7f:4f:73:df:87:bb:d7:
3c:ac:c3:42:60:42:bd:18:05:40:91:04:b0:47:7f:
57:32:82:6b:69:43:0d:7c:99:c9:ad:a8:1a:07:71:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2B:1B:C2:8A:E0:0A:CA:67:18:B1:95:21:28:C8:81:59:88:CE:37
X509v3 Authority Key Identifier:
keyid:D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/qSsbworgCspnGLGVISjIgVmIzjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.208.0.0/19
Signature Algorithm: sha256WithRSAEncryption
14:89:a5:53:bb:d8:0c:dd:98:9c:e9:05:a1:a0:13:33:60:f2:
93:5b:aa:c9:3a:d2:f8:1a:c8:e1:82:82:89:11:a2:79:da:25:
33:e3:e4:27:dc:bd:b7:61:14:82:05:65:a1:ba:5d:fd:8e:d5:
29:21:86:0a:05:19:96:14:7b:56:87:63:1c:23:30:a1:60:b4:
49:b5:91:58:72:5d:53:00:f5:fb:40:71:f6:33:1f:e4:04:b1:
87:f8:0e:4c:29:3a:31:7c:31:e3:c9:b0:39:c8:6b:f0:cb:c6:
4c:85:6b:fb:3e:d8:22:03:fd:08:a6:e4:4e:00:7f:87:13:27:
54:ee:d5:87:d5:ab:ab:09:f6:3c:e4:ca:73:08:97:ba:c7:c7:
60:1e:1d:35:e0:7f:80:62:2e:99:d8:74:db:55:f7:36:82:06:
4a:8b:84:d4:d3:32:d2:8b:df:19:a8:92:53:92:38:39:a6:bb:
d3:fb:8b:79:6e:fb:64:1c:de:9c:7f:00:e8:ab:6e:a7:fd:b8:
75:79:07:06:77:a6:96:69:a3:a2:43:ea:eb:79:d2:3a:74:65:
9f:6c:f2:b9:ca:80:3d:b2:b9:0b:59:af:14:2a:d8:e8:7e:ab:
0f:c1:40:a0:99:ba:d6:8a:a3:e4:eb:dd:4d:21:43:8c:04:0d:
aa:48:f0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:55 2024 by rpki-client on console-ams.rpki-client.org