Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/c3ATxxg0JS0l63HcVg78_w_MCPM.roa
File: c3ATxxg0JS0l63HcVg78_w_MCPM.roa (raw, json)
Hash identifier: OeLU/lYQPq0J+whz1UdMOGTFLqlZpLxRU6IPKaEjXh4=
Subject key identifier: 73:70:13:C7:18:34:25:2D:25:EB:71:DC:56:0E:FC:FF:0F:CC:08:F3
Certificate issuer: /CN=ea1c951d61b87da19439784d23667a89cb3290a4
Certificate serial: 01856F54953C99F0D8971AF55D6A9E71D4C3
Authority key identifier: EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/c3ATxxg0JS0l63HcVg78_w_MCPM.roa
Signing time: Sun 01 Jan 2023 21:54:51 +0000
ROA not before: Sun 01 Jan 2023 21:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209984
IP address blocks: 213.226.85.0/24 maxlen: 24
213.226.84.0/22 maxlen: 22
213.226.84.0/24 maxlen: 24
213.226.84.0/23 maxlen: 23
213.226.87.0/24 maxlen: 24
213.226.86.0/23 maxlen: 23
213.226.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:95:3c:99:f0:d8:97:1a:f5:5d:6a:9e:71:d4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea1c951d61b87da19439784d23667a89cb3290a4
Validity
Not Before: Jan 1 21:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=737013c71834252d25eb71dc560efcff0fcc08f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a0:8e:24:86:ed:33:3f:bb:5c:8d:50:ba:ea:
30:b5:4d:62:cd:ef:6a:71:63:ef:cf:a1:fb:75:7d:
f9:ba:aa:63:6e:34:8a:b5:7b:01:e3:f6:40:75:1e:
cd:08:cf:30:7d:a4:44:8e:24:73:02:89:68:4e:eb:
c1:5b:bc:4d:ce:ef:bf:6b:1d:e4:6c:5d:99:f3:2b:
9b:ea:58:c5:5e:f2:a4:27:ca:19:4d:f6:14:9a:0c:
96:01:4b:25:b5:e3:78:f9:1e:97:a1:0a:ac:43:92:
f0:bf:24:63:53:fa:44:67:ce:9d:62:08:93:da:a9:
7e:58:fc:f1:1e:cd:55:d3:0a:f8:3c:ef:9b:5d:8d:
82:14:c9:46:1c:eb:af:5f:e3:eb:1b:b0:e8:48:fe:
b2:ef:0c:28:0a:9c:96:f6:23:4b:1c:a3:71:dc:b3:
3a:7c:ae:06:a3:f8:c8:23:96:df:b0:e7:56:de:94:
a7:73:3a:5f:6c:ec:6c:60:9a:50:be:ed:fa:91:34:
ba:dc:89:c7:3d:85:59:a3:de:3f:02:46:46:09:c7:
e0:b0:8c:b9:9c:e5:f1:06:82:10:4d:ac:97:9e:cc:
93:f8:c8:f7:25:69:49:30:ec:d8:e0:f0:40:54:b8:
89:8d:81:5a:aa:df:7e:f1:b1:93:61:d8:3b:20:80:
8b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:70:13:C7:18:34:25:2D:25:EB:71:DC:56:0E:FC:FF:0F:CC:08:F3
X509v3 Authority Key Identifier:
keyid:EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/c3ATxxg0JS0l63HcVg78_w_MCPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.226.84.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:47:dd:ea:b2:86:0e:eb:dd:90:fe:68:21:b0:d9:25:8a:f5:
9d:90:4e:cc:96:db:91:17:46:fc:68:33:f5:ca:19:fe:c2:d5:
43:7f:ed:3a:68:4b:ed:91:e1:44:ca:5a:65:af:e0:a5:75:83:
ff:c6:68:ec:6c:53:f4:21:32:d6:c1:89:08:bc:c5:54:21:74:
21:b8:94:0e:80:16:b3:85:69:8e:ce:e9:ed:10:60:4c:ff:33:
63:38:60:41:3e:b4:d5:21:ca:04:e9:35:4b:0a:bd:59:a9:d0:
e9:30:f6:87:07:46:be:0d:c4:b7:0d:5f:fd:ea:d7:ad:4f:c8:
0c:e4:f8:b6:01:7a:42:87:08:74:4e:c7:3b:7f:b8:50:59:2b:
43:57:fb:6b:29:49:44:e5:75:3f:54:40:45:33:e3:66:04:00:
6c:90:7c:76:b9:40:d8:eb:c2:ed:78:e0:cb:f8:4d:87:ab:bc:
6d:8e:a2:85:fb:82:c2:89:e9:60:d7:02:8b:77:b9:ee:f0:db:
59:9c:a0:b5:29:d5:8b:29:25:f5:5c:e9:0b:fa:58:0b:e2:42:
aa:15:29:cb:21:f0:8f:c1:da:55:fb:d7:81:9a:58:35:e6:d9:
63:86:a6:7d:81:19:66:2f:c9:81:e1:de:48:a3:9e:ea:7a:01:
6e:c1:91:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:47 2024 by rpki-client on console-ams.rpki-client.org