Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/F0P_FKCk4xGCYhHzMu4ttE-_jK4.roa
File: F0P_FKCk4xGCYhHzMu4ttE-_jK4.roa (raw, json)
Hash identifier: ayNcXs5swnRw4sKn5UtGsBYCUhWPRKlLC4q+Hhz1kcw=
Subject key identifier: 17:43:FF:14:A0:A4:E3:11:82:62:11:F3:32:EE:2D:B4:4F:BF:8C:AE
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 018A07BD0FCB50889A790E146543303D17C7
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/F0P_FKCk4xGCYhHzMu4ttE-_jK4.roa
Signing time: Fri 18 Aug 2023 08:22:25 +0000
ROA not before: Fri 18 Aug 2023 08:22:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5065
IP address blocks: 213.137.84.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Sep 2023 07:25:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:07:bd:0f:cb:50:88:9a:79:0e:14:65:43:30:3d:17:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Aug 18 08:22:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1743ff14a0a4e311826211f332ee2db44fbf8cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1b:d0:6a:0d:c9:f5:37:57:c9:a5:c4:9a:cf:
f8:bb:2d:7c:d5:56:b6:49:80:5e:12:c1:3d:ba:5e:
07:d1:7e:a6:65:65:94:d0:44:44:41:1e:ca:6d:0b:
6d:ae:89:fa:45:52:5d:ec:ed:a6:c6:ef:82:21:a0:
9d:a8:69:ce:06:0e:cc:8d:f3:45:50:37:96:f3:f0:
5f:bf:60:b3:c4:d6:d8:ec:5d:66:03:12:d0:cc:fc:
fc:fe:9f:7e:6f:b8:4f:2c:d6:1c:c6:8f:48:21:01:
20:90:64:06:29:f2:20:eb:7e:e0:aa:47:81:ab:08:
06:8e:55:4a:ec:85:b2:ec:e1:2c:7d:9b:03:90:87:
f6:3b:5b:d1:4f:43:00:44:46:ff:cd:15:75:07:6e:
4c:45:f3:70:a9:13:c7:1b:bb:8b:bb:1d:b9:1e:7f:
81:59:5f:5a:74:ca:c2:5e:0d:e6:96:e5:fc:0b:2e:
a2:e7:6c:e3:7b:03:1b:ac:7c:bc:2b:1e:04:dd:3a:
c6:98:05:91:c4:5a:a4:f1:50:7f:ac:b2:9c:0d:ee:
fb:44:32:99:0a:de:25:ed:76:f5:9b:11:a4:92:75:
a9:92:9f:bd:92:fe:be:e5:37:0d:7b:56:75:04:5a:
f4:45:0b:38:0e:98:08:78:87:28:57:bb:0f:fb:4a:
7c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:43:FF:14:A0:A4:E3:11:82:62:11:F3:32:EE:2D:B4:4F:BF:8C:AE
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/F0P_FKCk4xGCYhHzMu4ttE-_jK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.137.84.0/22
Signature Algorithm: sha256WithRSAEncryption
33:aa:34:3a:11:c6:fc:3a:a1:54:97:61:c6:19:40:e5:c0:ea:
6d:67:13:d9:42:29:f7:c7:0d:63:f5:39:7e:22:f1:dc:36:e8:
2b:3b:ec:03:5f:26:f3:5e:1a:51:eb:d2:8c:f8:e4:2a:ca:60:
44:9d:c8:34:26:0f:66:fd:36:c1:a3:2f:fa:d0:93:bf:c4:3e:
2b:75:8b:08:a3:17:34:57:4d:53:6f:19:08:7a:1e:ec:26:8e:
d7:bc:5a:29:cd:67:4e:a1:ce:cf:8f:16:f2:ea:de:4c:bf:58:
84:ca:e9:52:3f:a3:46:61:f1:71:ef:df:b4:1e:bb:21:37:c7:
ee:33:61:41:27:a4:c5:40:8d:07:e0:84:1b:69:0c:75:c7:d0:
c8:6d:e1:34:17:1a:90:b5:74:cd:9a:31:e6:38:5b:55:95:d9:
b3:28:ef:fc:11:77:6a:57:d9:6a:8a:aa:87:7b:a0:fc:c9:f5:
29:2e:46:27:8d:c4:2c:16:59:71:be:ba:d9:43:30:db:59:eb:
ac:78:48:65:9b:28:0f:87:f5:4e:4d:1a:09:29:c7:c7:59:20:
54:d7:3b:06:7b:9d:01:dc:e2:44:92:f9:7d:7e:21:16:36:80:
ca:1e:ca:fd:be:c4:ae:5c:7b:40:ca:83:93:35:95:b9:ff:85:
a9:0c:7c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:06 2024 by rpki-client on console-fra.rpki-client.org