Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/HLoi0V22FOf0FFYdopZQ_RgaAPs.roa
File: HLoi0V22FOf0FFYdopZQ_RgaAPs.roa (raw, json)
Hash identifier: iH8N37Qfd/t7OnrqG58quEjFK0ufYN8k2Uxu1HajFa0=
Subject key identifier: 1C:BA:22:D1:5D:B6:14:E7:F4:14:56:1D:A2:96:50:FD:18:1A:00:FB
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 0187DC0BA4D132A4C8B0171C6238C93E0934
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/HLoi0V22FOf0FFYdopZQ_RgaAPs.roa
Signing time: Tue 02 May 2023 10:39:23 +0000
ROA not before: Tue 02 May 2023 10:39:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35758
IP address blocks: 213.137.83.0/24 maxlen: 24
213.137.82.0/24 maxlen: 24
213.137.81.0/24 maxlen: 24
213.137.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 May 2023 10:32:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dc:0b:a4:d1:32:a4:c8:b0:17:1c:62:38:c9:3e:09:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: May 2 10:39:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cba22d15db614e7f414561da29650fd181a00fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e3:17:e8:d2:ca:a8:3f:72:f6:36:8f:e6:41:
8b:f5:0e:f4:ec:91:89:c4:b0:d0:b5:f3:8a:9b:e9:
e3:35:01:80:66:7a:89:d2:31:74:c0:ab:ac:69:72:
0d:85:c5:60:d0:37:9b:09:63:8e:71:35:94:96:ed:
f6:4a:36:1d:75:77:2a:26:05:bd:d7:11:a6:4e:4b:
c1:0c:6c:fa:b4:51:70:dd:03:02:89:dd:9b:fb:2c:
37:5e:d9:dc:6e:8f:27:25:33:df:36:7b:e1:95:7e:
9a:a6:af:11:76:05:45:1d:08:54:d7:69:e8:d2:78:
ff:00:c3:9d:a4:b2:e7:f2:1b:49:27:86:7b:66:9c:
f4:62:e7:7f:95:a4:c8:27:19:b0:b5:dd:56:eb:59:
77:52:34:0e:79:85:87:20:2a:1a:dd:52:c3:df:92:
cd:89:f4:55:3f:7e:f1:54:4a:26:d6:75:f0:63:7e:
04:04:01:2c:6d:7c:35:75:6d:4b:59:99:14:92:2e:
e5:c0:15:38:25:65:e6:44:47:5d:0b:25:dd:cd:76:
ae:4e:ed:23:f7:f4:98:2b:01:6a:1a:03:25:fb:24:
ce:2c:df:14:15:77:c5:b7:78:36:8f:f0:77:7e:f8:
88:50:f6:99:24:ba:3e:23:98:8c:d7:a5:8e:7c:b5:
cb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BA:22:D1:5D:B6:14:E7:F4:14:56:1D:A2:96:50:FD:18:1A:00:FB
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/HLoi0V22FOf0FFYdopZQ_RgaAPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.137.80.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:57:30:94:35:c4:ae:e4:74:a4:56:ba:a1:d6:a0:bd:33:7b:
3f:c7:04:50:68:27:b6:be:52:9d:70:b8:34:79:d3:fd:e9:5c:
61:bc:1c:80:1a:52:f6:11:56:2e:ba:0a:66:92:6a:72:1e:dc:
8a:90:9a:24:fd:60:20:4e:f7:50:31:32:cc:18:69:eb:03:0e:
1b:a6:89:00:44:a4:59:24:90:e0:65:f8:d5:c8:a2:db:b8:d4:
70:f8:19:71:b7:7c:1d:95:06:a3:b9:ef:ec:b6:1e:c0:06:39:
32:c4:fc:c3:98:b6:61:c5:42:50:c7:75:04:b5:76:21:10:c2:
31:2b:bc:d2:0b:ae:7e:ae:f0:77:97:f3:b2:f2:ff:79:63:73:
14:4d:d5:d0:d0:90:cb:27:4c:db:ce:fa:6f:a2:09:33:5f:90:
cb:ad:35:b0:ab:6f:1e:93:ff:a6:b6:ee:dd:09:05:61:b1:29:
0f:ec:e7:f9:66:08:24:41:d0:1c:10:9d:73:10:56:49:fd:aa:
91:ba:bd:d4:07:f0:e2:f1:6f:e9:38:ca:29:e4:8c:62:fa:43:
8b:8a:6c:5a:28:35:89:f4:7e:46:de:f9:12:65:e8:11:27:54:
87:d2:cb:4a:d2:c9:b2:9f:33:64:12:5c:99:47:64:69:a2:a8:
b3:a5:92:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:38 2024 by rpki-client on console-ams.rpki-client.org