Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/Sibg0A2iXmZ-T4zLpm91CO_Jzdw.roa
File: Sibg0A2iXmZ-T4zLpm91CO_Jzdw.roa (raw, json)
Hash identifier: IUx+aklkzjP/BAVojyPb2cHlbWpZsq3GpI6MqnV8g5I=
Subject key identifier: 4A:26:E0:D0:0D:A2:5E:66:7E:4F:8C:CB:A6:6F:75:08:EF:C9:CD:DC
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 018CC94CA49205AB8DC283A1515C6F64B3E4
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/Sibg0A2iXmZ-T4zLpm91CO_Jzdw.roa
Signing time: Tue 02 Jan 2024 08:31:32 +0000
ROA not before: Tue 02 Jan 2024 08:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35758
IP address blocks: 213.137.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 12:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:a4:92:05:ab:8d:c2:83:a1:51:5c:6f:64:b3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Jan 2 08:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a26e0d00da25e667e4f8ccba66f7508efc9cddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0c:83:73:17:2c:d9:60:8d:5e:61:8e:c4:f4:
36:6c:21:26:a3:7b:67:24:8b:b8:8d:55:08:fa:10:
05:26:61:67:b9:b3:84:a1:dd:dc:28:8e:6c:d9:47:
7c:d1:37:f1:22:1a:73:53:38:cf:2f:88:c4:b4:22:
dc:83:02:a9:4c:82:97:0e:7f:21:f7:2f:72:e9:43:
f9:81:21:75:ab:e3:14:09:9c:9a:5a:e5:96:5d:cb:
77:5d:07:96:ae:97:f3:cf:1d:30:fe:61:a4:b4:69:
8f:d9:96:d4:7a:94:14:9d:f3:bc:ca:89:76:a7:1a:
08:cf:66:da:ee:e9:de:07:3c:04:f2:6c:99:12:67:
82:c2:af:d1:89:b0:a6:00:23:74:75:d7:d2:30:b0:
7f:82:e2:b2:68:4c:3c:ab:b0:ab:c0:93:ce:d1:3d:
91:9b:d3:ad:4c:d6:14:79:e9:c3:05:b1:9e:d2:4c:
30:65:17:90:88:67:c5:73:74:23:da:66:68:81:3c:
6d:71:64:25:17:41:dc:a5:db:5b:f0:0b:bc:b6:69:
d6:f2:50:f6:cc:b3:4a:9a:7b:a2:af:32:d4:f6:e9:
b8:cb:7f:de:29:35:f6:56:74:f6:7e:b7:f0:fd:f9:
5f:5e:40:0f:66:d4:aa:17:ea:56:d8:3c:b5:9f:04:
ce:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:26:E0:D0:0D:A2:5E:66:7E:4F:8C:CB:A6:6F:75:08:EF:C9:CD:DC
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/Sibg0A2iXmZ-T4zLpm91CO_Jzdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.137.83.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:a7:c0:e2:af:a0:79:a9:fe:71:dd:b5:c7:8e:08:4a:d5:e7:
86:7b:be:9d:a0:9c:d4:5d:e8:c3:1c:a0:d5:63:7d:80:7d:6d:
cd:3a:0d:9e:20:ca:65:4e:a8:b0:26:c0:27:a7:b3:1c:15:df:
4a:7f:23:bd:8d:b0:44:13:af:e9:00:ac:37:62:1a:bc:87:ca:
97:29:b2:50:ca:67:c8:2e:29:89:e0:f1:67:ee:28:bf:04:6e:
4c:19:87:02:4d:d2:bc:e0:43:85:cf:ae:ea:3c:46:c6:3a:80:
2b:c3:58:dc:b4:56:93:4b:d3:0b:dc:af:25:69:4e:24:cf:fa:
6f:bd:b4:9a:a2:42:3f:85:65:e3:ff:24:7e:31:02:f5:2e:cd:
67:5e:52:6f:98:15:25:11:a1:02:05:30:52:f9:92:04:a8:34:
0e:87:89:1b:05:68:fb:4b:53:5b:f3:f8:2f:06:97:f1:e2:1e:
89:50:f4:b8:3d:19:2c:18:bd:28:29:99:2d:67:32:6e:48:11:
61:ec:cc:17:f9:5b:3d:ec:b6:54:0a:8c:ed:0a:a9:7d:30:27:
eb:ac:af:e8:17:84:d2:3f:04:85:a5:66:a4:7a:e5:19:2a:83:
44:0a:72:60:29:ed:f4:fe:8b:9a:55:bb:62:53:9b:bf:37:2a:
6e:26:a2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:38 2024 by rpki-client on console-ams.rpki-client.org