Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cESTmGt_ZUKGB0Dkh4hEyZhGtNQ.roa
File: cESTmGt_ZUKGB0Dkh4hEyZhGtNQ.roa (raw, json)
Hash identifier: E3OFomCYSvVkurKVRyvhV1b7HWl706+0sO53r09FrzY=
Subject key identifier: 70:44:93:98:6B:7F:65:42:86:07:40:E4:87:88:44:C9:98:46:B4:D4
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 018843F9CDE9A1AE8C1A4C3373BBF69D30AD
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cESTmGt_ZUKGB0Dkh4hEyZhGtNQ.roa
Signing time: Mon 22 May 2023 15:00:24 +0000
ROA not before: Mon 22 May 2023 15:00:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205320
IP address blocks: 213.137.84.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 22 Jul 2023 21:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:43:f9:cd:e9:a1:ae:8c:1a:4c:33:73:bb:f6:9d:30:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: May 22 15:00:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=704493986b7f6542860740e4878844c99846b4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:85:e0:82:95:33:60:e8:b3:9e:e8:b9:4d:22:
1b:df:fd:72:08:39:bf:29:39:76:19:22:3c:4c:c6:
f6:c7:2a:7e:f2:11:4b:d9:7f:0e:56:0b:70:91:76:
6b:f8:b4:c6:7a:8f:6b:93:bc:3f:33:58:aa:09:47:
c6:1a:05:04:fe:5f:07:fb:04:1d:9e:b2:ed:a4:8e:
c7:21:9d:db:26:bb:e6:94:29:00:69:c3:4b:54:49:
10:fc:00:64:81:6b:2e:a3:9a:46:37:f7:83:30:fb:
7c:88:05:78:05:d7:08:bd:df:dd:71:6f:87:a3:f2:
51:c3:c3:7d:37:00:02:20:c2:af:fa:b3:24:38:7f:
b0:1c:3f:be:54:7f:74:86:b9:32:0b:7c:31:13:be:
69:29:fe:aa:8f:e1:93:fd:12:2b:0d:30:e6:a0:fa:
f1:43:f1:c9:14:d1:b9:65:21:0a:4a:64:c9:c0:c3:
e1:15:1f:1b:0e:9f:31:21:72:48:22:77:ba:cb:d0:
94:c2:aa:ea:5a:18:9a:9a:43:b3:f9:2f:27:69:e7:
1f:2a:23:5f:0c:ad:1d:55:02:e2:36:5e:93:d3:4b:
40:83:22:0c:b5:8d:c3:0f:53:1c:0d:6d:e4:c4:bc:
95:7b:52:51:fd:b0:8a:11:78:cd:b3:54:2e:fa:1b:
58:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:44:93:98:6B:7F:65:42:86:07:40:E4:87:88:44:C9:98:46:B4:D4
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cESTmGt_ZUKGB0Dkh4hEyZhGtNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.137.84.0/22
Signature Algorithm: sha256WithRSAEncryption
15:27:ee:e3:22:ea:5b:fb:4c:36:bb:97:c7:cc:3a:20:d6:15:
6a:fe:78:42:a4:83:93:f2:c9:b6:02:f9:d9:bf:ea:1e:29:44:
13:8c:f7:df:02:0d:dc:fd:b9:bd:af:fa:2f:84:65:8e:a4:18:
b8:57:cf:e3:6e:1e:2d:8c:bf:3c:6d:34:36:ae:ed:89:cb:56:
96:5d:02:0f:1f:82:4f:8c:a6:28:46:dd:99:2a:e7:e9:e8:ac:
78:3c:f7:79:37:d7:f8:b4:7e:ec:7e:86:31:e7:1d:5d:53:36:
29:21:a0:de:9f:79:01:00:2b:b5:a6:0c:3f:08:43:34:b2:ab:
55:a6:3c:46:f6:a4:64:d2:db:3e:e2:ce:47:fb:bf:a1:63:41:
ef:71:47:5f:7e:96:f3:0a:44:7b:09:11:35:7f:1e:34:52:4c:
f4:6e:65:d4:91:ce:32:d2:f1:e7:a6:f1:b9:61:c2:bc:fd:a1:
9e:60:43:ce:d1:02:cb:3f:02:2b:b2:8e:f7:47:23:45:0e:6b:
85:b3:eb:73:c8:bd:4d:43:09:e9:f6:16:29:4c:d9:2f:e1:9a:
3a:2b:c8:14:ff:52:96:d1:c6:ce:01:3b:a2:c0:a6:ff:0f:08:
7d:24:7c:49:50:e1:4e:eb:35:28:82:16:45:e9:66:24:1b:2c:
b7:06:88:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhD+c3poa6MGkwzc7v2nTCtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3
ZWVmNDAwHhcNMjMwNTIyMTUwMDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDQ0OTM5ODZiN2Y2NTQyODYwNzQwZTQ4Nzg4NDRjOTk4NDZiNGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoXggpUzYOiznui5TSIb3/1yCDm/
KTl2GSI8TMb2xyp+8hFL2X8OVgtwkXZr+LTGeo9rk7w/M1iqCUfGGgUE/l8H+wQd
nrLtpI7HIZ3bJrvmlCkAacNLVEkQ/ABkgWsuo5pGN/eDMPt8iAV4BdcIvd/dcW+H
o/JRw8N9NwACIMKv+rMkOH+wHD++VH90hrkyC3wxE75pKf6qj+GT/RIrDTDmoPrx
Q/HJFNG5ZSEKSmTJwMPhFR8bDp8xIXJIIne6y9CUwqrqWhiamkOz+S8naecfKiNf
DK0dVQLiNl6T00tAgyIMtY3DD1McDW3kxLyVe1JR/bCKEXjNs1Qu+htYHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHBEk5hrf2VChgdA5IeIRMmYRrTUMB8GA1UdIwQY
MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt
YmM2ZGI3MjQ4YWRkLzEvY0VTVG1HdF9aVUtHQjBEa2g0aEV5WmhHdE5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk
LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1YlUMA0G
CSqGSIb3DQEBCwUAA4IBAQAVJ+7jIupb+0w2u5fHzDog1hVq/nhCpIOT8sm2AvnZ
v+oeKUQTjPffAg3c/bm9r/ovhGWOpBi4V8/jbh4tjL88bTQ2ru2Jy1aWXQIPH4JP
jKYoRt2ZKufp6Kx4PPd5N9f4tH7sfoYx5x1dUzYpIaDen3kBACu1pgw/CEM0sqtV
pjxG9qRk0ts+4s5H+7+hY0HvcUdffpbzCkR7CRE1fx40Ukz0bmXUkc4y0vHnpvG5
YcK8/aGeYEPO0QLLPwIrso73RyNFDmuFs+tzyL1NQwnp9hYpTNkv4Zo6K8gU/1KW
0cbOATuiwKb/Dwh9JHxJUOFO6zUoghZF6WYkGyy3Boih
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:06 2024 by rpki-client on console-fra.rpki-client.org