Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/rJWOS6m8SLszQApEQibiWf-tWis.roa
File: rJWOS6m8SLszQApEQibiWf-tWis.roa (raw, json)
Hash identifier: hSay4APUUpBg6J0WKITO3NR3jzFD5mkhm2b07/tjkWA=
Subject key identifier: AC:95:8E:4B:A9:BC:48:BB:33:40:0A:44:42:26:E2:59:FF:AD:5A:2B
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 01891C7B9FF157188947F618CC00D1839B27
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/rJWOS6m8SLszQApEQibiWf-tWis.roa
Signing time: Mon 03 Jul 2023 16:00:11 +0000
ROA not before: Mon 03 Jul 2023 16:00:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35758
IP address blocks: 213.137.83.0/24 maxlen: 24
213.137.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Aug 2023 10:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1c:7b:9f:f1:57:18:89:47:f6:18:cc:00:d1:83:9b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Jul 3 16:00:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac958e4ba9bc48bb33400a444226e259ffad5a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:74:a6:db:30:dd:02:21:d1:2d:ca:06:fc:50:
a3:ae:63:02:df:e4:26:c4:39:af:a8:5b:7b:c5:5f:
3d:43:c9:55:f8:ba:77:6d:00:97:ed:89:bb:70:c1:
77:d6:ec:e5:b2:4f:4a:40:a4:a0:01:95:b9:d6:ff:
73:5c:53:92:71:94:bd:0a:53:11:ae:81:79:32:31:
9e:68:2f:1c:31:64:b0:9a:ee:aa:d0:70:79:e9:0d:
40:4e:23:ed:0f:16:ba:55:dd:75:11:ff:f7:7d:2c:
f9:e3:ac:bb:57:03:ee:e4:fc:97:e8:0f:b7:0e:b0:
7a:f1:4a:8f:d4:70:42:6d:bb:b8:66:8c:0a:e9:91:
7c:77:dc:de:69:5c:18:d7:75:f9:12:56:20:18:b4:
7d:62:10:b1:5d:1a:2c:f3:e1:e4:50:2e:76:96:3d:
39:66:f8:38:26:77:5f:11:6e:f0:09:89:7b:82:a4:
b9:9c:52:7e:51:f6:be:6c:f6:c3:cc:a8:7a:a4:0e:
ed:cd:ea:5e:1c:c1:c7:e0:1e:18:51:e8:f9:e9:63:
8f:88:06:e0:45:c4:94:e2:16:5c:49:21:96:98:04:
24:3f:8c:c7:0a:df:3c:a7:fc:f6:e3:16:b6:74:33:
f4:f4:26:81:cf:98:2b:df:55:be:d6:45:b5:55:22:
8c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:95:8E:4B:A9:BC:48:BB:33:40:0A:44:42:26:E2:59:FF:AD:5A:2B
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/rJWOS6m8SLszQApEQibiWf-tWis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.137.81.0/24
213.137.83.0/24
Signature Algorithm: sha256WithRSAEncryption
21:2b:ed:44:9d:da:95:c5:ec:75:a7:57:5d:b6:ba:c8:aa:05:
24:d4:79:c3:48:57:fc:f7:79:ea:e0:dc:52:24:7d:3e:45:93:
05:24:80:58:e9:b1:7c:b4:4c:72:f2:5e:ac:4c:42:7b:5c:08:
64:27:19:02:42:7b:b4:fc:40:87:0a:9b:5d:b2:a7:fb:42:c2:
32:4d:b4:2d:ba:90:c4:c0:b2:c0:91:5d:86:a1:20:7e:1a:ea:
9a:0e:2d:e6:82:ea:76:7d:15:c9:cd:9e:a6:3c:2e:52:10:c9:
e6:a1:08:eb:04:23:f1:db:08:56:03:28:2e:9a:a3:3f:c1:3a:
ef:5f:4e:b6:86:c1:47:5c:67:27:0b:47:92:50:a2:71:44:c2:
1c:31:ac:6a:39:d5:62:53:c2:9a:5c:cd:24:3b:f3:8f:53:53:
4c:4a:2f:c8:0a:06:5c:ff:2a:fa:18:28:ad:43:d8:46:74:36:
87:96:db:b8:97:17:b7:b0:2e:a1:66:21:b1:e7:9b:7a:66:ee:
4f:c0:e8:8f:64:21:ae:43:af:69:3c:26:53:36:09:9e:69:ec:
60:c0:20:48:2b:f8:22:d5:29:3e:5a:80:fd:e3:86:a3:5b:a0:
a9:34:4b:73:6b:00:c6:5d:31:92:7e:96:77:67:11:b9:3b:bf:
8d:56:0f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:06 2024 by rpki-client on console-fra.rpki-client.org