Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/1Y2VvQpLFH7RInkJrtIiefLCk-g.roa
File: 1Y2VvQpLFH7RInkJrtIiefLCk-g.roa (raw, json)
Hash identifier: X/+gkKmQgEnnnFiGrV3i0wNc4rx3pqR1tZOctsy8dTw=
Subject key identifier: D5:8D:95:BD:0A:4B:14:7E:D1:22:79:09:AE:D2:22:79:F2:C2:93:E8
Certificate issuer: /CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Certificate serial: 018B7FD1C58E43C7A2ADA803F40C7A26BEB5
Authority key identifier: 8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/1Y2VvQpLFH7RInkJrtIiefLCk-g.roa
Signing time: Mon 30 Oct 2023 09:02:15 +0000
ROA not before: Mon 30 Oct 2023 09:02:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15517
IP address blocks: 213.133.240.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7f:d1:c5:8e:43:c7:a2:ad:a8:03:f4:0c:7a:26:be:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Validity
Not Before: Oct 30 09:02:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d58d95bd0a4b147ed1227909aed22279f2c293e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6c:e8:f5:6a:6e:12:a0:ed:4e:f1:db:de:43:
8f:32:a7:77:45:03:de:d8:ef:64:95:a9:29:33:58:
8a:b6:db:06:05:5a:11:16:95:a6:20:fe:fb:02:80:
7a:84:c3:01:92:9e:5f:0e:89:01:ec:de:9b:38:1d:
89:45:ef:d9:4a:db:dc:ae:70:f4:b3:a5:4d:9c:73:
76:38:19:bd:fb:70:32:dd:1b:e4:81:10:2e:31:d9:
ae:7c:40:c7:c7:9f:70:f1:d8:c9:76:fa:66:36:f3:
f2:7e:74:ce:6d:db:29:13:d2:2a:44:2b:da:3f:57:
42:10:9c:f7:0d:de:43:55:04:6f:af:67:ad:cc:34:
c5:dc:a7:93:e7:7b:23:e6:27:cb:9d:3e:70:9e:90:
0c:7b:98:ee:e5:a1:66:99:c8:35:70:7c:f8:65:2e:
30:09:a7:7a:d0:e0:d0:bc:a0:e1:c3:88:ea:f9:88:
62:11:35:e5:35:84:ea:19:bf:8e:26:c1:72:c3:1b:
3c:be:dc:77:0e:cb:cc:9d:d2:8e:8d:38:60:38:d4:
a9:ce:cc:ff:13:0b:c7:be:8b:93:6a:86:21:b9:4e:
7a:0b:4e:14:4f:83:2b:5b:5d:1f:11:72:4c:d0:e7:
a1:e4:0d:c9:06:e5:e7:85:f2:43:f9:a6:e0:42:27:
ba:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8D:95:BD:0A:4B:14:7E:D1:22:79:09:AE:D2:22:79:F2:C2:93:E8
X509v3 Authority Key Identifier:
keyid:8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/1Y2VvQpLFH7RInkJrtIiefLCk-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.133.240.0/21
Signature Algorithm: sha256WithRSAEncryption
c1:c7:d3:3a:10:b5:3b:e5:b1:c6:63:60:dc:08:51:c7:59:ba:
10:09:18:c2:7c:f4:b3:88:c1:eb:32:94:62:36:46:50:db:40:
27:28:13:71:f4:36:c7:92:7f:dd:1f:0e:76:2a:06:ae:05:a3:
fd:89:8c:80:0b:c9:47:7d:31:80:d2:40:de:87:53:1b:0d:b2:
33:e0:41:89:c5:eb:8c:ed:ad:f6:f4:15:18:42:4c:59:be:a0:
f1:94:63:07:ef:8f:f5:fb:f4:ce:7d:7e:e0:c6:71:53:1a:fc:
b2:03:e5:e2:b0:24:a6:bc:f8:26:dc:25:01:fc:78:4d:46:f4:
92:d3:56:0b:0f:a1:3f:c1:4d:6d:d4:5d:32:95:cd:7b:15:7f:
d4:41:65:23:c3:88:68:50:ed:f4:1e:2f:f4:7e:80:19:61:f7:
d1:6b:d7:92:d0:65:07:af:ed:32:49:77:73:44:a9:f4:26:b4:
e5:72:23:d1:5d:6b:a6:b8:34:7f:2a:59:0a:f5:64:35:09:ab:
a6:03:df:20:3d:1b:ea:63:75:97:f5:5d:bb:89:e5:08:c4:92:
97:e0:08:1e:4f:32:cf:eb:0a:35:45:a5:04:a7:50:72:34:28:
97:9e:5b:9b:48:65:12:75:32:16:2d:29:9d:51:11:16:9c:27:
5f:60:d6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:11 2024 by rpki-client on console-ams.rpki-client.org