Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/Awk21GzVOFPqe2xrFptC-wKRO4g.roa
File: Awk21GzVOFPqe2xrFptC-wKRO4g.roa (raw, json)
Hash identifier: lcWCgH60rS9g3USUr0lCxqsq7TBDP4Xxy/XGm4wJprI=
Subject key identifier: 03:09:36:D4:6C:D5:38:53:EA:7B:6C:6B:16:9B:42:FB:02:91:3B:88
Certificate issuer: /CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f
Certificate serial: 018CC8011FD5325724845A21C6E58D7ACE16
Authority key identifier: CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/Awk21GzVOFPqe2xrFptC-wKRO4g.roa
Signing time: Tue 02 Jan 2024 02:29:26 +0000
ROA not before: Tue 02 Jan 2024 02:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 213.170.203.0/24 maxlen: 24
213.170.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 12:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:1f:d5:32:57:24:84:5a:21:c6:e5:8d:7a:ce:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f
Validity
Not Before: Jan 2 02:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=030936d46cd53853ea7b6c6b169b42fb02913b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:92:df:50:e2:bf:33:2a:22:2f:1a:81:66:ce:
c0:dd:34:d1:5b:54:45:54:c4:c0:2d:9b:f6:26:32:
f4:df:89:1a:03:8e:44:3b:21:74:de:e1:a7:e9:17:
08:3d:ac:fd:b9:c6:09:03:10:0d:e8:eb:3f:1e:0e:
69:80:d0:05:b5:75:19:92:53:d3:06:1e:b5:87:43:
44:0e:d9:08:be:e4:ab:b0:f2:0e:27:da:4d:31:c3:
64:07:cd:2d:41:6b:94:7d:d3:69:80:1d:ea:fa:f3:
94:1b:ba:6e:fb:8c:f9:84:43:d4:dc:a5:b1:35:17:
f2:33:15:ff:6f:d3:8f:4d:5c:37:11:e0:5a:d4:42:
8c:cf:f6:87:17:82:68:0b:ef:87:26:c2:f8:57:bd:
c1:8f:f4:33:5a:03:a0:dc:91:c7:64:6d:70:f3:5d:
3d:d7:16:ac:9c:15:b9:3d:0e:d1:a0:21:6a:79:3d:
a9:e7:97:c4:f7:c7:2e:70:0a:c9:0e:21:f8:80:5f:
6a:4c:0d:59:5d:3b:d9:04:99:17:5b:42:2b:ab:3b:
89:a9:e9:d8:9f:c5:7b:3f:dd:91:49:23:71:ad:bc:
2b:93:7f:83:e3:33:02:33:34:f0:50:02:94:cc:5e:
11:9b:79:b1:ab:d6:9c:76:4d:23:c5:52:a1:d7:30:
32:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:09:36:D4:6C:D5:38:53:EA:7B:6C:6B:16:9B:42:FB:02:91:3B:88
X509v3 Authority Key Identifier:
keyid:CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/Awk21GzVOFPqe2xrFptC-wKRO4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.170.202.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:e7:7f:2e:36:ec:df:e7:3f:91:8d:a7:c8:d5:b8:95:c6:65:
d2:8d:db:ba:73:c8:d1:b6:5e:1d:33:3c:f4:5c:eb:43:49:0f:
46:23:6d:b1:2b:d1:b8:b0:53:55:fd:2a:8a:41:8c:8a:39:bc:
c8:a0:a7:14:1b:af:86:e0:66:83:9f:df:86:cc:7e:31:47:e6:
b1:55:94:12:51:4a:f5:4b:e5:5c:4f:36:f3:1f:52:db:73:24:
36:4e:0f:23:27:74:4a:5d:cc:39:3a:9c:10:11:90:e4:c4:34:
d6:fd:3d:10:6e:37:65:1b:24:1d:f4:43:8d:6e:9a:09:af:6a:
47:ce:d9:bf:06:37:f1:e1:dd:9e:fb:c7:3b:d3:9e:b0:08:5e:
bb:a6:47:64:6e:24:6d:83:d1:76:db:54:c4:ae:3f:fc:42:af:
15:7b:21:38:00:b7:c9:64:9d:82:0f:b7:f2:cc:1f:27:9b:00:
d4:31:b8:d7:bf:cd:64:06:4c:39:a4:9d:5e:19:17:1c:d4:bf:
b9:2d:a5:f7:0f:87:8a:c9:58:07:78:f2:7a:35:9f:bd:21:32:
15:ff:0c:c8:91:49:8d:92:2c:67:00:af:ca:da:9b:e9:86:85:
ef:7f:25:01:36:e7:1b:d8:8c:d5:96:d7:59:50:6a:7a:61:0a:
66:c9:9f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:18 2024 by rpki-client on console-fra.rpki-client.org