Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/trNuPfbXMsM6gW613GRvRYIkmyg.roa
File: trNuPfbXMsM6gW613GRvRYIkmyg.roa (raw, json)
Hash identifier: xebkPqKAtHKzz80MhUOKOva+SDt429nU9nZRl5qdtVA=
Subject key identifier: B6:B3:6E:3D:F6:D7:32:C3:3A:81:6E:B5:DC:64:6F:45:82:24:9B:28
Certificate issuer: /CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f
Certificate serial: 018CA0A8116573B93766936BBDCFA0EF6037
Authority key identifier: CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/trNuPfbXMsM6gW613GRvRYIkmyg.roa
Signing time: Mon 25 Dec 2023 11:06:58 +0000
ROA not before: Mon 25 Dec 2023 11:06:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 213.170.203.0/24 maxlen: 24
213.170.202.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a0:a8:11:65:73:b9:37:66:93:6b:bd:cf:a0:ef:60:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f
Validity
Not Before: Dec 25 11:06:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6b36e3df6d732c33a816eb5dc646f4582249b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:58:e7:34:bb:0b:b2:77:d6:0c:de:7a:2e:51:
40:f8:26:5e:12:f6:7d:73:22:aa:4f:84:6f:9a:fd:
ce:c7:ae:c3:03:01:0d:74:56:bf:68:89:03:34:33:
b1:28:d6:90:0b:55:ce:f2:6c:03:97:25:6f:a3:1f:
52:22:f5:7d:fd:0a:aa:09:9e:96:3e:f3:10:b1:0a:
e3:a2:64:08:4c:66:c0:c8:da:65:27:6b:f4:c4:ab:
59:1c:e4:6d:84:0f:2a:02:53:3c:8b:4d:1b:12:df:
e2:86:77:5c:0f:52:7b:7b:75:d6:9f:0d:c6:e3:b2:
a4:bb:46:50:3b:c8:5c:57:f1:f3:a2:e9:d4:92:0a:
8d:e5:ab:65:4a:2e:24:08:66:db:a0:90:35:8e:52:
ac:64:e0:4b:6b:c8:b8:28:39:7d:71:ed:f1:1d:53:
3f:e8:1a:06:33:c8:d9:f8:20:53:33:9b:0c:ff:dd:
3f:1f:1c:13:41:cf:bc:86:d1:ad:56:f0:5e:a0:09:
8b:6b:92:e7:e4:3a:b4:30:f4:ac:1e:7e:72:d2:db:
c8:4d:31:d8:0f:1e:ac:40:8e:9f:1a:3c:7e:76:fa:
fd:92:19:5f:77:5d:02:1b:3c:74:61:94:8a:2a:1d:
e5:0d:19:e3:44:40:10:56:e0:de:10:57:37:db:f2:
e5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B3:6E:3D:F6:D7:32:C3:3A:81:6E:B5:DC:64:6F:45:82:24:9B:28
X509v3 Authority Key Identifier:
keyid:CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/trNuPfbXMsM6gW613GRvRYIkmyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.170.202.0/23
Signature Algorithm: sha256WithRSAEncryption
29:bf:14:6c:de:04:b1:37:34:dd:c1:d1:d4:95:3b:2b:e4:fd:
e8:84:b1:8c:0b:03:c6:71:61:6a:c2:69:b5:62:69:f7:83:41:
33:cb:20:a6:df:cd:73:d0:23:79:5c:b7:dd:02:2b:8b:05:77:
34:5f:7e:e8:5b:0c:4e:cc:27:55:99:b4:40:08:c7:36:36:ea:
e4:fa:cb:3f:24:98:2d:ed:fb:6c:22:b1:d5:54:09:0b:b2:f0:
6c:3e:a6:70:01:cd:9b:e0:0f:1b:32:5f:61:4d:48:34:de:0c:
16:ed:da:9a:45:d7:0e:6e:9c:bd:3f:65:fe:e0:f5:09:06:ea:
71:b8:ea:da:f6:6d:4f:fa:6d:2a:59:58:33:c4:ed:55:b4:a8:
74:cb:d1:b8:d5:d1:c4:aa:02:0c:3a:0b:60:7a:4e:1a:fa:d9:
29:11:68:ac:aa:00:a8:ae:ed:8f:ca:ff:19:b6:f3:e8:e6:4e:
a1:91:d0:f7:1d:79:56:0b:91:b6:19:35:8c:20:52:40:cc:c8:
bd:78:9b:c1:8e:34:0f:6d:8d:dc:c1:53:db:ac:af:dd:9e:0c:
2a:1a:bc:44:80:0d:6d:8b:f4:95:70:f5:3c:b6:94:ea:4c:02:
24:31:03:08:35:38:41:a1:e0:d2:2d:0c:e9:88:f6:6a:2e:02:
bd:e4:7c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:26 2024 by rpki-client on console-ams.rpki-client.org