Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Idk5HsFacphOSlQJV8fcsOienEo.roa
File: Idk5HsFacphOSlQJV8fcsOienEo.roa (raw, json)
Hash identifier: 7BP4TuBKhghuHDHXBsuQtaqSBxJxOUwCKY9PPwQRwZ8=
Subject key identifier: 21:D9:39:1E:C1:5A:72:98:4E:4A:54:09:57:C7:DC:B0:E8:9E:9C:4A
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 018E47B457A84C676D0FCEC1A9DEF84E0D77
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Idk5HsFacphOSlQJV8fcsOienEo.roa
Signing time: Sat 16 Mar 2024 14:39:45 +0000
ROA not before: Sat 16 Mar 2024 14:39:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216074
IP address blocks: 213.195.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 10:19:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:47:b4:57:a8:4c:67:6d:0f:ce:c1:a9:de:f8:4e:0d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Mar 16 14:39:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21d9391ec15a72984e4a540957c7dcb0e89e9c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:96:7f:87:b0:39:82:c1:91:5c:bd:56:27:02:
ef:52:c7:ac:12:89:c6:0f:64:9f:23:a2:a7:c3:87:
ce:3d:8f:e6:cd:52:ec:86:74:a9:98:4d:6b:c3:1c:
94:60:6e:53:f7:49:b0:ba:f2:66:f9:75:08:ea:55:
22:c4:02:f5:3c:28:cd:b5:cc:e9:8e:18:cc:db:f4:
95:f7:0d:c1:12:1d:1e:2b:3e:41:3e:ec:5f:2a:ba:
19:cd:78:1d:59:e6:f9:da:0b:1a:4a:15:c9:c5:49:
15:cd:50:76:93:85:0b:95:f9:d8:58:9f:83:68:ba:
08:f9:e8:c0:f2:d9:5e:72:a1:76:3d:aa:0d:7b:62:
05:01:49:a5:36:7e:1d:99:0b:e8:d0:2f:ed:85:72:
f5:7e:d5:c2:80:7f:17:83:fc:5c:28:3e:e6:87:65:
89:45:82:ad:a8:32:e7:84:fe:eb:45:6f:f8:71:d8:
c1:31:49:40:08:d9:b2:c0:d9:a1:5d:46:93:43:4b:
00:c5:c3:5b:74:ca:33:45:e7:7e:20:ac:46:f6:c5:
e1:fc:46:5c:63:85:1e:7b:3f:c4:c5:53:98:83:bc:
f4:9f:9b:08:2c:a6:be:bb:81:aa:ec:25:b9:19:8c:
b1:3e:86:3c:b0:fd:e7:79:c7:34:06:08:8b:c7:c3:
86:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D9:39:1E:C1:5A:72:98:4E:4A:54:09:57:C7:DC:B0:E8:9E:9C:4A
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Idk5HsFacphOSlQJV8fcsOienEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.195.23.0/24
Signature Algorithm: sha256WithRSAEncryption
81:38:8d:11:f9:4c:70:0d:bc:2b:04:7d:e6:b5:37:19:24:b5:
9b:53:69:0c:ed:72:7e:09:db:53:71:bd:f1:3d:c7:0f:32:25:
ff:49:6b:7c:70:66:ea:b8:93:65:c0:8c:6d:c5:7f:28:93:53:
e5:66:6a:88:1c:9c:8f:ed:ee:df:c5:0d:c5:0f:54:bd:4b:7b:
a5:23:e2:5d:70:6b:2d:af:76:e6:dd:2c:4c:10:41:7b:de:3e:
12:a5:a3:c7:a7:a7:bf:90:41:a0:48:40:9d:41:5d:f6:0f:81:
0c:a4:c8:e1:73:b7:7b:07:5d:05:10:54:30:c8:e1:a8:6c:71:
42:34:ca:38:26:e7:df:fe:bc:cb:da:3e:03:96:85:bf:5b:a6:
f2:e1:6f:19:4b:87:a1:e0:54:3d:41:e2:79:25:a7:88:79:79:
00:0c:5a:e6:27:2a:10:3f:8d:89:ff:90:f2:8b:4f:86:3e:31:
82:9a:91:74:a1:c2:e4:f1:c1:84:b0:a0:55:82:8c:12:28:91:
63:bf:67:8d:01:c1:eb:1e:70:40:a3:fb:9f:a9:1a:43:52:4c:
bf:33:0e:02:32:48:76:f6:b3:70:5a:a6:05:8f:e7:f0:37:ab:
8b:37:6f:70:d4:6a:5f:e1:82:87:3e:79:85:1b:93:40:0d:36:
cd:04:63:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:01 2024 by rpki-client on console-fra.rpki-client.org