Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/q6V-euv9sjMqg0NJdySHi4u3uYE.roa
File: q6V-euv9sjMqg0NJdySHi4u3uYE.roa (raw, json)
Hash identifier: aIjpdCVAkEdsLrgDHc9lNpU66YIiKz0vrU60PZu1IyE=
Subject key identifier: AB:A5:7E:7A:EB:FD:B2:33:2A:83:43:49:77:24:87:8B:8B:B7:B9:81
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01856F14F3A3808AA58606BF943C344E1805
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/q6V-euv9sjMqg0NJdySHi4u3uYE.roa
Signing time: Sun 01 Jan 2023 20:45:22 +0000
ROA not before: Sun 01 Jan 2023 20:45:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204019
IP address blocks: 213.199.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:f3:a3:80:8a:a5:86:06:bf:94:3c:34:4e:18:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 20:45:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aba57e7aebfdb2332a8343497724878b8bb7b981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:33:da:63:df:fa:82:25:d2:c8:4d:3e:37:ef:
37:d6:d6:af:a0:42:32:15:b6:db:27:3b:76:a7:5b:
44:df:fd:a8:fc:a8:e5:77:1e:c7:4e:e6:2b:bb:20:
bb:76:b7:c4:60:ab:e5:7d:4f:c1:73:7b:44:2f:8a:
b1:16:02:4c:b4:e2:62:a2:2f:38:02:46:2b:26:7b:
f0:fc:81:fb:89:13:ee:ff:e8:a2:4a:b6:0c:54:89:
d5:55:19:4a:a0:10:d4:d7:a0:10:57:b0:56:de:36:
7d:46:d9:16:bf:2f:05:69:dd:8b:65:25:aa:94:7a:
e1:3f:29:3d:c6:58:da:1c:0f:40:b8:a3:ba:cc:b6:
d6:77:72:f6:62:fc:72:4d:18:58:ba:13:ab:a9:c8:
25:ab:0b:cb:51:5f:ca:94:0a:ea:b3:0b:47:3f:6e:
8a:e1:fa:c7:0c:b1:70:f9:71:4c:c1:bb:1d:43:00:
b5:90:61:d8:c2:2c:78:3c:07:69:d5:eb:7e:fa:21:
c0:da:85:37:dc:8c:3e:9b:3d:61:90:76:5e:1d:1c:
ad:7b:fe:94:09:a6:85:ec:99:12:1f:0d:5d:6e:3d:
1e:1e:8d:79:23:68:e3:4f:c0:94:d6:16:95:1a:a2:
12:c0:b1:ac:01:d8:cd:31:a8:87:97:d5:3b:52:2a:
55:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A5:7E:7A:EB:FD:B2:33:2A:83:43:49:77:24:87:8B:8B:B7:B9:81
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/q6V-euv9sjMqg0NJdySHi4u3uYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.199.208.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:2e:4d:ed:70:4f:53:87:8e:c6:d6:fa:12:39:ec:2e:bb:06:
7d:7e:83:41:ba:f6:6b:81:63:c7:c5:b9:8b:1b:04:70:2b:60:
b6:36:73:9b:3c:a7:35:c0:25:89:97:47:57:a9:4d:31:8d:8d:
1e:38:07:af:d5:0e:a7:bf:3c:e0:f1:fd:e8:e8:a6:4f:d8:78:
13:f8:41:c3:a5:d4:b5:49:6a:aa:2e:07:68:77:94:57:41:47:
04:c1:ed:6e:9e:85:37:09:8b:a9:0e:66:4a:49:48:f2:17:0e:
a8:f1:cc:74:b9:16:2c:df:1e:0a:8c:82:f5:23:3f:37:74:b2:
6c:d2:aa:c0:88:17:43:a2:cc:a4:45:b0:65:f4:36:9b:75:c0:
3d:50:3c:97:bd:76:ee:1e:60:3e:f1:db:c7:cb:a6:27:0f:16:
82:bd:ef:d6:fc:1d:c0:23:f1:9a:0e:f9:bc:34:01:a2:17:10:
d5:fb:b0:00:c6:c5:a8:7f:40:8b:0b:9b:0d:b1:5a:40:a1:43:
f8:4a:60:5d:ca:7a:41:27:3e:ed:f2:09:1a:45:5e:51:61:6d:
66:ab:52:c6:75:f4:b0:b4:ef:c7:00:fb:92:e9:f5:d0:b2:00:
31:b9:95:e3:54:f1:17:ec:1f:40:63:9a:76:58:fd:01:ad:c8:
c8:86:d1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:21 2024 by rpki-client on console-fra.rpki-client.org