Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/NlXk2jhEEQDmk5uHTSBg-dSDA_E.roa
File: NlXk2jhEEQDmk5uHTSBg-dSDA_E.roa (raw, json)
Hash identifier: ceWkChaTaGB0YFY9mzAtADI0xZ6sFuWNOyHictuecy0=
Subject key identifier: 36:55:E4:DA:38:44:11:00:E6:93:9B:87:4D:20:60:F9:D4:83:03:F1
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 01856F9DC42D9DDD4068650C4A7BA6FB63DE
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/NlXk2jhEEQDmk5uHTSBg-dSDA_E.roa
Signing time: Sun 01 Jan 2023 23:14:48 +0000
ROA not before: Sun 01 Jan 2023 23:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50875
IP address blocks: 213.14.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:c4:2d:9d:dd:40:68:65:0c:4a:7b:a6:fb:63:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 23:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3655e4da38441100e6939b874d2060f9d48303f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fb:c1:03:6c:3b:a8:d1:de:03:dc:14:e0:e3:
71:d0:77:a9:1e:a1:00:48:05:00:d4:a2:ed:06:59:
23:03:58:eb:18:69:e8:7f:5d:6b:01:12:ba:95:65:
ac:62:83:07:6a:e7:f0:d8:12:3b:67:59:28:99:55:
8c:38:34:e4:35:53:c6:ce:29:c9:f0:11:7a:53:57:
bb:55:be:1a:68:12:15:bd:4b:00:31:72:18:ea:bc:
9b:24:8d:79:a4:2c:54:bd:43:10:8b:a8:4c:5c:3f:
5d:c8:67:6a:32:ad:16:bc:3d:73:a7:a8:0a:06:79:
69:f8:72:da:a1:a5:61:ec:8b:79:c9:74:9c:52:6f:
89:56:8f:c9:93:b0:cb:ae:f9:31:48:30:57:67:3e:
c4:14:ef:fd:da:ef:1f:e5:12:dc:87:b3:79:45:81:
4e:5f:9b:f0:7d:00:a4:09:da:ce:5a:9f:06:0b:fc:
f9:25:f3:75:4e:0c:8d:6f:c3:3c:63:85:c0:ed:50:
cc:0e:44:4d:0a:16:11:03:0e:af:5c:de:e1:25:a4:
75:3b:8b:70:c9:34:a6:a5:a3:f1:e0:07:6d:dd:b8:
35:92:dc:2a:9d:52:3a:b0:38:f4:fc:bf:ef:a2:62:
7e:0b:b2:41:20:d1:61:51:7e:bb:93:63:65:8d:10:
6f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:55:E4:DA:38:44:11:00:E6:93:9B:87:4D:20:60:F9:D4:83:03:F1
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/NlXk2jhEEQDmk5uHTSBg-dSDA_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.14.238.0/24
Signature Algorithm: sha256WithRSAEncryption
27:4e:d8:f2:31:29:a1:10:ff:32:39:78:96:53:64:d2:f5:fe:
94:6e:8b:a1:40:32:7e:12:1c:c5:4a:c0:69:b9:50:b2:37:49:
0c:ec:30:89:c0:0c:53:0f:a8:a1:2f:0a:33:79:95:05:8a:a4:
78:66:ab:34:63:fa:ea:54:b2:d9:6d:fb:8b:f8:59:21:ac:d4:
1e:67:75:68:37:d2:94:28:e3:c8:dd:00:7f:c8:75:f5:6b:e9:
2a:be:e7:f1:11:dc:35:03:50:9e:bf:1e:eb:8f:99:f0:2e:f8:
ba:a2:83:2b:15:7e:db:20:74:ea:aa:dc:5f:05:25:6c:57:c7:
c2:6b:55:01:dc:7d:a0:ff:1c:78:43:30:73:3a:7d:c5:ab:04:
7e:98:dd:2e:2a:c9:bc:b5:35:df:ec:16:dc:41:d2:08:b6:af:
50:32:2f:bb:a9:71:7d:a9:cf:aa:f4:71:1d:0e:9c:ca:71:a6:
52:57:d8:fe:5f:5c:5f:33:d7:fd:1f:56:2c:68:c4:c5:6d:7c:
6a:56:2c:b0:85:67:a8:be:58:61:39:b1:78:18:4f:8e:20:54:
3f:a5:d8:b9:49:5f:85:3c:bb:73:4a:04:91:66:52:e1:d8:7c:
ce:8d:fc:c0:b6:9d:95:a0:90:6a:f0:4e:3f:10:6b:72:25:fe:
bc:f4:ef:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:16 2024 by rpki-client on console-fra.rpki-client.org