Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/3foGwXoj6o_LuZ0lclv4nmnbA4c.roa
File: 3foGwXoj6o_LuZ0lclv4nmnbA4c.roa (raw, json)
Hash identifier: ihTFMKWbT/Bs+MXSE2OsGcrXqOTaHHEMKTm75gQR3IY=
Subject key identifier: DD:FA:06:C1:7A:23:EA:8F:CB:B9:9D:25:72:5B:F8:9E:69:DB:03:87
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 01856F5DDB08D582AA309520FC8F34165B11
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/3foGwXoj6o_LuZ0lclv4nmnbA4c.roa
Signing time: Sun 01 Jan 2023 22:04:59 +0000
ROA not before: Sun 01 Jan 2023 22:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34521
IP address blocks: 213.215.69.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:db:08:d5:82:aa:30:95:20:fc:8f:34:16:5b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 22:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddfa06c17a23ea8fcbb99d25725bf89e69db0387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:3b:b1:0c:d8:af:0f:52:a5:3f:87:22:ad:
bf:90:d5:c5:54:35:54:f3:69:d5:b5:da:cf:2f:fd:
a0:2a:64:06:d7:f1:32:87:c8:81:83:28:a4:13:e5:
4b:40:60:a8:3b:ed:29:08:3f:43:8b:7e:4d:52:fd:
75:2a:71:ae:0b:d3:29:fe:f4:90:c1:54:97:2f:f2:
a6:7f:91:12:eb:80:6b:bc:72:a1:d5:9d:b0:40:7f:
fd:e9:64:22:5f:34:a6:ed:57:9b:2d:1a:36:35:93:
50:51:d4:59:ca:1c:9a:6e:aa:c9:59:a1:fc:f3:1c:
68:67:1b:3b:52:f9:c0:36:34:d3:c6:b9:cc:3e:52:
fb:01:dd:b7:94:ec:35:79:a0:06:4e:7d:f5:65:4a:
75:84:e0:99:0d:85:e4:50:3f:46:82:ea:a5:0c:2f:
21:d7:b5:0b:09:1e:6c:01:98:c1:23:6c:77:69:66:
84:9f:fe:10:2f:ec:84:3b:19:a8:43:fe:6f:66:d8:
d4:ad:14:db:78:bc:d2:cd:74:34:a2:7b:ba:36:c1:
d7:d2:8a:04:25:53:1e:69:b6:b1:62:72:2d:8c:66:
67:6b:38:0b:a2:5d:fd:cc:30:1c:69:78:d5:28:0c:
9c:7e:c0:47:1d:eb:aa:13:8a:3b:10:10:ee:55:80:
5e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FA:06:C1:7A:23:EA:8F:CB:B9:9D:25:72:5B:F8:9E:69:DB:03:87
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/3foGwXoj6o_LuZ0lclv4nmnbA4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.215.69.0/24
Signature Algorithm: sha256WithRSAEncryption
43:17:e2:bd:b3:52:02:34:a7:c4:1e:98:ea:25:83:57:71:8a:
3c:76:3a:c0:b5:58:5c:07:7c:5a:72:10:6f:ec:5f:02:a4:4d:
a6:f6:7a:37:84:3a:88:49:dc:34:c0:4f:fd:c0:b3:82:b4:30:
03:62:32:64:2b:69:b7:c6:0a:3b:66:f3:a0:60:7b:a2:93:fe:
f5:db:b5:f4:15:95:35:da:52:ee:e8:b4:61:11:c7:94:08:f5:
17:d0:15:ab:ad:dc:2f:4b:90:6f:35:be:17:87:9c:9a:f4:8a:
b2:c0:c5:22:f7:25:7b:e2:a5:35:54:e2:7e:af:55:65:5b:b4:
e8:0d:79:53:10:29:ee:eb:44:e4:76:e3:c8:28:28:46:f4:14:
02:c2:3e:fd:3e:f3:ac:a9:a8:a0:06:6d:f1:4d:dc:50:d0:3f:
11:64:0f:56:17:5c:73:24:0c:ab:99:8c:67:32:9e:ca:df:2f:
eb:a6:1f:7f:e5:03:2a:f9:dd:99:5a:28:52:46:08:1c:32:08:
68:14:5c:eb:11:2d:99:2d:22:24:74:4b:c2:bc:f0:cd:91:da:
e3:ca:ff:a4:13:a2:f6:15:ac:1c:eb:cc:c9:56:6e:18:b0:16:
99:2d:ec:6b:84:e7:0f:34:4e:86:38:c7:4a:33:d0:6a:50:27:
53:ef:0d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:44 2024 by rpki-client on console-fra.rpki-client.org