Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/AE_NaThJV-yGIIqDZFCPZ_L6TrE.roa
File: AE_NaThJV-yGIIqDZFCPZ_L6TrE.roa (raw, json)
Hash identifier: gHek5ZA5YtbRQYlU5hTznAb76iRrsnkP0gPnE9C1MYU=
Subject key identifier: 00:4F:CD:69:38:49:57:EC:86:20:8A:83:64:50:8F:67:F2:FA:4E:B1
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018572BA6013DC61EA72BD5AB52AEEF9B316
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/AE_NaThJV-yGIIqDZFCPZ_L6TrE.roa
Signing time: Mon 02 Jan 2023 13:44:54 +0000
ROA not before: Mon 02 Jan 2023 13:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16125
IP address blocks: 213.252.248.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:60:13:dc:61:ea:72:bd:5a:b5:2a:ee:f9:b3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jan 2 13:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=004fcd69384957ec86208a8364508f67f2fa4eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1a:ee:aa:ae:1b:17:b5:19:ee:1f:6f:91:3a:
a9:c1:f5:d8:45:e7:d5:3a:f5:70:18:91:73:14:1f:
bd:46:3c:ad:fb:36:17:89:2b:3c:3e:f1:c6:0d:e0:
4c:70:2e:54:bc:5c:4a:0c:75:07:2f:f5:70:b3:5a:
7f:a6:50:02:00:dd:54:0f:2a:09:10:22:73:fd:b5:
3e:07:c7:89:fa:41:f2:87:8e:1f:92:a0:d4:c2:21:
11:82:e6:06:88:95:9c:b7:6d:fb:3b:ac:41:8a:2a:
8c:37:c5:70:56:75:01:a6:bc:6f:08:a5:53:d2:83:
81:30:98:f6:17:06:b4:9a:bc:39:21:a7:60:50:a9:
b4:c2:aa:f9:fb:25:dd:21:e2:af:45:65:5a:ba:8f:
57:c8:87:1b:35:c5:3b:87:3e:9d:35:a3:4c:29:b9:
e2:c3:ca:b6:e3:f7:51:e3:a6:27:e9:96:2a:e1:5e:
1b:49:a9:6b:83:fd:27:87:dd:e6:02:34:3f:8a:6c:
df:97:e1:7e:cb:f0:e1:8d:d6:9f:2b:e1:a9:30:b1:
4b:12:0d:73:69:9c:b6:da:6f:b9:0d:fd:6b:88:e3:
96:7f:d6:95:e7:ac:a4:bd:51:0b:3c:7d:56:fe:46:
22:95:8b:79:bb:1f:32:40:fd:25:58:9f:41:e7:f8:
72:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4F:CD:69:38:49:57:EC:86:20:8A:83:64:50:8F:67:F2:FA:4E:B1
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/AE_NaThJV-yGIIqDZFCPZ_L6TrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.252.248.0/23
Signature Algorithm: sha256WithRSAEncryption
62:b7:bd:f7:49:4a:31:b6:4f:79:c9:e2:62:d3:3f:d3:39:86:
a9:c8:15:80:15:5d:3f:25:45:d3:1f:73:5f:1e:95:e9:f9:15:
7b:ba:9a:9c:b4:ee:43:b7:22:a6:0b:3b:49:8b:38:47:d5:ae:
30:71:7b:f6:5d:19:81:65:74:b1:5a:e1:c5:eb:e9:53:e4:4a:
01:89:57:72:62:f0:97:28:2e:d9:96:12:3d:86:45:7e:c8:04:
48:26:28:39:91:f3:ab:67:53:9c:65:c7:38:80:5b:5f:6c:29:
5b:71:98:03:5b:fe:a7:9c:65:49:d5:89:a5:df:fc:87:4b:4d:
12:93:6a:60:03:cf:01:39:00:28:29:46:31:49:ed:d4:25:83:
3f:ef:3b:87:ce:94:b5:83:05:27:ff:5c:fa:d2:35:af:5a:53:
9f:45:d3:fe:9a:14:e2:86:9c:4c:58:77:97:10:65:4b:22:d4:
02:ce:96:b6:a6:98:26:3f:1a:73:a8:46:e4:9c:66:70:b8:6a:
15:81:53:3e:32:d3:58:eb:cf:91:ae:eb:d5:67:4c:b2:d9:05:
7c:0e:a5:4f:b8:41:77:e4:ff:a8:b9:fa:a6:75:9c:59:1e:42:
c5:ce:a5:a2:dc:75:b4:4a:b1:2e:10:d8:3d:b1:2f:dc:f4:e1:
30:0f:5a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:46 2024 by rpki-client on console-fra.rpki-client.org