Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/VPU2zU_KK21oUDamn99tX44zOtA.roa
File: VPU2zU_KK21oUDamn99tX44zOtA.roa (raw, json)
Hash identifier: jScoEVlT5Q/S8sGjbbb1AohgDoRHwJcXX4hSnvxiXnE=
Subject key identifier: 54:F5:36:CD:4F:CA:2B:6D:68:50:36:A6:9F:DF:6D:5F:8E:33:3A:D0
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018B373F9592DC7923E66D9465E140B81A6D
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/VPU2zU_KK21oUDamn99tX44zOtA.roa
Signing time: Mon 16 Oct 2023 06:49:55 +0000
ROA not before: Mon 16 Oct 2023 06:49:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202085
IP address blocks: 213.252.216.0/22 maxlen: 22
213.252.222.0/24 maxlen: 24
213.252.221.0/24 maxlen: 24
213.252.210.0/23 maxlen: 24
213.252.211.0/24 maxlen: 24
213.252.212.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:37:3f:95:92:dc:79:23:e6:6d:94:65:e1:40:b8:1a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Oct 16 06:49:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54f536cd4fca2b6d685036a69fdf6d5f8e333ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8e:30:23:b7:5a:62:26:a9:e2:e8:3f:70:22:
6a:97:c4:09:b5:14:4f:55:f8:a8:a2:ef:0f:fc:a3:
ec:45:37:17:7c:34:2b:fc:be:73:ef:be:69:4f:44:
da:da:11:11:f8:b4:ea:de:96:5f:7c:71:a5:bf:5a:
da:06:75:ff:df:00:2b:1d:5a:e5:5f:aa:03:c0:40:
7f:72:4b:8f:5e:39:0d:62:f8:09:09:46:78:7c:f4:
fa:88:21:27:ee:93:46:05:86:1c:f8:28:dc:dc:dd:
48:5f:1b:34:81:c8:56:cc:da:32:27:49:be:50:ed:
d9:da:ea:e0:31:a9:3d:f9:38:be:68:36:aa:71:e0:
d1:04:20:3f:2b:29:22:51:f7:3c:53:46:f9:ee:fd:
df:10:9f:ed:11:5a:d5:0d:cc:77:90:2a:a9:af:d8:
21:1b:e6:28:6c:01:f3:b8:48:a8:60:6d:b5:43:df:
7e:d1:41:4e:da:94:9e:77:26:31:2a:f1:72:11:cc:
15:9d:0f:8c:ce:f4:3e:64:67:35:d7:3b:75:04:52:
e3:2d:62:a3:49:6e:23:16:aa:ec:0f:38:7e:ce:4c:
f5:f1:49:fa:fa:cd:6d:c7:92:4e:4b:b5:f7:03:fb:
6e:53:47:dc:89:50:ff:2d:4e:22:27:07:99:65:60:
97:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F5:36:CD:4F:CA:2B:6D:68:50:36:A6:9F:DF:6D:5F:8E:33:3A:D0
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/VPU2zU_KK21oUDamn99tX44zOtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.252.210.0-213.252.219.255
213.252.221.0-213.252.222.255
Signature Algorithm: sha256WithRSAEncryption
1a:3d:53:d3:44:88:f9:c0:3f:74:7c:17:96:64:72:5d:cd:a7:
f7:97:2d:81:7f:79:8d:98:47:e7:d4:dd:15:38:3f:7f:f8:89:
c0:de:b5:24:c6:cb:39:cb:bc:95:66:34:91:39:71:bc:ad:fc:
26:b2:b4:d9:f9:3b:79:93:bf:40:b0:de:e6:03:30:3a:0c:fe:
0a:0c:67:b8:70:8c:18:4f:5e:20:82:69:e8:40:6e:7a:bd:db:
cf:3f:a2:69:00:a9:1a:45:81:8c:24:1a:f7:4f:56:9c:fa:2a:
b2:a2:79:4c:15:d4:dc:55:1f:fb:27:5d:00:ab:d1:82:b2:1f:
6e:ff:f4:01:26:ba:7d:50:61:e2:3f:6e:eb:e1:78:c8:69:b6:
fb:1c:f0:85:15:8d:29:68:9f:6e:ac:1a:0c:ff:8f:9f:17:b6:
ae:f1:73:78:49:6a:7f:4e:4d:88:67:4f:fb:20:28:3d:ff:03:
c0:19:2a:3d:76:51:a6:58:ad:6f:01:e7:08:39:7d:69:4d:9c:
25:62:02:0a:95:53:7c:98:f0:9e:e4:73:05:01:17:f4:d4:b3:
2d:c3:73:54:3b:bf:b0:09:6e:3c:fd:1b:eb:69:41:d3:5e:73:
00:ad:54:17:e8:66:7c:ee:34:e3:2c:ef:a2:5c:0e:b8:a4:89:
a7:b7:12:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:46 2024 by rpki-client on console-fra.rpki-client.org