Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/6v5N69ON1tP3ALM6qlzLiOoR2v4.roa
File: 6v5N69ON1tP3ALM6qlzLiOoR2v4.roa (raw, json)
Hash identifier: zRBy9auEHAq2TKT7I3ikkWA5kZDTRvuKy1YkNpLAfU0=
Subject key identifier: EA:FE:4D:EB:D3:8D:D6:D3:F7:00:B3:3A:AA:5C:CB:88:EA:11:DA:FE
Certificate issuer: /CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Certificate serial: 018657741E0953142283F798E890208A8633
Authority key identifier: CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/6v5N69ON1tP3ALM6qlzLiOoR2v4.roa
Signing time: Wed 15 Feb 2023 23:41:13 +0000
ROA not before: Wed 15 Feb 2023 23:41:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 213.156.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:57:74:1e:09:53:14:22:83:f7:98:e8:90:20:8a:86:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Validity
Not Before: Feb 15 23:41:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eafe4debd38dd6d3f700b33aaa5ccb88ea11dafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:7d:72:a9:5d:34:c3:05:1c:90:dc:21:9c:
a8:fc:3c:92:ff:5f:28:dc:0d:d6:e5:9e:95:da:ef:
9e:5a:8a:b2:22:fe:8f:e0:67:de:4f:b8:de:40:65:
0c:35:c2:9f:2a:37:d7:06:92:9b:03:25:de:45:e1:
24:5c:f8:34:44:cf:90:3d:90:40:37:04:d5:08:ce:
25:0b:d0:99:23:59:79:ee:89:94:8b:84:29:7b:e9:
19:d4:8c:96:b5:79:94:93:f8:8e:98:fd:0c:70:e3:
0a:b2:87:b3:f4:94:a7:e6:6b:35:64:69:a8:e0:a6:
1b:db:c8:dc:7c:b9:6a:96:fd:02:1e:6b:af:69:43:
ef:69:2e:74:de:87:69:f9:af:1f:eb:c0:44:45:66:
71:ee:2d:9e:01:fc:d4:7b:11:2e:4b:96:cb:4f:51:
66:dc:9c:9a:c9:18:63:47:31:92:83:22:ed:57:2e:
50:02:4c:03:0b:b2:24:0c:bf:4f:8b:91:a0:a9:e4:
3d:0f:3a:41:1e:e3:ae:d3:80:bf:f7:88:4c:6a:a2:
a8:39:8c:49:94:6a:50:79:07:e4:36:a2:33:71:b3:
ad:a4:34:6d:8c:74:76:4a:e2:7d:3e:5f:76:65:f6:
fc:45:c1:bf:4a:56:75:24:1c:6e:dc:7f:e9:12:8e:
45:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FE:4D:EB:D3:8D:D6:D3:F7:00:B3:3A:AA:5C:CB:88:EA:11:DA:FE
X509v3 Authority Key Identifier:
keyid:CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/6v5N69ON1tP3ALM6qlzLiOoR2v4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.156.248.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:89:27:92:c5:7a:d9:05:0e:43:9d:fa:82:80:6a:08:c5:58:
e9:9a:03:31:ec:b5:2a:a9:41:05:6c:cb:01:26:1c:0a:c9:89:
a1:cb:7f:85:95:6b:3c:f1:12:db:91:ea:7a:85:33:8a:db:db:
60:a6:bd:52:07:e6:1a:84:af:a9:d5:07:ce:9a:7a:ff:6a:ef:
36:e0:bc:fc:89:9d:e7:b5:38:2a:48:90:29:15:2d:4c:53:a7:
55:59:8f:0c:20:7b:80:e9:3d:7a:0d:75:b5:8b:37:a8:0f:d0:
7b:9a:3f:ab:49:d5:70:35:65:1e:7f:e3:22:01:49:23:26:d1:
31:30:08:71:ba:b1:cc:de:68:f6:32:51:3c:2b:8d:d0:80:8c:
47:3e:84:97:3c:1d:7d:32:bf:ae:4f:3b:9f:8d:d5:34:7a:7a:
9b:ae:8f:7c:d2:da:58:0e:07:40:62:34:54:d6:3f:7f:e1:e0:
ef:9e:f0:ed:a8:20:c5:4c:db:9a:29:b6:23:f7:41:06:4d:9a:
21:e1:87:ec:91:43:af:e6:d4:32:23:d0:1b:bd:29:dc:61:fd:
e1:91:fa:8f:c8:23:6a:b2:f1:1f:ce:df:08:a6:bf:f1:52:56:
82:f4:f2:5e:9f:44:78:0c:04:41:ed:89:f5:ad:6d:25:92:07:
90:aa:74:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:59 2024 by rpki-client on console-fra.rpki-client.org