Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/8c97fe-3f8c-4db4-ab93-752d81cdda40/1/s-Ed9SMXXNrG8hCbPQ0i0NJ5lvk.roa
File: s-Ed9SMXXNrG8hCbPQ0i0NJ5lvk.roa (raw, json)
Hash identifier: v7za3l1oJ3z1Snd9ej9DsxEs3JwrA8mY+772qM05EWI=
Subject key identifier: B3:E1:1D:F5:23:17:5C:DA:C6:F2:10:9B:3D:0D:22:D0:D2:79:96:F9
Certificate issuer: /CN=fbf43fe9fd3af2bcf4ba7a83f111e6559125f3fd
Certificate serial: 01856E8B11761FC569E5161D36042CCEAE06
Authority key identifier: FB:F4:3F:E9:FD:3A:F2:BC:F4:BA:7A:83:F1:11:E6:55:91:25:F3:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_Q_6f068rz0unqD8RHmVZEl8_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/8c97fe-3f8c-4db4-ab93-752d81cdda40/1/s-Ed9SMXXNrG8hCbPQ0i0NJ5lvk.roa
Signing time: Sun 01 Jan 2023 18:14:45 +0000
ROA not before: Sun 01 Jan 2023 18:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43366
IP address blocks: 213.109.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:11:76:1f:c5:69:e5:16:1d:36:04:2c:ce:ae:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf43fe9fd3af2bcf4ba7a83f111e6559125f3fd
Validity
Not Before: Jan 1 18:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3e11df523175cdac6f2109b3d0d22d0d27996f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a4:e1:74:6b:b7:ca:67:f6:15:d9:3b:35:eb:
88:2b:eb:5e:09:2d:ff:0a:4c:f3:64:ef:28:62:a0:
0d:75:77:11:fe:fb:9b:4f:c1:4a:a1:c0:e1:d3:94:
2a:be:a7:d1:88:22:85:58:bb:b9:a4:1c:95:81:a4:
3a:10:c5:37:5c:01:92:56:7d:bf:a6:89:31:46:09:
d2:8a:4d:ac:ee:d5:80:5f:10:a1:a6:0e:cb:bf:77:
f3:be:29:d1:67:95:bc:7f:c5:58:80:34:56:42:f3:
e1:ee:75:be:8b:e8:90:ad:5f:58:32:67:33:68:68:
48:c9:11:8d:ae:26:cc:b4:b7:d5:3a:44:dd:cf:8a:
34:b6:b3:7e:0b:c4:8d:53:d6:80:75:c1:f2:20:5a:
67:58:81:f3:5f:7b:40:6a:e3:91:97:55:d8:97:96:
4a:65:93:a3:69:47:b6:93:2e:0a:38:c2:59:ee:1d:
68:a0:7c:b3:dd:1f:3f:ea:64:17:2b:18:bb:9b:a9:
0c:fd:1d:bc:1d:78:8a:ac:d7:c5:df:da:aa:71:95:
8d:7c:59:e2:92:f7:de:36:13:cf:45:e1:07:5a:04:
ef:cd:92:50:e8:42:66:9b:ce:5a:79:99:cd:06:f6:
af:2d:4d:31:11:84:19:50:cf:ea:65:38:59:8f:12:
e9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E1:1D:F5:23:17:5C:DA:C6:F2:10:9B:3D:0D:22:D0:D2:79:96:F9
X509v3 Authority Key Identifier:
keyid:FB:F4:3F:E9:FD:3A:F2:BC:F4:BA:7A:83:F1:11:E6:55:91:25:F3:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Q_6f068rz0unqD8RHmVZEl8_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8c97fe-3f8c-4db4-ab93-752d81cdda40/1/s-Ed9SMXXNrG8hCbPQ0i0NJ5lvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8c97fe-3f8c-4db4-ab93-752d81cdda40/1/1-_Q_6f068rz0unqD8RHmVZEl8_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.150.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:9b:d1:ee:35:7d:81:8e:35:02:48:94:06:a4:b7:f3:aa:6d:
ab:74:46:a8:c3:b3:b6:fd:b7:34:06:48:e4:6c:0a:25:61:65:
87:3e:10:53:2e:ab:43:e8:96:01:db:94:aa:9c:9e:59:87:d8:
a4:3a:77:78:c3:83:f7:8c:d4:f2:0c:ce:1c:fc:b1:52:dc:6a:
67:0d:73:96:b1:47:f0:61:01:e9:e1:47:53:ee:ce:7c:b0:68:
f5:8d:d8:3f:df:b0:24:80:08:68:30:23:9c:15:b6:a5:4f:c8:
e8:0f:87:1a:46:cc:49:af:db:fc:ea:df:06:8a:54:96:1e:d6:
11:13:e5:4f:bf:bb:3c:ae:29:99:7a:92:39:77:f3:e1:2b:3c:
7a:72:9f:a3:87:67:d3:3e:6a:71:6c:0d:36:4c:28:d8:5e:96:
c5:91:be:34:c1:51:57:7f:b2:ab:17:17:2a:f8:9f:81:8c:0d:
f4:95:98:81:3f:1a:b4:2c:66:3f:e1:1a:2e:28:58:0d:07:15:
91:ef:f3:d4:a8:56:0a:01:94:53:26:15:5c:56:8d:55:dd:b8:
0c:07:6d:27:1f:fd:6f:a8:a0:f1:2e:49:60:f0:93:a4:46:48:
ad:d8:5a:62:b7:cd:e4:60:82:a1:1e:a5:88:0c:a9:88:47:c7:
da:34:e7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:29 2024 by rpki-client on console-ams.rpki-client.org