Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/jaSkauIjWyyDboqCYmpmBDDnPWk.roa
File: jaSkauIjWyyDboqCYmpmBDDnPWk.roa (raw, json)
Hash identifier: Qp7Sec/JogqIpBuzc1SDDoL507ZUh7GimdBkzbR83+g=
Subject key identifier: 8D:A4:A4:6A:E2:23:5B:2C:83:6E:8A:82:62:6A:66:04:30:E7:3D:69
Certificate issuer: /CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Certificate serial: 018A699725E8BD3A90EFE80F9F30FED4013B
Authority key identifier: CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/jaSkauIjWyyDboqCYmpmBDDnPWk.roa
Signing time: Wed 06 Sep 2023 08:23:47 +0000
ROA not before: Wed 06 Sep 2023 08:23:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208506
IP address blocks: 213.178.136.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 08 Sep 2023 21:12:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:69:97:25:e8:bd:3a:90:ef:e8:0f:9f:30:fe:d4:01:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Validity
Not Before: Sep 6 08:23:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8da4a46ae2235b2c836e8a82626a660430e73d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3a:74:25:2f:5e:46:f3:be:47:b4:4e:ed:8f:
4f:0f:2e:22:5b:d0:45:7a:b3:a7:8c:6f:96:e2:63:
2e:e7:5e:60:cb:4d:10:32:98:8b:1e:2a:7d:c6:22:
89:ed:07:b9:45:a4:f1:c6:2b:85:c2:ec:f7:48:97:
e7:79:ec:be:3c:b0:d0:d0:5a:99:01:4a:9f:4d:7f:
c5:e5:a2:8f:b6:3d:5a:75:3a:e7:06:96:8f:63:f5:
48:1c:31:95:e8:3a:b1:71:64:19:a8:1b:1c:1b:9f:
58:df:f1:3f:70:0f:69:b7:ff:23:ac:a8:22:5a:91:
9b:0e:97:04:74:a7:9b:ee:ca:1f:5d:8b:54:04:01:
2e:36:d2:5b:51:4a:33:d2:d0:05:e9:92:89:bf:1d:
a5:64:35:a7:43:54:1d:86:81:8d:c5:03:40:ad:be:
92:6f:49:bf:f7:d6:e0:55:2e:09:27:b6:b4:cc:f0:
9e:32:2c:59:1d:dd:cb:c5:e7:d1:2d:05:43:d8:c2:
b7:4c:1a:10:50:3a:49:e5:67:8a:98:7e:cf:65:ab:
15:00:cd:c1:9e:d8:40:b3:88:af:de:42:76:d4:10:
c3:bb:01:64:bf:88:58:d5:3d:55:c9:56:35:8a:9a:
2c:65:89:71:0a:09:67:98:3c:a1:4e:4e:82:e8:8a:
4a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A4:A4:6A:E2:23:5B:2C:83:6E:8A:82:62:6A:66:04:30:E7:3D:69
X509v3 Authority Key Identifier:
keyid:CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/jaSkauIjWyyDboqCYmpmBDDnPWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.178.136.0/22
Signature Algorithm: sha256WithRSAEncryption
96:a2:5b:7a:aa:2d:73:c3:6e:86:05:88:0e:18:48:85:39:53:
72:ea:b2:dd:2f:1a:6a:1f:fe:c6:af:64:a2:2c:cc:a0:df:a6:
f1:b8:16:d1:31:09:5b:63:f7:37:62:06:ec:a6:3d:b2:9d:36:
12:fe:52:3d:70:76:fa:81:4a:19:43:a5:ad:19:d4:2c:b5:0b:
33:a6:da:73:dd:50:2b:b9:58:c7:fa:ce:24:aa:ce:3d:6a:49:
76:4a:69:0a:61:71:c8:64:e3:83:1a:02:83:d9:82:d3:3a:eb:
a9:00:92:5d:d4:6a:b4:45:06:ba:b3:92:df:52:db:e3:de:4b:
45:af:e7:25:04:40:c9:af:d2:f3:d8:1a:e8:ca:95:2d:e8:cd:
89:56:b7:c1:cb:8a:ac:97:a5:79:51:4a:81:c2:48:db:e1:9c:
0e:52:9a:f9:fe:a7:74:8f:67:db:37:75:db:d8:50:d2:b4:0b:
0d:ff:8d:d4:d4:0b:14:5b:75:24:67:7e:60:23:e7:1e:af:66:
4d:ad:cc:5d:90:02:82:ec:6c:20:0a:22:ee:b3:33:a9:e0:0d:
37:be:81:82:45:7f:54:a4:8a:50:9d:4a:e3:79:93:e4:f3:91:
e3:d5:9e:cf:36:9f:b0:8c:4b:79:8c:ad:b8:17:b8:c5:92:a0:
8b:2a:f4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:28 2024 by rpki-client on console-fra.rpki-client.org