Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/9lJfjF_J1CbwM09BuovndEREwV0.roa
File: 9lJfjF_J1CbwM09BuovndEREwV0.roa (raw, json)
Hash identifier: Sy5u135EZffA97zIyZFnQ0UnwQ7LDFDvPU2Z6Q7pd/g=
Subject key identifier: F6:52:5F:8C:5F:C9:D4:26:F0:33:4F:41:BA:8B:E7:74:44:44:C1:5D
Certificate issuer: /CN=634d6eec403eff86b40f9c598091dd4302a9a721
Certificate serial: 0187C571C94581D86D2923444FB029A7E352
Authority key identifier: 63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/9lJfjF_J1CbwM09BuovndEREwV0.roa
Signing time: Fri 28 Apr 2023 01:19:41 +0000
ROA not before: Fri 28 Apr 2023 01:19:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 185.216.13.0/24 maxlen: 24
2a13:6300::/32 maxlen: 32
2a13:6301::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 23 Aug 2023 09:45:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c5:71:c9:45:81:d8:6d:29:23:44:4f:b0:29:a7:e3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=634d6eec403eff86b40f9c598091dd4302a9a721
Validity
Not Before: Apr 28 01:19:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6525f8c5fc9d426f0334f41ba8be7744444c15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c1:ce:39:63:fe:ee:b9:ce:27:9c:65:d2:6b:
a2:af:57:e4:d2:ab:3b:32:d0:e4:3e:be:b3:78:81:
6d:ca:a1:80:cc:b1:98:87:fc:9f:19:b1:cb:1d:54:
3e:3c:c6:96:d3:70:f4:1a:a0:d5:55:44:24:cb:a4:
5c:9b:75:ea:67:18:0d:4b:0e:4b:9a:f3:17:a6:4f:
7c:38:98:cc:e8:60:7e:c1:25:0c:d5:4c:72:69:b6:
ee:6b:6f:9b:ad:ea:e9:cf:7e:11:32:a3:78:aa:cf:
f8:60:6e:50:23:99:dd:6a:47:16:e7:d1:67:61:49:
83:02:39:cc:0e:d9:98:c0:ec:bc:d8:75:a3:d6:80:
f9:07:d6:f3:f7:f6:ff:ad:62:1b:63:1d:7b:62:c6:
26:65:8b:c3:b3:e9:84:e2:c0:cd:28:10:f0:b2:cf:
8b:ac:3c:81:51:4f:ed:1e:46:f3:82:43:57:d5:73:
ab:36:74:d2:3a:51:55:b9:eb:78:3e:02:6b:c7:fd:
15:3a:a2:c9:87:3c:a2:a8:0c:25:93:ab:19:6b:98:
32:b5:9f:5f:17:c5:f3:7c:66:68:e7:28:a3:13:c7:
b2:65:0d:e0:50:f9:ee:51:72:78:3c:27:13:bf:ee:
29:33:a0:a4:ac:83:c7:33:dc:64:4e:45:3b:7a:bb:
17:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:52:5F:8C:5F:C9:D4:26:F0:33:4F:41:BA:8B:E7:74:44:44:C1:5D
X509v3 Authority Key Identifier:
keyid:63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/9lJfjF_J1CbwM09BuovndEREwV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.13.0/24
IPv6:
2a13:6300::/31
Signature Algorithm: sha256WithRSAEncryption
01:bc:e0:02:d0:3e:3d:2d:4c:18:5a:68:04:a8:6d:89:84:cf:
95:15:95:8a:fd:6d:44:ea:1d:5f:63:ac:07:df:3d:16:35:e9:
c9:57:eb:de:7b:be:e0:7e:e2:b6:f0:fc:0c:b6:19:9d:63:f7:
b5:85:6c:7b:6e:7d:10:93:43:ff:48:52:2f:9d:ba:2a:ca:95:
db:c5:c0:71:c9:48:b5:8d:e7:2d:94:bd:9f:08:73:00:b5:d7:
00:a8:a3:63:a8:a9:88:85:2f:fd:68:d7:3b:72:20:a6:b1:ab:
a3:f4:c6:e8:a4:57:9e:c1:c9:d0:e5:65:a4:1d:f6:9d:76:d0:
93:b5:fd:f0:6d:a4:e0:ad:21:b8:d1:be:4d:8e:3a:dd:4c:7a:
42:4e:59:78:14:80:fe:bf:f4:a4:62:e6:f5:ed:fc:8e:ba:86:
63:2e:8f:3d:9b:24:28:88:ae:9b:0e:14:8e:ae:c1:8e:c8:a6:
d5:b8:6b:8f:8e:7c:d5:2c:db:4c:14:7f:f2:35:14:68:7e:32:
b5:c1:b6:f7:30:15:cf:f4:03:ed:18:fa:38:cb:b3:08:02:67:
16:f2:ca:7f:75:3a:ec:72:57:84:d8:2e:b3:9c:78:ff:45:9e:
da:d5:6a:b0:ff:d5:d2:4f:aa:66:36:86:4b:d9:e8:b5:02:2a:
89:08:85:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:29 2024 by rpki-client on console-ams.rpki-client.org