Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7a13c8-2223-4aa4-8094-964111a9eb22/1/2vYamTE-ZsJoHUdr1E-D266NsoE.roa
File: 2vYamTE-ZsJoHUdr1E-D266NsoE.roa (raw, json)
Hash identifier: n4HWRXM0ZUnYg2dDR+9oAjiUQELJzYhYtwFTjYpn+kA=
Subject key identifier: DA:F6:1A:99:31:3E:66:C2:68:1D:47:6B:D4:4F:83:DB:AE:8D:B2:81
Certificate issuer: /CN=4e9381160d6594049a313a5b7bd531628d7dde1b
Certificate serial: 018C72989BA2A2C474EB65C22F4870B34ECE
Authority key identifier: 4E:93:81:16:0D:65:94:04:9A:31:3A:5B:7B:D5:31:62:8D:7D:DE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TpOBFg1llASaMTpbe9UxYo193hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/7a13c8-2223-4aa4-8094-964111a9eb22/1/2vYamTE-ZsJoHUdr1E-D266NsoE.roa
Signing time: Sat 16 Dec 2023 12:27:33 +0000
ROA not before: Sat 16 Dec 2023 12:27:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48937
IP address blocks: 213.5.174.0/24 maxlen: 24
213.5.175.0/24 maxlen: 24
213.5.174.0/23 maxlen: 23
213.5.173.0/24 maxlen: 24
213.5.170.0/24 maxlen: 24
213.5.172.0/23 maxlen: 23
213.5.171.0/24 maxlen: 24
213.5.168.0/24 maxlen: 24
213.5.172.0/24 maxlen: 24
213.5.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:72:98:9b:a2:a2:c4:74:eb:65:c2:2f:48:70:b3:4e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9381160d6594049a313a5b7bd531628d7dde1b
Validity
Not Before: Dec 16 12:27:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=daf61a99313e66c2681d476bd44f83dbae8db281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:04:e3:ec:a0:89:9e:05:5b:08:ed:2a:b2:
1b:e1:28:12:32:a4:de:47:45:03:27:c1:fb:92:ec:
cc:06:d3:e2:a3:2c:66:7d:b2:05:65:86:cf:c6:33:
33:c8:96:f3:16:48:3b:2e:d0:ea:07:23:df:d1:59:
72:40:b9:bf:d0:39:10:59:b2:c4:1a:27:c9:71:a0:
2a:52:87:ef:c5:46:cf:d4:7d:12:42:5e:6b:14:a0:
b2:25:b7:c0:a5:55:4e:12:82:e9:97:ad:e6:7a:e0:
57:9c:c3:a2:ee:a0:69:b9:70:6b:ff:a8:cf:81:f5:
52:01:e1:cb:20:09:d2:49:0d:9f:dd:8f:1b:59:5e:
28:ed:f8:03:a8:21:72:7e:77:67:76:6d:e7:89:b9:
33:6f:dc:e2:d1:2c:1b:c5:f0:0d:57:4b:bb:f1:be:
30:5f:63:4a:78:45:c6:4e:a7:fb:e2:35:b8:f9:01:
2f:7b:b8:4e:b2:1b:af:3b:a5:0b:ee:4d:3c:70:1e:
5b:ba:5f:08:0e:b9:18:c0:ab:77:15:21:cc:f5:22:
93:60:44:f3:13:4e:25:16:65:b6:6b:79:14:25:08:
6a:60:22:90:c1:e9:d6:bb:0c:ca:ff:ae:e5:6c:1a:
a2:26:71:c5:65:fb:a5:05:73:c6:90:58:cc:f8:98:
37:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F6:1A:99:31:3E:66:C2:68:1D:47:6B:D4:4F:83:DB:AE:8D:B2:81
X509v3 Authority Key Identifier:
keyid:4E:93:81:16:0D:65:94:04:9A:31:3A:5B:7B:D5:31:62:8D:7D:DE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TpOBFg1llASaMTpbe9UxYo193hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7a13c8-2223-4aa4-8094-964111a9eb22/1/2vYamTE-ZsJoHUdr1E-D266NsoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7a13c8-2223-4aa4-8094-964111a9eb22/1/TpOBFg1llASaMTpbe9UxYo193hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.5.168.0/21
Signature Algorithm: sha256WithRSAEncryption
cb:b6:08:71:1b:20:d7:fd:9a:c2:0a:ac:7a:57:7c:d2:ca:a6:
70:68:81:0a:7a:99:99:8d:2f:00:b3:73:b3:96:db:9d:49:8b:
3b:93:fc:4d:a5:b8:51:14:57:0e:e9:87:9d:a3:d6:98:31:0a:
70:cb:50:24:d9:55:17:9e:7b:12:12:f1:50:8b:15:1a:bb:e5:
c9:de:91:5f:48:37:b0:17:9a:49:39:1f:af:98:5c:3c:98:43:
54:3d:e3:a8:0b:5c:86:30:6b:3b:5b:16:13:eb:03:15:bb:b0:
c6:c4:10:a6:f1:c3:8e:4f:08:7b:0a:79:25:81:7d:6a:2d:5d:
e8:92:0b:92:0b:d6:eb:5c:04:36:a1:3c:74:42:2b:fc:89:6d:
09:69:ae:ee:c5:69:0b:ca:3a:c6:b4:86:7c:bf:c8:be:dd:9f:
35:d2:8b:36:8d:77:4a:bf:3d:bf:65:7f:a9:b8:3b:b2:7c:25:
cd:65:4b:39:a5:48:5e:45:fc:8b:e7:c5:a5:0a:b1:e1:c5:0e:
37:61:a1:b5:02:97:17:c9:88:b2:0a:d8:76:fd:b2:30:8e:1d:
9b:c7:03:80:67:75:d8:12:68:78:73:7f:65:a5:7c:54:39:73:
73:ab:47:d1:51:29:39:46:d4:85:15:b8:25:98:8d:1d:2b:b0:
5f:73:f8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:04 2024 by rpki-client on console-fra.rpki-client.org