Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/l_HtRplcCOSvlpOdcfxiBXomRC0.roa
File: l_HtRplcCOSvlpOdcfxiBXomRC0.roa (raw, json)
Hash identifier: XGueIEIswta1TP0ycut0FjZWQrPJ8Vwr0b8WKnqpK5I=
Subject key identifier: 97:F1:ED:46:99:5C:08:E4:AF:96:93:9D:71:FC:62:05:7A:26:44:2D
Certificate issuer: /CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b
Certificate serial: 018692E375F646976EECE36BA0F730C7EE24
Authority key identifier: C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/l_HtRplcCOSvlpOdcfxiBXomRC0.roa
Signing time: Mon 27 Feb 2023 12:40:25 +0000
ROA not before: Mon 27 Feb 2023 12:40:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209848
IP address blocks: 213.184.88.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:e3:75:f6:46:97:6e:ec:e3:6b:a0:f7:30:c7:ee:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b
Validity
Not Before: Feb 27 12:40:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97f1ed46995c08e4af96939d71fc62057a26442d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cc:58:6b:a3:f4:37:48:20:6a:28:02:0d:c8:
89:ad:70:9c:0a:45:89:b1:77:9b:d3:2b:bc:84:32:
54:8d:61:cc:53:1e:f5:0d:cd:57:a7:2d:12:5c:6a:
ea:5b:84:03:9c:0d:65:21:d0:6a:54:14:fe:4c:e1:
97:3f:fb:79:8c:bc:1e:05:30:66:b8:1a:83:15:2d:
75:5f:6a:63:de:77:87:f2:25:3e:cf:87:8d:16:56:
27:89:65:06:55:74:6e:f4:ae:20:7e:09:4b:0a:ee:
bb:42:75:7d:54:c1:88:9f:a6:8d:89:28:fe:1a:db:
b0:22:ec:39:ec:df:d9:41:0b:d8:91:c3:d5:38:fb:
75:08:aa:be:ea:1d:bc:1c:66:cb:a2:52:26:3a:0a:
e6:ea:44:35:90:a4:df:59:01:e4:f7:13:72:d4:22:
99:2d:eb:68:ce:14:f0:91:43:2b:c6:c3:0c:29:78:
6d:e0:e6:29:90:fc:99:c4:97:3e:ef:27:fa:f0:af:
c0:12:1e:7c:f9:73:5a:ca:f3:ac:17:4c:68:b5:16:
2a:2a:46:b6:b6:a2:6f:21:7f:96:f6:73:5b:ec:08:
b5:35:dc:02:9f:28:6c:32:0f:24:2d:f2:2f:2d:09:
50:62:e3:bf:f8:5b:27:32:3c:45:d6:43:98:bf:e9:
56:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F1:ED:46:99:5C:08:E4:AF:96:93:9D:71:FC:62:05:7A:26:44:2D
X509v3 Authority Key Identifier:
keyid:C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/l_HtRplcCOSvlpOdcfxiBXomRC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.184.88.0/22
Signature Algorithm: sha256WithRSAEncryption
21:24:c9:d0:10:0b:9b:3a:0a:fe:16:1f:2d:4b:b6:17:e1:31:
70:20:7f:39:18:a0:40:b4:46:1f:df:7d:97:76:d6:f4:5f:f6:
63:12:b2:b8:dc:ce:7d:2f:80:7f:e3:8b:9e:54:1a:fb:5a:2d:
e3:c6:a7:35:97:30:16:f6:b6:66:5d:21:c6:6c:dc:2a:8b:29:
70:64:73:b7:62:97:43:96:08:ce:18:8b:31:9a:18:1b:29:06:
fb:dd:a2:e7:99:37:b4:81:f2:a6:0e:b5:78:89:f4:f0:07:c9:
f7:79:70:09:aa:7b:d1:bc:3f:22:fe:cb:78:52:a4:8e:5a:26:
de:bb:83:b7:ba:59:21:5f:df:65:c6:f6:f5:33:09:73:3c:a2:
07:2d:bf:32:0c:e5:f8:04:01:46:fa:27:28:f4:c0:3f:7f:5c:
ff:25:24:41:7a:02:98:a4:b9:2a:e5:bd:2e:5c:20:78:b1:93:
0d:92:63:89:4b:d4:66:39:00:10:c4:96:8f:92:c2:52:da:3c:
a4:f7:4a:78:82:e6:d2:d8:49:9f:12:f5:46:37:fb:e1:36:37:
a1:a5:7a:48:5e:4b:31:03:f0:1f:c6:74:a8:95:ce:a1:30:11:
45:46:1d:7e:68:d7:ef:30:0b:f2:12:63:83:cf:a7:75:44:08:
f1:de:40:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:38 2024 by rpki-client on console-ams.rpki-client.org