Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/fme4banS9riLthlPN-KtDy_S8-Q.roa
File: fme4banS9riLthlPN-KtDy_S8-Q.roa (raw, json)
Hash identifier: EUpXka8GixB+/fQ+nlezbcU5lsiZ63TVNS88aL6ih8s=
Subject key identifier: 7E:67:B8:6D:A9:D2:F6:B8:8B:B6:19:4F:37:E2:AD:0F:2F:D2:F3:E4
Certificate issuer: /CN=4c61d118479b5222ef0f864167cac5b4c07cc219
Certificate serial: 01856CE62F4B1837E6A136B2AEED78ED40FC
Authority key identifier: 4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/fme4banS9riLthlPN-KtDy_S8-Q.roa
Signing time: Sun 01 Jan 2023 10:35:02 +0000
ROA not before: Sun 01 Jan 2023 10:35:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196858
IP address blocks: 213.5.200.0/21 maxlen: 21
2001:67c:188c::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:2f:4b:18:37:e6:a1:36:b2:ae:ed:78:ed:40:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c61d118479b5222ef0f864167cac5b4c07cc219
Validity
Not Before: Jan 1 10:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e67b86da9d2f6b88bb6194f37e2ad0f2fd2f3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:47:4b:1e:8e:48:f2:b6:fd:fc:c3:6f:22:16:
fe:24:92:23:49:c8:86:bc:f8:a6:20:ed:29:28:77:
78:20:2d:63:04:e5:6e:ed:1f:5c:85:91:8d:dd:81:
7e:9a:2a:27:3b:d5:60:a3:59:21:dd:f5:d6:e7:65:
57:96:0c:27:8b:e1:72:90:fb:41:71:6e:89:49:8a:
4f:ad:22:78:a9:92:d4:8d:a9:4f:65:a3:17:14:23:
be:a6:83:a6:04:80:25:c8:fe:7f:fd:3b:57:25:81:
69:3b:fb:5c:89:af:4b:02:14:af:2f:d9:e0:41:b9:
0e:93:5c:83:8b:73:9d:04:3b:36:a4:28:a7:b3:9e:
21:75:d9:a3:9e:96:21:8a:05:c2:8b:66:0c:98:74:
72:d9:0a:1b:9e:4b:0f:c8:4a:0b:37:23:9b:1a:56:
f3:9c:eb:1d:33:68:1d:26:8a:c0:dd:06:9f:5b:77:
62:90:0b:6c:e0:82:35:7a:a9:38:f7:30:fd:2e:a2:
3e:c3:30:19:53:a1:98:3b:f3:07:26:66:a1:0f:7b:
89:dc:c2:f1:fd:96:cf:51:2f:a8:44:77:09:aa:1f:
58:00:7e:bd:2b:01:5c:b7:47:c0:db:25:f0:b1:82:
b0:f5:28:5f:15:a3:0b:3f:d2:a0:8c:6d:cb:51:59:
6d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:67:B8:6D:A9:D2:F6:B8:8B:B6:19:4F:37:E2:AD:0F:2F:D2:F3:E4
X509v3 Authority Key Identifier:
keyid:4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/fme4banS9riLthlPN-KtDy_S8-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.5.200.0/21
IPv6:
2001:67c:188c::/48
Signature Algorithm: sha256WithRSAEncryption
94:75:ca:1a:d0:42:10:73:be:9e:01:05:9c:28:4c:a1:5b:5d:
42:4c:6b:38:1d:1b:66:74:b2:9d:b5:6a:43:9c:8a:46:ae:46:
fe:14:cf:ed:65:21:5e:74:78:c3:94:64:95:79:fd:fc:b4:2a:
41:0d:31:e6:29:93:1f:3d:d8:b7:ac:8a:64:8e:13:66:2c:c6:
c1:7e:2a:71:03:89:d3:23:4e:b3:43:d5:48:d6:e1:22:dd:80:
10:cd:64:9d:b0:61:b0:c1:7c:1b:6b:9f:90:3f:64:fc:ac:63:
64:70:a5:9f:75:d4:78:00:31:5c:13:4d:43:5e:78:1c:f8:14:
21:00:48:c8:d9:ac:7c:64:7b:27:c3:57:50:45:dd:c0:9e:88:
10:95:da:67:7a:e1:d1:f2:83:32:9b:25:37:08:90:0b:34:68:
97:52:15:63:b2:b5:54:2d:3a:e5:d8:d0:44:87:c3:da:5f:f2:
ef:5d:49:a7:0e:64:28:eb:4b:e5:88:5b:40:b5:58:13:b3:aa:
b8:7c:aa:b1:3e:57:4c:f7:f9:15:a0:6e:59:dd:4d:9b:7a:98:
3d:40:88:9f:b8:f5:94:d3:5d:26:aa:f2:a0:87:17:d7:57:8f:
4a:2c:6e:58:cf:81:0f:0a:38:82:05:cb:6b:e5:51:16:e6:dc:
0a:4a:94:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:56 2024 by rpki-client on console-fra.rpki-client.org