Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/JD6Mw63-oYjrmyJ9naUGuVK7ztM.roa
File: JD6Mw63-oYjrmyJ9naUGuVK7ztM.roa (raw, json)
Hash identifier: 0dcjBsqa34ylXVfQzW8BuQTtPg5t2V3zoJ4Rkg/du+4=
Subject key identifier: 24:3E:8C:C3:AD:FE:A1:88:EB:9B:22:7D:9D:A5:06:B9:52:BB:CE:D3
Certificate issuer: /CN=aba835d060176ee8160c7930f87e693559090d78
Certificate serial: 01856ECBA312F4C8BE2ABA95CD27153EFED6
Authority key identifier: AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/JD6Mw63-oYjrmyJ9naUGuVK7ztM.roa
Signing time: Sun 01 Jan 2023 19:25:17 +0000
ROA not before: Sun 01 Jan 2023 19:25:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9135
IP address blocks: 213.164.128.0/19 maxlen: 19
213.164.137.0/24 maxlen: 24
213.164.138.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:a3:12:f4:c8:be:2a:ba:95:cd:27:15:3e:fe:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba835d060176ee8160c7930f87e693559090d78
Validity
Not Before: Jan 1 19:25:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=243e8cc3adfea188eb9b227d9da506b952bbced3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a4:76:91:43:18:71:45:4e:f3:22:b1:1f:f6:
29:87:45:a7:f5:20:9d:69:c4:18:5a:ad:45:1b:15:
6c:4d:d9:ca:e1:9b:4e:d0:af:70:58:67:f4:b1:5d:
56:5a:ff:ab:85:2f:b5:2d:46:68:e9:65:32:52:85:
bd:a8:72:bb:b6:ca:c6:2a:be:07:f0:cb:c1:c6:2f:
ad:77:d4:f7:e4:80:1e:d2:4e:71:7e:59:30:40:78:
eb:91:cb:c7:b7:ae:d6:d5:df:1f:0f:c1:34:ba:8a:
21:f6:f2:9c:6f:9b:4b:43:bc:c9:0c:18:5b:0b:0a:
b4:f6:5f:7e:7c:bb:ba:79:c6:ab:d8:e2:cb:b1:7e:
cf:65:dd:9d:cd:a5:38:11:9b:bd:27:bb:19:48:7d:
b5:a6:03:98:e0:62:bd:9d:4e:9d:7f:90:5b:ac:e5:
96:c8:4b:5c:e1:4a:fd:da:99:05:26:33:c4:e2:49:
12:a7:d3:91:55:66:ae:76:78:43:45:04:5e:2e:08:
14:b5:52:5a:64:5a:71:40:ae:4b:9c:57:f2:a5:9a:
a7:07:3c:f3:db:af:ec:6b:00:f3:73:6c:24:b6:29:
9b:76:56:71:b7:1b:a3:23:b1:cf:a1:ee:7d:ed:4f:
bd:2a:c6:cf:07:fd:ed:90:e5:07:74:18:39:73:f8:
a4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3E:8C:C3:AD:FE:A1:88:EB:9B:22:7D:9D:A5:06:B9:52:BB:CE:D3
X509v3 Authority Key Identifier:
keyid:AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/JD6Mw63-oYjrmyJ9naUGuVK7ztM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.164.128.0/19
Signature Algorithm: sha256WithRSAEncryption
38:dd:fe:e3:0d:9a:3a:69:b2:b7:72:8b:05:ae:43:44:c5:81:
6a:a1:07:ba:04:74:0f:a6:05:e5:98:7a:4e:0d:28:32:62:dd:
83:bf:47:86:0c:31:4f:63:78:39:09:ed:2d:97:79:35:d2:a9:
71:26:31:f3:df:f0:05:8e:a2:d6:36:be:26:88:ef:76:a6:bc:
08:92:34:bd:0c:ab:d7:d4:20:49:84:97:cb:3d:34:3a:bb:dc:
87:1e:90:6a:ce:7e:06:c4:46:5b:b8:13:e0:aa:56:8c:3d:60:
5f:32:a1:ef:c5:73:85:1d:87:ac:5f:0c:cd:5c:1d:44:d0:14:
c4:fe:91:72:f3:22:cd:d0:17:21:58:fb:6b:90:2c:41:9d:86:
ed:e5:79:83:99:a3:bd:0d:41:58:c6:7a:cc:60:14:00:db:2a:
9d:4f:6e:78:49:e6:12:01:f9:45:40:d3:a7:ee:c6:b9:49:dd:
ce:67:02:cc:83:44:18:d4:f0:2d:db:b2:f3:db:c2:de:ac:fb:
1e:f1:2c:1f:26:85:0d:f1:20:38:64:51:97:8e:39:67:be:45:
01:ba:be:dd:6c:31:78:6d:c6:46:d9:76:29:e2:67:2b:ce:73:
cd:98:fc:a0:18:23:61:76:f1:2a:44:40:e7:1d:c9:1f:2d:f4:
b2:08:95:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:04 2024 by rpki-client on console-fra.rpki-client.org