Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/3d5UEq7rbYqEw8qp2cjyFcx2Mts.roa
File: 3d5UEq7rbYqEw8qp2cjyFcx2Mts.roa (raw, json)
Hash identifier: NwL4HFMBy8QrGcCM9QCAaITzDTpy8xLZQjxWslyw+zQ=
Subject key identifier: DD:DE:54:12:AE:EB:6D:8A:84:C3:CA:A9:D9:C8:F2:15:CC:76:32:DB
Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial: 018B3DEEDE822EE2B68339CAB0FC3799D85B
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/3d5UEq7rbYqEw8qp2cjyFcx2Mts.roa
Signing time: Tue 17 Oct 2023 13:59:06 +0000
ROA not before: Tue 17 Oct 2023 13:59:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15962
IP address blocks: 213.151.246.0/24 maxlen: 24
213.151.248.0/24 maxlen: 24
213.151.192.0/18 maxlen: 18
Validation: Failed, certificate revoked on Wed 18 Oct 2023 11:57:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:ee:de:82:2e:e2:b6:83:39:ca:b0:fc:37:99:d8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
Validity
Not Before: Oct 17 13:59:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddde5412aeeb6d8a84c3caa9d9c8f215cc7632db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:44:bb:a9:2c:30:8a:a6:b9:ab:99:02:95:
fb:ec:8d:78:d2:3f:75:77:42:1f:d4:ce:8c:51:d5:
fa:c3:d2:da:dd:04:1a:cd:b4:8e:d9:f1:5b:71:5e:
2b:b6:b9:f5:7f:3a:9f:d2:b3:19:c8:c3:80:4b:fb:
20:a2:50:e9:00:ba:a3:b1:72:66:d6:83:b2:4d:ce:
6f:c3:e0:ff:eb:0a:b4:c8:fe:c1:ef:90:44:da:a0:
44:3e:ff:14:c3:20:ff:69:26:d8:8e:46:5a:54:18:
79:24:8f:6a:b8:aa:7a:de:af:ed:78:27:cb:9e:89:
aa:b5:6c:2d:34:29:c8:af:b7:31:fb:22:1a:60:8f:
4d:92:c2:1d:dd:0e:cc:28:97:d0:43:e5:f8:a1:87:
94:d4:1b:fc:31:a6:d2:89:e0:52:3c:f1:01:2e:eb:
29:ed:80:ae:41:36:13:8d:47:a8:54:3c:82:50:fb:
a0:55:87:f2:1e:b2:b8:bd:5c:e8:30:41:1e:92:94:
d8:b6:ea:e5:ad:5c:d9:99:b5:7e:c4:9b:30:43:24:
6d:da:d1:7d:dc:2b:95:4c:81:e5:59:ec:25:f0:26:
48:f4:a9:79:fe:5a:0f:93:6e:d2:22:79:84:96:a2:
94:06:98:f2:1e:bf:a7:f8:46:e3:36:e4:21:d9:9f:
f2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DE:54:12:AE:EB:6D:8A:84:C3:CA:A9:D9:C8:F2:15:CC:76:32:DB
X509v3 Authority Key Identifier:
keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/3d5UEq7rbYqEw8qp2cjyFcx2Mts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.151.192.0/18
Signature Algorithm: sha256WithRSAEncryption
6d:2a:b1:79:56:6f:52:67:54:5c:78:f2:fa:c7:2a:40:19:f8:
46:ef:c3:59:12:1b:11:19:7a:7b:12:63:e9:44:cc:cf:9e:ca:
8b:6c:91:66:21:cd:1e:3f:cf:1d:6e:cb:f9:c1:18:1a:06:42:
a7:0a:25:73:db:ec:08:24:7d:0c:c2:07:40:25:e8:5a:6e:12:
49:90:e0:13:de:a5:80:0e:bc:c5:87:1f:8f:d2:8d:f5:b0:11:
2e:22:16:a9:30:85:33:43:fa:c4:91:4e:19:b4:9b:61:b0:8e:
60:0f:3b:c3:5b:7d:fc:65:2d:e9:89:39:e9:c2:ce:49:67:06:
41:d9:5a:2e:49:bd:be:08:a5:b5:cc:f8:5f:22:f4:78:76:4d:
11:87:76:95:80:9d:91:bf:72:43:e3:72:be:30:aa:2f:e6:d7:
4c:b0:97:c2:c5:10:6a:20:f3:de:43:c0:af:ba:7a:c0:be:8c:
47:ca:38:d6:1c:ea:f4:1b:e2:3b:26:08:58:cf:7e:fd:f5:0b:
e5:f6:c6:96:6d:3a:0c:0f:4d:ca:36:a9:a2:18:6b:dc:95:09:
22:d3:dd:97:42:3b:33:8f:28:45:63:38:e3:30:37:d2:a2:dd:
6a:5c:e8:7f:7c:5c:27:4b:e3:02:29:0b:8d:6b:e1:33:20:9e:
a5:af:27:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:26 2024 by rpki-client on console-fra.rpki-client.org