Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/sq4-pLd5HsvlRoWC8CKDLoZLeEI.roa
File: sq4-pLd5HsvlRoWC8CKDLoZLeEI.roa (raw, json)
Hash identifier: yGwFI3IMvd0Co3IwOJZw8LbXz0n2VY1V2DWN9OgnhSk=
Subject key identifier: B2:AE:3E:A4:B7:79:1E:CB:E5:46:85:82:F0:22:83:2E:86:4B:78:42
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01856F5DCFC78A449F55F8EFDCDB73C691FD
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/sq4-pLd5HsvlRoWC8CKDLoZLeEI.roa
Signing time: Sun 01 Jan 2023 22:04:57 +0000
ROA not before: Sun 01 Jan 2023 22:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201759
IP address blocks: 213.33.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:cf:c7:8a:44:9f:55:f8:ef:dc:db:73:c6:91:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 1 22:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2ae3ea4b7791ecbe5468582f022832e864b7842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:09:f0:3f:2e:fd:14:9e:37:bc:c1:d3:9c:
f4:b5:d7:f4:54:fc:7b:f6:13:b6:02:18:71:46:18:
55:7b:74:e6:9a:e4:6b:cf:af:d9:2a:60:9c:d6:2f:
76:67:d6:09:aa:36:e3:90:0c:58:4f:a9:f7:e6:f8:
2a:22:b0:3d:35:82:0b:72:18:44:97:fa:23:48:60:
bf:e9:b4:a3:b9:fa:49:22:02:0f:c5:29:b8:cc:2b:
19:40:e7:4b:d0:d3:20:aa:18:14:89:cb:08:12:82:
d3:8a:8d:92:08:78:f5:f8:9a:fc:34:2d:eb:11:dd:
16:25:89:ca:1a:17:57:3e:81:ca:27:c4:71:8c:95:
b4:cd:54:2e:ca:cc:64:7e:fa:01:ca:e1:f2:20:df:
08:36:e5:45:de:b0:a3:80:cb:3c:e8:ac:e1:11:a2:
36:43:8d:86:b1:e7:7a:78:7a:00:73:c7:9a:c1:a1:
ae:23:66:31:55:fa:48:c6:0f:43:29:11:f7:24:d6:
de:98:d0:71:2f:31:08:15:a2:a1:95:af:1a:c4:00:
dc:dd:a3:06:41:64:df:64:4d:dd:d1:1f:82:08:87:
87:31:b6:b8:c8:57:e1:88:e2:72:f8:8b:60:22:03:
4f:67:25:d0:d6:80:07:3d:67:c1:9e:c8:d0:17:6e:
82:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AE:3E:A4:B7:79:1E:CB:E5:46:85:82:F0:22:83:2E:86:4B:78:42
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/sq4-pLd5HsvlRoWC8CKDLoZLeEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.33.100.0/24
Signature Algorithm: sha256WithRSAEncryption
11:95:6a:1a:05:78:d3:c7:3c:84:00:67:f1:89:fa:e1:49:c7:
25:ad:fc:cb:4d:b3:00:d7:65:11:53:59:7b:6a:75:b6:ce:c6:
2d:7f:74:65:5c:4b:bc:3d:df:3b:92:e5:2c:ce:fd:03:a7:e2:
78:21:09:55:45:7e:ab:d9:f8:5f:ca:36:9a:d1:ba:ca:49:3b:
6f:9c:22:02:bc:25:c3:b1:9b:9c:b7:b3:28:b7:1d:14:5d:08:
d9:81:71:3d:89:a3:0e:43:80:da:f6:e0:81:2d:30:a7:e0:25:
f6:65:e2:48:35:2f:a5:ae:6a:97:9f:c4:cc:c0:c2:ad:1d:92:
1b:e6:48:d0:95:a4:b4:00:83:f9:e0:a8:03:d9:16:4a:14:d7:
26:45:df:28:f1:7a:89:a8:db:3a:0e:44:87:2e:6a:4d:6d:5e:
ab:17:e2:f3:a0:f9:59:ef:e8:83:29:67:2d:67:80:66:d2:ea:
16:7d:04:56:de:1a:7b:0a:a0:ff:24:e9:ac:91:dc:a8:20:3f:
8f:05:c9:20:3c:2d:bb:97:43:e5:ca:3f:ed:ab:c6:9a:de:ae:
85:7e:c9:fb:7b:d7:8c:e1:57:d1:cc:72:d8:25:7c:8a:bb:a6:
72:6d:98:4b:a7:5f:fa:99:a1:ed:8c:0b:d5:f5:90:42:59:0e:
5e:37:25:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:16 2024 by rpki-client on console-ams.rpki-client.org