Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/o94AX4djf0UiVO1sVkuPaE4L1IY.roa
File: o94AX4djf0UiVO1sVkuPaE4L1IY.roa (raw, json)
Hash identifier: W8/4uzi7NleIcZZYPGW7jG0+EB6vnId0vyEgh1IJEos=
Subject key identifier: A3:DE:00:5F:87:63:7F:45:22:54:ED:6C:56:4B:8F:68:4E:0B:D4:86
Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial: 018C3A49F5E9575EA146E907A5250F132164
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/o94AX4djf0UiVO1sVkuPaE4L1IY.roa
Signing time: Tue 05 Dec 2023 14:02:54 +0000
ROA not before: Tue 05 Dec 2023 14:02:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 213.222.128.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3a:49:f5:e9:57:5e:a1:46:e9:07:a5:25:0f:13:21:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
Validity
Not Before: Dec 5 14:02:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3de005f87637f452254ed6c564b8f684e0bd486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c2:4f:dd:3d:c5:ce:06:eb:4b:32:19:d0:ed:
b3:4d:18:e0:cd:33:ae:34:07:39:49:e9:50:11:01:
05:22:0d:f9:24:f6:4b:0e:59:3e:68:1f:16:60:9e:
07:f4:35:83:91:c9:cf:a8:4a:11:6f:c1:ef:00:41:
7a:e8:4c:43:73:aa:f9:14:11:cb:47:71:b5:98:fc:
d0:b7:c3:4d:50:fa:0e:5a:dc:8f:26:86:8e:a9:26:
eb:67:a0:1d:cc:04:ae:6e:bb:2a:e0:7d:0d:cd:56:
04:d6:cd:9d:5b:02:5b:f7:81:f5:13:71:86:8b:0a:
20:d5:4e:c2:13:1a:58:90:28:30:b4:0e:6a:99:3c:
36:28:b5:e0:bb:72:16:fb:34:d1:53:11:1a:31:8d:
f3:3c:d3:0f:87:55:12:fd:c4:e3:4b:e8:82:e7:a2:
91:3d:7b:77:66:3e:24:cf:30:7e:d2:b6:87:56:7a:
fc:38:26:a9:7b:13:32:cd:84:f2:f6:62:24:b0:00:
5e:a7:08:c4:35:b8:c1:1c:e4:91:bf:39:1a:00:22:
93:71:56:56:39:5b:82:4a:9e:b0:26:b7:8c:3a:92:
a8:0d:84:40:ba:e7:20:8c:2f:e6:b6:29:a3:2f:78:
d4:f1:b4:b9:a7:c0:1f:fc:33:9c:f8:ef:a3:12:87:
60:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DE:00:5F:87:63:7F:45:22:54:ED:6C:56:4B:8F:68:4E:0B:D4:86
X509v3 Authority Key Identifier:
keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/o94AX4djf0UiVO1sVkuPaE4L1IY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.222.128.0/18
Signature Algorithm: sha256WithRSAEncryption
95:c3:8c:62:bb:10:c4:fd:3a:02:ff:2a:d3:29:9e:ea:8c:b0:
92:6b:51:c3:10:8a:10:97:71:2d:fe:eb:f7:f3:68:78:d3:ea:
a1:3e:73:dd:23:d0:35:02:21:58:85:fd:2b:b9:ef:e5:7d:be:
c2:a6:bb:51:2a:e1:fd:ac:38:2f:39:ad:5b:c8:7c:f6:94:4f:
5e:fe:69:47:6c:ff:ff:dc:46:a5:91:65:f8:58:81:62:4d:6b:
29:bb:45:9c:f2:86:c6:51:4d:e4:48:18:d4:f2:56:ef:3a:2f:
ca:fe:bd:09:79:b3:7c:f7:99:55:91:46:94:ca:83:77:b2:86:
26:a0:f1:84:c9:6c:34:77:5e:86:96:b9:6f:c6:27:33:6b:3f:
e8:3c:ed:e1:db:d0:ab:42:c2:71:2f:b9:cd:8d:48:c4:73:b3:
a9:c4:e1:e4:12:ac:91:44:c2:8f:09:e5:db:5a:b1:2c:35:b7:
5c:74:81:9e:4f:8b:1e:42:4e:43:38:57:91:28:fb:65:3c:f1:
2a:e1:aa:d5:6b:f0:dc:6c:1c:55:45:0e:bd:c3:ab:8b:1c:a0:
35:19:89:b8:79:12:74:6b:53:c3:69:75:22:23:b4:25:50:b2:
3b:ff:c8:ab:62:05:d8:e0:5a:2e:27:aa:12:61:7a:fd:c3:8c:
04:c7:ff:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:06 2024 by rpki-client on console-fra.rpki-client.org