Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/91TWzpycK2nchZ6x718gpcY8JG4.roa
File: 91TWzpycK2nchZ6x718gpcY8JG4.roa (raw, json)
Hash identifier: S3jGyr+z5i6sNnYFGCGCroWIcWiVvqRhtlYGkarv4HU=
Subject key identifier: F7:54:D6:CE:9C:9C:2B:69:DC:85:9E:B1:EF:5F:20:A5:C6:3C:24:6E
Certificate issuer: /CN=b1c208a23b2d4d87be93f89d532bc6f44908819b
Certificate serial: 0185723115C16F004DC23F61918C946A4E58
Authority key identifier: B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/91TWzpycK2nchZ6x718gpcY8JG4.roa
Signing time: Mon 02 Jan 2023 11:14:57 +0000
ROA not before: Mon 02 Jan 2023 11:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59848
IP address blocks: 213.109.145.0/24 maxlen: 24
2a11:6ac0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:31:15:c1:6f:00:4d:c2:3f:61:91:8c:94:6a:4e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c208a23b2d4d87be93f89d532bc6f44908819b
Validity
Not Before: Jan 2 11:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f754d6ce9c9c2b69dc859eb1ef5f20a5c63c246e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:bc:98:5e:97:02:a8:c9:3b:8d:0a:a8:b3:
86:07:87:f4:af:52:f8:79:78:94:ed:18:9a:22:41:
b3:49:88:93:0e:12:4d:cc:5d:a2:a3:f0:71:f0:49:
a6:e0:1e:d8:6c:a8:ac:83:7b:f4:b2:a9:25:d6:0d:
c7:7f:4f:f9:9e:c2:92:b5:63:54:0d:0e:1d:5f:93:
e2:07:12:f5:b1:db:1e:63:81:bb:54:13:e5:50:61:
f1:67:21:35:71:9d:37:59:2f:cd:6c:e3:dd:dd:47:
09:74:cd:44:30:f3:3c:e7:38:2a:99:b5:b3:43:d4:
e6:7c:a7:69:36:b1:2a:53:0d:c9:1f:19:3b:7d:2f:
6a:09:16:27:9b:a8:8e:56:49:fb:7b:ac:eb:af:22:
ce:3b:8a:79:d4:c9:08:33:f6:09:0a:c5:96:e6:f9:
cb:05:93:c5:b2:9c:71:83:36:5d:43:cc:d0:3d:b5:
29:1a:2f:b3:20:d0:8a:ed:51:42:5e:7e:64:b6:e7:
fa:bd:f6:8f:c2:e8:97:10:27:ae:c5:ba:93:e5:18:
a8:5f:e9:22:b3:b3:79:c8:1b:36:18:86:c0:72:71:
e3:a1:f4:1f:02:66:de:df:3e:e9:24:bf:9b:a3:8b:
3d:c1:0b:44:cd:48:51:07:0d:54:ac:2d:43:d2:04:
ee:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:54:D6:CE:9C:9C:2B:69:DC:85:9E:B1:EF:5F:20:A5:C6:3C:24:6E
X509v3 Authority Key Identifier:
keyid:B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/91TWzpycK2nchZ6x718gpcY8JG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.145.0/24
IPv6:
2a11:6ac0::/29
Signature Algorithm: sha256WithRSAEncryption
51:e5:59:03:a1:74:9c:6c:6d:9f:e5:20:67:24:44:9d:a7:74:
9b:05:3a:5f:20:f7:38:85:46:55:d8:b2:47:7c:9d:db:9f:00:
6c:22:a0:0c:9a:71:17:16:aa:ba:3f:8a:5f:6c:16:df:38:95:
1a:da:ab:ee:77:3b:ca:07:b8:c7:58:88:f7:87:cf:2a:c6:c2:
a0:59:13:9a:c7:76:9a:d3:15:a2:b4:fe:d2:bd:fd:bf:16:2e:
d3:1b:71:3d:0d:53:0e:32:67:59:63:9e:60:cd:8a:bb:24:99:
de:55:7a:68:54:c9:5c:62:16:de:62:33:fb:15:da:24:89:74:
24:a7:5d:65:b9:21:c4:03:ae:b7:73:30:1d:0b:c9:a4:58:f2:
9a:1d:06:99:e7:d8:42:22:af:0e:31:d5:b6:45:92:e1:64:c9:
30:50:97:cf:9c:90:18:f6:ee:1c:e2:06:95:b7:70:50:e3:02:
fe:e1:14:3f:fc:c2:94:4c:d8:57:b2:1c:eb:97:7f:1d:f1:3f:
42:2d:4d:fe:1e:94:05:dc:25:a7:33:89:32:e7:7e:dd:8f:48:
fd:2a:d7:bc:e8:3e:7c:85:8a:c4:c0:91:48:76:b9:47:8e:39:
b9:7e:65:b9:72:4a:de:df:0f:2e:1e:2f:ad:72:8c:7e:a1:d0:
47:2f:94:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:23 2024 by rpki-client on console-ams.rpki-client.org