Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/CBLPUGFuB5odLoHUlZODm3xUsi4.roa
File: CBLPUGFuB5odLoHUlZODm3xUsi4.roa (raw, json)
Hash identifier: FXUKVjaaR4WHUbEp6Nl1a/mjPqzP71VU1jVt3JeAomc=
Subject key identifier: 08:12:CF:50:61:6E:07:9A:1D:2E:81:D4:95:93:83:9B:7C:54:B2:2E
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 019340FE553F802B4C8D511B292305D95A45
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/CBLPUGFuB5odLoHUlZODm3xUsi4.roa
Signing time: Mon 18 Nov 2024 20:37:09 +0000
ROA not before: Mon 18 Nov 2024 20:37:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212027
IP address blocks: 213.232.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 10:40:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:40:fe:55:3f:80:2b:4c:8d:51:1b:29:23:05:d9:5a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Nov 18 20:37:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0812cf50616e079a1d2e81d49593839b7c54b22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:89:53:42:c0:bf:e0:7c:43:51:ee:72:c7:76:
ff:c0:6f:98:cf:78:43:4e:d4:42:16:ae:60:83:1e:
cb:8c:14:02:61:3c:a7:13:43:b7:c9:4e:9a:d9:7a:
55:1a:c3:f7:89:50:63:6a:da:8b:e4:a6:1e:cf:5f:
c9:e7:1d:fb:c6:c7:56:de:60:ac:47:52:9a:f9:4e:
7c:da:03:77:0d:a2:ce:37:62:75:85:a9:b9:13:6a:
5a:0e:9e:3e:f5:5b:cf:b0:1f:fe:de:f4:6c:ca:a0:
71:9c:92:e1:68:32:65:43:87:ae:8f:1c:a0:fb:49:
50:ef:24:e3:de:d5:65:dd:8c:95:e9:b7:30:bf:8e:
e4:ba:ef:24:44:89:13:aa:3d:3b:a8:f2:71:e1:04:
e3:1b:05:15:e0:c6:74:87:82:f5:27:4b:85:22:a4:
50:f4:e5:32:00:b0:3e:7d:9e:90:66:49:a7:18:2b:
e6:5a:01:8f:2f:b5:52:60:2d:20:3b:31:70:d3:1d:
4c:a0:93:3a:b7:a5:6b:c3:31:75:0a:e2:82:60:d1:
51:0a:2b:02:9a:bb:96:39:82:47:eb:89:64:33:83:
38:c4:67:3d:b5:db:82:ff:70:c2:9f:b5:a9:1b:89:
95:19:50:20:38:24:01:d2:d9:fe:4b:ba:2c:9e:f4:
1d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:12:CF:50:61:6E:07:9A:1D:2E:81:D4:95:93:83:9B:7C:54:B2:2E
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/CBLPUGFuB5odLoHUlZODm3xUsi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.236.0/24
Signature Algorithm: sha256WithRSAEncryption
70:b7:0c:82:45:e3:67:d3:1e:c9:98:7c:7e:85:dd:f1:b0:ac:
bd:f5:e8:31:49:05:8d:ef:2d:6c:1c:e6:4a:9d:ae:54:d8:63:
03:d0:f0:7d:27:11:0a:9f:a0:a0:54:54:42:24:91:57:61:5b:
6c:86:43:2b:00:28:ba:77:ca:37:88:2c:7a:cd:57:a5:5a:6a:
78:13:04:e9:03:a6:e1:b5:23:d3:67:2d:d3:ba:b4:74:4e:8a:
da:2e:31:a9:91:ba:a0:61:1e:01:ab:ec:e5:6b:86:24:ea:62:
fe:4c:3d:32:75:2c:bc:4a:18:25:58:aa:fe:38:b6:aa:91:9a:
af:a3:c5:ff:48:7f:72:4b:68:65:fa:ff:4a:5d:68:89:6b:f2:
8e:46:02:6e:81:89:6d:c2:b9:d4:49:3c:22:1e:bf:68:be:19:
d0:85:2f:96:c1:cb:dd:82:46:d9:29:14:46:ec:07:f4:e5:1a:
5f:1b:68:b0:a5:e2:ca:4a:a0:c7:d1:f9:1f:1b:af:63:ec:5c:
19:31:31:d1:00:d0:cb:28:5c:fc:00:f6:5e:26:d3:dd:28:cd:
12:ee:e9:d0:73:25:90:54:ae:71:31:1f:4a:86:5b:13:3e:45:
ae:ba:49:36:06:dc:50:8e:9b:59:56:f3:bf:54:1d:01:52:10:
f1:f6:4c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:28:25 2024 by rpki-client on console-ams.rpki-client.org