Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/TKHt9hmSiT3vQWLDYgKmQYKknj4.roa
File: TKHt9hmSiT3vQWLDYgKmQYKknj4.roa (raw, json)
Hash identifier: 7BBzctyiSYFcyWHOn3WowGiJyssY1R81UqsWd7vNKBs=
Subject key identifier: 4C:A1:ED:F6:19:92:89:3D:EF:41:62:C3:62:02:A6:41:82:A4:9E:3E
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 018D886FA8FEA5E069CD5B122369A8A95FB3
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/TKHt9hmSiT3vQWLDYgKmQYKknj4.roa
Signing time: Thu 08 Feb 2024 11:17:15 +0000
ROA not before: Thu 08 Feb 2024 11:17:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57604
IP address blocks: 213.232.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 14:51:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:88:6f:a8:fe:a5:e0:69:cd:5b:12:23:69:a8:a9:5f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Feb 8 11:17:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ca1edf61992893def4162c36202a64182a49e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8b:7b:43:07:ed:2e:c3:0b:e3:0e:77:6c:6f:
e7:66:de:53:c0:96:c6:d7:d6:9b:fe:4c:8f:7c:f7:
93:6f:12:8c:c2:81:89:f7:77:9d:97:f4:e5:3f:ec:
71:de:1d:50:a9:64:b8:4b:f5:e4:c3:c3:3c:cf:bb:
59:73:f8:9b:a4:bb:d8:77:64:42:05:fa:e7:09:5a:
dd:43:99:10:32:a4:2d:d6:c3:60:ad:4c:5e:1d:d0:
a0:cd:36:54:cc:d6:50:dd:7d:f2:4e:7b:7d:90:04:
ac:d8:82:37:af:22:62:eb:16:0b:e0:02:a1:16:91:
e7:91:8e:39:c6:88:a5:8a:43:a4:9a:83:6d:1a:bd:
3a:19:aa:99:5f:ef:b6:8f:89:80:eb:c3:1c:ea:77:
44:42:5e:fe:93:14:d4:29:8f:8a:06:93:99:44:c8:
7a:79:24:1a:39:67:6b:ba:6c:8c:61:eb:fa:18:ec:
41:36:4e:bc:eb:05:40:01:43:76:70:df:91:19:57:
90:f5:f9:a1:00:48:74:9e:0d:09:d7:16:90:a9:ab:
07:9d:d7:04:0d:69:4e:56:4c:0d:b3:d5:a1:0d:1d:
53:fd:e8:35:73:d9:0c:6e:94:73:2e:7a:0e:72:b0:
b0:fa:ec:e1:93:74:52:64:1a:36:25:ed:29:63:7e:
e7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A1:ED:F6:19:92:89:3D:EF:41:62:C3:62:02:A6:41:82:A4:9E:3E
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/TKHt9hmSiT3vQWLDYgKmQYKknj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.236.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:35:6f:01:2a:46:76:6d:95:78:d7:2e:b6:ff:fe:99:28:bd:
5b:de:66:a3:50:d6:c7:3f:7b:7b:78:bf:0a:99:8e:62:07:04:
2a:53:4c:88:92:9a:c3:b4:69:0b:4d:10:72:d3:3f:6c:f7:b5:
dd:e8:5d:3d:22:42:f4:94:84:49:48:97:c1:3a:19:80:20:c8:
92:9a:94:bc:76:66:c5:98:b3:53:c7:54:cb:60:27:e6:6c:84:
f2:0d:92:03:e9:60:9c:43:b3:e0:42:ee:bb:04:54:b5:fb:a3:
8f:c8:f2:6e:91:23:24:c0:4f:06:6a:e1:cc:0d:05:f9:a0:e3:
00:6a:e3:f4:a2:9b:fc:e7:ac:5e:31:90:d7:62:86:6f:76:40:
24:2f:5f:71:37:07:02:a4:73:f3:93:5e:14:54:0e:3f:1c:55:
4f:47:29:2e:22:07:82:93:0f:de:cb:cb:7f:b5:ac:7d:79:24:
11:04:6d:4d:bd:ef:32:10:60:ca:2f:09:4b:c0:51:be:89:46:
73:77:57:30:2c:05:fc:2d:1e:0d:5f:78:ba:cf:1c:eb:6e:97:
28:2b:b9:e0:f1:a1:5c:43:3d:5f:64:21:54:8f:00:88:75:32:
63:88:66:0f:e4:f8:e8:b4:cc:97:62:27:ba:b1:0c:e0:25:f8:
73:94:e6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 19:56:17 2024 by rpki-client on console-fra.rpki-client.org