Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/z1gb33CwL7o8_kOEfk2RhjHGBlw.roa
File: z1gb33CwL7o8_kOEfk2RhjHGBlw.roa (raw, json)
Hash identifier: cSEIdisHwuWYplbFObZjpj5j8FBjsIEqejax+iVix28=
Subject key identifier: CF:58:1B:DF:70:B0:2F:BA:3C:FE:43:84:7E:4D:91:86:31:C6:06:5C
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018A98290CB23D8E8220964332C4A5F19E58
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/z1gb33CwL7o8_kOEfk2RhjHGBlw.roa
Signing time: Fri 15 Sep 2023 09:25:41 +0000
ROA not before: Fri 15 Sep 2023 09:25:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211838
IP address blocks: 213.175.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:98:29:0c:b2:3d:8e:82:20:96:43:32:c4:a5:f1:9e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Sep 15 09:25:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf581bdf70b02fba3cfe43847e4d918631c6065c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cc:27:52:ed:3a:2a:2b:91:8f:5b:4e:e7:49:
f4:d7:57:47:ae:f2:59:91:84:85:06:8d:45:7d:92:
cb:48:92:ee:3d:6f:2a:80:ce:68:85:0f:47:0c:f3:
77:01:e6:0b:b8:d6:4b:68:50:0f:8e:54:2f:09:37:
b6:57:01:97:05:6e:bd:57:37:d7:81:e6:2e:1a:28:
79:09:e0:b6:d5:e4:bb:a1:a0:b6:57:3e:dd:77:6b:
91:cf:ff:c4:30:bc:f0:32:2d:c8:7d:43:1f:2c:37:
76:e9:12:69:d4:20:4f:57:46:a4:18:50:da:ed:57:
fd:80:e9:fb:52:32:12:cf:1b:95:17:2b:10:54:73:
37:e8:24:03:16:b2:c0:6f:90:eb:10:51:b2:4c:02:
2a:bd:62:bb:e6:20:49:82:f8:ef:4b:1a:5a:f3:a0:
2e:55:3f:8a:65:70:34:5b:35:4b:4b:2c:3e:7b:0f:
ff:7b:61:ec:96:6b:a6:e5:8d:e1:05:d6:ee:bc:30:
28:13:d2:ad:de:45:30:64:d5:38:cd:48:c0:e6:31:
cb:02:20:12:27:3b:e8:47:91:7f:05:87:56:89:6b:
cb:68:e1:1c:59:0e:4b:69:02:06:12:5c:af:a3:5f:
65:68:6f:fe:14:69:c8:60:de:cd:74:2d:17:15:6a:
fe:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:58:1B:DF:70:B0:2F:BA:3C:FE:43:84:7E:4D:91:86:31:C6:06:5C
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/z1gb33CwL7o8_kOEfk2RhjHGBlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.175.119.0/24
Signature Algorithm: sha256WithRSAEncryption
41:69:00:a2:8a:40:6c:5d:96:cf:1e:ee:93:da:00:6e:50:1f:
09:eb:47:d2:36:73:f0:1c:7a:9e:2e:ad:a7:99:d7:3c:4c:34:
e2:c5:a0:47:84:7b:73:4c:9a:ec:57:12:aa:f0:70:49:14:61:
75:43:32:d2:b6:5b:bb:d9:0a:75:42:7a:1e:a3:6e:87:dc:6d:
7a:74:06:41:c1:1a:ea:27:63:3c:47:bb:e6:8b:1f:e4:82:36:
7e:52:9d:b0:25:a8:20:86:4d:1b:92:14:92:55:a8:f4:1f:8c:
3c:6b:c6:d3:0e:a7:c6:d2:17:32:98:bd:4e:95:be:f0:e0:9c:
20:b4:c4:a9:49:95:4a:00:62:43:66:0e:ea:ae:9e:f3:6c:d3:
f9:ea:40:f9:3c:96:73:f4:68:c2:68:d3:5f:6a:c3:af:3c:1b:
27:42:b4:3d:17:5e:67:8c:48:04:8b:4d:1b:e9:32:94:e8:55:
4e:4c:9e:b6:7f:54:3b:6c:fc:7e:14:67:12:ab:2c:f9:53:7b:
13:75:82:1b:b4:ee:91:53:dd:7f:e1:2f:50:2e:71:00:7e:54:
35:f7:e5:59:24:48:11:78:7c:04:05:b9:2a:48:21:c0:f7:a7:
64:e4:76:b6:a4:55:ac:04:0e:0d:f7:cb:1a:3e:c1:b1:4c:ce:
ce:ea:16:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:47 2024 by rpki-client on console-ams.rpki-client.org