Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/DWkI8FpIbG49ljP7i3VmBj3VUOo.roa
File: DWkI8FpIbG49ljP7i3VmBj3VUOo.roa (raw, json)
Hash identifier: 1IsCbOyI3FlMpD+Eg/+BvAvzhOXbai35wxLjSBW4qBk=
Subject key identifier: 0D:69:08:F0:5A:48:6C:6E:3D:96:33:FB:8B:75:66:06:3D:D5:50:EA
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018730E557EB95715618BAF0853C595714FE
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/DWkI8FpIbG49ljP7i3VmBj3VUOo.roa
Signing time: Thu 30 Mar 2023 05:02:29 +0000
ROA not before: Thu 30 Mar 2023 05:02:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17941
IP address blocks: 213.232.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Jun 2023 18:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:30:e5:57:eb:95:71:56:18:ba:f0:85:3c:59:57:14:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 30 05:02:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d6908f05a486c6e3d9633fb8b7566063dd550ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:55:db:78:a9:d5:44:e4:5b:53:e1:df:00:
9a:19:6b:12:05:01:8f:de:58:ad:fc:c9:95:c6:dc:
90:a8:a8:88:e1:63:64:b7:cb:e9:fb:43:64:2b:89:
93:c6:96:b7:a5:91:8a:2d:77:5d:d6:72:62:7f:a3:
1a:f2:7d:0b:b1:5a:39:46:94:1c:a6:e4:cb:c7:01:
44:5b:90:ec:f7:60:3f:77:ee:af:69:61:2f:2a:b6:
f2:77:d3:ad:2a:84:1a:e1:8d:19:4c:ea:df:fc:ef:
00:cb:39:06:fd:78:f7:55:b6:8a:d6:06:2e:9d:da:
89:0a:7c:7f:1b:7e:d9:55:89:7d:5e:b7:23:e6:45:
1c:c3:78:b9:20:13:07:38:3f:00:24:ae:f0:70:9c:
5e:c1:62:0a:78:89:4a:5d:66:59:ac:09:b2:6a:ee:
75:74:b0:c4:d4:fb:2d:d5:f0:d9:e9:a4:74:15:96:
9b:5e:ee:4a:46:22:13:aa:aa:39:30:a4:07:a6:da:
83:a2:fc:d2:69:97:5a:e9:86:ac:51:93:10:f0:a5:
df:c3:22:2f:76:0b:b3:ba:e0:6a:d0:2c:07:b2:ed:
fd:4d:d7:bb:14:c2:06:69:a5:f7:5a:6c:29:61:bc:
c3:7e:20:16:3d:32:05:5f:e1:cc:81:06:13:87:bc:
8a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:69:08:F0:5A:48:6C:6E:3D:96:33:FB:8B:75:66:06:3D:D5:50:EA
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/DWkI8FpIbG49ljP7i3VmBj3VUOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.93.0/24
Signature Algorithm: sha256WithRSAEncryption
51:3a:29:e1:14:6b:16:12:db:d4:fb:d7:34:f3:93:3c:45:bc:
05:0b:bf:5f:ae:46:0f:bd:c8:04:a2:91:73:77:c7:86:c3:9f:
e2:28:cb:cc:00:5d:a6:00:1e:91:20:dd:cd:f0:63:8a:6e:d6:
86:33:f1:9d:71:08:03:28:0a:7e:0b:8e:fc:a9:54:f4:ef:5a:
28:b8:60:69:0d:ea:b3:20:ac:bc:65:98:5c:96:6c:dd:26:e1:
2f:c5:4f:2e:57:23:14:61:e3:8c:34:90:b1:78:6b:ce:1c:67:
c0:2e:b4:34:9d:b5:d4:08:d2:44:c5:3e:a7:b3:2d:4c:48:ab:
38:c7:bf:e7:78:92:24:ca:71:0a:ed:a9:8b:c8:c8:51:d3:51:
90:e9:0d:43:0b:18:1b:de:e1:06:d7:57:62:41:dd:11:30:29:
6e:21:9e:00:f7:fd:b8:7c:a3:f9:57:93:08:46:43:0d:b7:74:
7d:1c:33:f6:03:c6:43:80:3d:78:d9:8b:d8:fc:65:2f:97:c2:
6d:ee:50:63:0f:03:43:26:2e:a3:3b:40:95:2d:98:1d:e7:a8:
16:4f:b8:2b:1d:01:1a:69:cb:f2:5e:1a:81:ca:81:01:60:12:
11:9b:9d:30:eb:cb:3e:16:9a:3d:32:5e:29:3f:ed:b5:7e:aa:
cd:76:97:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:44 2024 by rpki-client on console-fra.rpki-client.org