Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/1-ps0SqhABTmeRl3ynYiRZE9d3BQ.roa
File: 1-ps0SqhABTmeRl3ynYiRZE9d3BQ.roa (raw, json)
Hash identifier: aRtEkZ/n4mbFYHoT+DNvnvwrK2SxcAPyjnQUf12Clsk=
Subject key identifier: FA:9B:34:4A:A8:40:05:39:9E:46:5D:F2:9D:88:91:64:4F:5D:DC:14
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 018C164A63FBC26A280E7BD13D9A78061E46
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/1-ps0SqhABTmeRl3ynYiRZE9d3BQ.roa
Signing time: Tue 28 Nov 2023 14:17:03 +0000
ROA not before: Tue 28 Nov 2023 14:17:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 213.142.134.0/24 maxlen: 24
213.142.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:16:4a:63:fb:c2:6a:28:0e:7b:d1:3d:9a:78:06:1e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Nov 28 14:17:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa9b344aa84005399e465df29d8891644f5ddc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dd:9e:05:8f:bd:72:e3:8b:dd:b1:c6:4a:19:
7e:4c:ca:68:6a:d2:3d:62:ac:f2:0e:b0:01:1a:f7:
72:ce:bb:24:55:3b:6e:76:78:3b:f1:1b:21:d4:35:
b8:1d:c6:6d:0f:2b:40:9b:1e:7c:1d:b8:66:7b:8e:
21:20:83:0c:78:b2:bb:44:ae:41:f7:62:d7:f8:42:
1c:6b:bf:96:3d:f2:bb:21:c7:3b:0c:80:ad:94:d1:
e9:8f:42:bb:09:05:82:3f:3a:d1:f8:1f:c9:f2:b3:
d7:38:57:fc:47:08:dd:93:1d:43:26:4c:0f:c2:c1:
a6:ff:fe:7e:44:50:a9:92:fc:e0:85:80:94:9e:f9:
3c:ef:f2:d4:a4:b2:df:fe:1a:c8:4d:16:65:a6:34:
6a:8a:df:81:ae:e3:af:5a:ce:75:2e:74:f0:80:27:
80:55:46:c5:27:2e:29:bf:4f:e9:e5:41:c1:85:42:
4b:ba:d6:83:10:71:4d:c8:34:ca:94:c5:8c:2e:b8:
03:5f:0b:77:57:90:ce:23:44:19:6e:65:0a:36:5f:
f6:8f:9b:d1:02:9d:54:47:f0:03:54:55:64:20:41:
3c:c2:79:59:ab:ed:aa:29:95:08:2e:a9:0e:41:b4:
a4:53:93:61:eb:99:70:8c:76:d7:fa:f0:0e:04:17:
17:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9B:34:4A:A8:40:05:39:9E:46:5D:F2:9D:88:91:64:4F:5D:DC:14
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/1-ps0SqhABTmeRl3ynYiRZE9d3BQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.142.133.0-213.142.134.255
Signature Algorithm: sha256WithRSAEncryption
ac:e1:6f:08:95:9a:ac:48:bf:4a:09:3f:b1:b8:a3:78:e7:8e:
df:b4:af:fd:32:a1:60:4f:10:07:4a:2c:50:f9:a6:68:3a:d8:
51:30:3e:c5:14:d2:ee:57:5f:36:1b:c3:1c:d1:fd:58:52:0a:
c1:0d:77:6a:b9:01:9b:34:c2:2e:3b:a1:ba:30:25:18:a0:a3:
81:00:10:d7:2d:c0:f5:a2:b5:f0:af:da:37:5c:64:c3:04:0d:
71:fa:f7:73:87:25:36:f9:00:d1:c8:91:71:45:23:4f:ab:43:
52:c0:0b:dd:c0:06:67:8f:68:18:af:0b:90:29:df:52:23:ff:
5a:91:bc:be:4a:f8:a5:c0:bc:99:fb:23:7e:c4:79:29:69:f6:
9b:dc:8f:0c:57:c8:b4:77:4c:8a:11:8c:be:cc:8f:53:4b:3d:
d2:78:43:6d:d9:47:fd:28:49:89:08:ed:2d:0a:3f:8c:a4:1a:
45:ca:3f:f3:90:9a:50:df:d1:2f:91:28:65:99:5c:4b:5a:e8:
76:1c:d7:7b:99:4c:02:67:92:e8:b0:d2:b0:2a:67:58:bd:23:
82:ea:dc:b7:a0:2c:36:53:ef:d1:60:af:c9:db:7c:16:76:84:
dd:8c:35:c8:53:53:1e:5f:ff:7a:4b:d3:89:ad:ba:56:13:9e:
60:2f:5f:e7
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgISAYwWSmP7wmooDnvRPZp4Bh5GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNzFlOWIxM2Y1YzMzOWE1ODY5MmVlYWJlNzJlYWE0MDZi
YmJkN2QwHhcNMjMxMTI4MTQxNzAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTliMzQ0YWE4NDAwNTM5OWU0NjVkZjI5ZDg4OTE2NDRmNWRkYzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt2eBY+9cuOL3bHGShl+TMpoatI9
YqzyDrABGvdyzrskVTtudng78Rsh1DW4HcZtDytAmx58Hbhme44hIIMMeLK7RK5B
92LX+EIca7+WPfK7Icc7DICtlNHpj0K7CQWCPzrR+B/J8rPXOFf8Rwjdkx1DJkwP
wsGm//5+RFCpkvzghYCUnvk87/LUpLLf/hrITRZlpjRqit+BruOvWs51LnTwgCeA
VUbFJy4pv0/p5UHBhUJLutaDEHFNyDTKlMWMLrgDXwt3V5DOI0QZbmUKNl/2j5vR
Ap1UR/ADVFVkIEE8wnlZq+2qKZUILqkOQbSkU5Nh65lwjHbX+vAOBBcXTwIDAQAB
o4ICEjCCAg4wHQYDVR0OBBYEFPqbNEqoQAU5nkZd8p2IkWRPXdwUMB8GA1UdIwQY
MBaAFKtx6bE/XDOaWGku6r5y6qQGu719MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmIt
Y2Y0YjkwMDk5N2EwLzEvMS1wczBTcWhBQlRtZVJsM3luWWlSWkU5ZDNCUS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYmUvNmJhMzljLWVmMWQtNGQ0OC05ODJiLWNmNGI5MDA5OTdh
MC8xL3EzSHBzVDljTTVwWWFTN3F2bkxxcEFhN3ZYMC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQA1Y6F
AwQA1Y6GMA0GCSqGSIb3DQEBCwUAA4IBAQCs4W8IlZqsSL9KCT+xuKN4547ftK/9
MqFgTxAHSixQ+aZoOthRMD7FFNLuV182G8Mc0f1YUgrBDXdquQGbNMIuO6G6MCUY
oKOBABDXLcD1orXwr9o3XGTDBA1x+vdzhyU2+QDRyJFxRSNPq0NSwAvdwAZnj2gY
rwuQKd9SI/9akby+SvilwLyZ+yN+xHkpafab3I8MV8i0d0yKEYy+zI9TSz3SeENt
2Uf9KEmJCO0tCj+MpBpFyj/zkJpQ39EvkShlmVxLWuh2HNd7mUwCZ5LosNKwKmdY
vSOC6ty3oCw2U+/RYK/J23wWdoTdjDXIU1MeX/96S9OJrbpWE55gL1/n
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:24 2024 by rpki-client on console-fra.rpki-client.org