Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/24HSbwdZC_76KJZ-c8BLcTAhmR4.roa
File: 24HSbwdZC_76KJZ-c8BLcTAhmR4.roa (raw, json)
Hash identifier: Hc+vBIPFlpyV87ursj+2VQbf0u6RMH4irpv68euSgmg=
Subject key identifier: DB:81:D2:6F:07:59:0B:FE:FA:28:96:7E:73:C0:4B:71:30:21:99:1E
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 018C6EE4A1289E7F0422A81E4DCF4C4E7EF7
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/24HSbwdZC_76KJZ-c8BLcTAhmR4.roa
Signing time: Fri 15 Dec 2023 19:12:06 +0000
ROA not before: Fri 15 Dec 2023 19:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60707
IP address blocks: 213.142.143.0/24 maxlen: 24
91.151.83.0/24 maxlen: 24
91.151.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Dec 2023 19:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6e:e4:a1:28:9e:7f:04:22:a8:1e:4d:cf:4c:4e:7e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Dec 15 19:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db81d26f07590bfefa28967e73c04b713021991e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:81:26:8f:57:e4:fd:7b:59:ea:88:dc:1a:15:
7d:f4:f0:70:48:64:6e:43:ec:1b:4c:69:0c:23:b0:
7e:ae:f9:ad:21:ec:3f:e7:60:0e:5d:ec:33:24:40:
6b:fa:39:3d:0b:15:ec:97:9a:42:e7:f6:f6:2b:15:
4c:7f:88:15:bf:39:89:5a:ca:74:9d:c0:d7:be:61:
54:33:4b:5c:e6:6d:83:c2:cf:61:81:9a:fd:1c:b1:
e8:65:08:66:3a:53:82:47:8a:c1:7d:25:41:03:2d:
d9:f2:95:5c:12:a8:aa:19:78:e9:f1:21:6f:97:34:
30:73:35:c4:b0:ed:ec:31:99:ac:18:20:c6:37:b6:
f3:b0:6d:17:af:b1:d0:31:01:b5:04:96:48:64:f8:
55:f5:c6:1b:99:95:0a:12:13:f8:2f:04:e2:6f:42:
2e:9e:67:a2:fc:ed:fa:93:57:62:90:18:69:28:0f:
08:32:ef:84:d1:fb:c9:b3:78:8e:92:32:6d:20:f9:
f6:c6:72:90:8b:0d:c9:3f:db:f5:1d:f2:e2:c7:26:
f5:56:bd:22:9d:11:91:7a:dc:02:34:50:26:b4:67:
de:e9:56:20:66:f8:a1:0e:d7:39:67:ed:d2:6a:9d:
f8:1f:6e:6d:6c:16:09:2c:21:bd:8c:97:aa:7e:dc:
1c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:81:D2:6F:07:59:0B:FE:FA:28:96:7E:73:C0:4B:71:30:21:99:1E
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/24HSbwdZC_76KJZ-c8BLcTAhmR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.83.0-91.151.84.255
213.142.143.0/24
Signature Algorithm: sha256WithRSAEncryption
15:3a:01:45:e3:78:ad:da:83:2f:62:89:70:4f:a9:b8:6b:7d:
49:af:08:f7:e9:45:bd:be:0d:32:a0:f0:85:f8:52:8c:01:7d:
af:ca:7a:b7:49:f7:83:6b:2d:cb:ac:69:aa:d0:69:24:8c:c3:
13:85:0b:31:e0:29:50:25:3e:18:0f:d8:50:ce:39:f2:0a:64:
f8:eb:56:2b:c0:18:db:ff:56:52:57:db:ca:31:23:04:17:a2:
a1:e6:ec:e7:5d:96:a0:fd:72:65:6c:c4:60:03:c2:b4:b5:6b:
70:94:67:cf:21:9e:ce:a8:3d:e4:6c:1c:0f:ab:e8:e0:4f:26:
03:99:ce:27:c6:31:d1:c8:fd:0f:33:16:cb:d3:40:08:e0:df:
57:2c:00:38:c5:39:99:8c:2b:b5:46:08:a7:63:cf:b1:3d:56:
32:fa:b2:84:b8:fe:fc:eb:57:e9:6d:a7:c2:56:50:0d:54:6b:
03:a6:62:03:3b:94:e7:ce:b8:99:7a:a9:78:e3:00:9a:9e:8e:
ce:e4:db:ae:c7:fb:d2:36:c7:26:d0:42:ea:d0:e8:88:c7:1f:
c9:b8:65:f0:60:9a:d0:ed:a1:f4:1f:6e:00:59:39:1c:9c:42:
33:12:2d:b4:6b:42:09:91:be:a3:da:bb:e9:95:55:6f:ce:f6:
84:c4:26:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:04 2024 by rpki-client on console-fra.rpki-client.org