Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/OrnghasaR9sizUYCC_nE27281mQ.roa
File: OrnghasaR9sizUYCC_nE27281mQ.roa (raw, json)
Hash identifier: FxPUXoG7VPXz/zvWuQDEKgwoCcwJbCzZZBGle47mU60=
Subject key identifier: 3A:B9:E0:85:AB:1A:47:DB:22:CD:46:02:0B:F9:C4:DB:BD:BC:D6:64
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 018756D1CA48CAACBB683E4EE5C918460C3E
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/OrnghasaR9sizUYCC_nE27281mQ.roa
Signing time: Thu 06 Apr 2023 13:46:42 +0000
ROA not before: Thu 06 Apr 2023 13:46:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207633
IP address blocks: 213.142.150.0/24 maxlen: 24
213.142.156.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:d1:ca:48:ca:ac:bb:68:3e:4e:e5:c9:18:46:0c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Apr 6 13:46:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ab9e085ab1a47db22cd46020bf9c4dbbdbcd664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f0:5d:9a:5f:75:12:7b:02:22:be:cb:28:42:
a0:7a:c1:9e:12:9d:b1:7c:a3:eb:bb:cc:00:29:07:
67:9b:0a:c5:ae:36:a8:24:5a:56:71:2f:f6:b5:00:
2f:05:00:17:25:db:c8:38:d6:f3:75:64:88:97:69:
80:63:48:ce:6b:5e:6a:2a:6f:51:83:38:5e:ba:de:
03:ed:c7:91:fa:c9:67:d8:40:0a:ee:9e:5e:0b:94:
f6:67:1f:41:37:7e:1d:95:36:71:df:cb:f3:0a:f7:
7b:e8:f6:5d:9a:1d:37:ef:83:6d:1f:17:90:2f:01:
e6:43:db:05:3a:66:25:5c:74:b8:c1:4b:1d:01:b9:
84:e0:99:db:4f:6a:27:68:af:f6:21:9d:52:9d:cc:
19:38:cc:5e:13:90:ae:21:cf:0a:5d:89:ad:14:b4:
09:f2:68:ec:b0:b3:95:cb:33:af:03:2c:30:7b:61:
2d:12:ba:dc:8e:23:c4:9e:05:70:fd:ed:a1:8a:ab:
78:47:3c:b3:e7:6d:a3:6a:b4:88:50:ec:21:05:ee:
d7:85:9c:bc:87:77:f7:15:80:3b:52:e0:9e:49:da:
a8:36:42:2f:46:99:16:42:ad:3e:f1:32:34:b9:24:
85:21:b3:eb:de:9d:9b:cf:19:05:26:eb:89:82:da:
3e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B9:E0:85:AB:1A:47:DB:22:CD:46:02:0B:F9:C4:DB:BD:BC:D6:64
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/OrnghasaR9sizUYCC_nE27281mQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.142.150.0/24
213.142.156.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ac:27:3e:d2:19:53:e5:37:b1:c3:ac:0b:ee:32:e5:36:08:
37:81:26:7c:b1:a9:81:57:4b:06:43:36:e9:4d:10:ad:16:1f:
64:fb:95:27:42:fd:65:0d:14:c4:a8:5c:0e:03:d4:3e:51:f1:
24:eb:34:6f:00:0d:b1:9b:f4:36:e1:e7:2d:90:1a:6f:ca:57:
68:46:30:88:66:fc:39:aa:98:1a:9a:d9:74:54:db:0e:d4:73:
35:7c:a1:03:5d:6e:f4:c6:f9:ff:08:10:8d:ab:4d:ef:74:6a:
28:3f:96:a4:f3:a2:86:b7:f5:5b:32:32:dd:4a:ec:bf:2a:4a:
4e:ab:4a:bf:fb:51:ae:22:46:b6:b3:5c:91:dd:ab:88:39:e3:
fd:78:8b:6e:97:48:a2:d4:4a:d8:7f:70:5e:ea:e9:2d:97:79:
8e:5d:e5:d6:1f:48:19:2f:8a:94:19:18:da:17:ac:17:bc:3d:
ea:ab:d6:3e:32:7f:f6:71:98:7c:95:24:95:dd:79:67:a0:09:
e5:b9:3f:f0:3b:ef:0a:5b:73:f9:e6:92:70:7b:5e:7f:3f:e2:
c9:42:b0:b2:e9:87:b9:d8:cd:f8:2f:57:a9:cb:49:37:2c:44:
2b:07:93:08:8f:c8:61:41:86:1e:fd:f1:98:a7:3b:e6:5f:1c:
db:eb:e2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 14:19:32 2023 by rpki-client on console-fra.rpki-client.org