Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/WvVESveuDgQVsdl60JT2vCHtf2U.roa
File: WvVESveuDgQVsdl60JT2vCHtf2U.roa (raw, json)
Hash identifier: djgYKUfUgxTS6/MRUV+oO3BdIqWKExYM4lBo6EFt8zA=
Subject key identifier: 5A:F5:44:4A:F7:AE:0E:04:15:B1:D9:7A:D0:94:F6:BC:21:ED:7F:65
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 018B905ED55AA36EF352C4B3E2866E1B0F63
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/WvVESveuDgQVsdl60JT2vCHtf2U.roa
Signing time: Thu 02 Nov 2023 14:10:15 +0000
ROA not before: Thu 02 Nov 2023 14:10:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 213.142.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:90:5e:d5:5a:a3:6e:f3:52:c4:b3:e2:86:6e:1b:0f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Nov 2 14:10:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5af5444af7ae0e0415b1d97ad094f6bc21ed7f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d0:3c:63:42:00:6b:80:4b:1d:2c:07:e1:91:
b1:f3:39:4a:5e:c8:86:eb:79:b3:eb:0a:5d:7d:ae:
21:04:e7:d9:8d:76:cf:70:e5:88:2f:32:4d:a0:bd:
ff:89:bc:b9:77:6c:4e:6a:de:54:74:89:b2:53:4f:
16:f3:72:95:a7:17:80:fc:45:5f:2a:66:2d:e1:70:
71:ab:9d:ba:7e:0e:a5:dc:14:8e:bd:1d:a3:5b:50:
5f:37:6f:14:6a:aa:1e:18:f2:0e:50:77:08:14:91:
d8:37:5a:10:48:62:3f:1c:61:29:c5:e1:3f:50:7b:
77:3c:b8:ec:22:d0:44:df:bd:5a:22:db:c5:e1:8e:
47:a3:76:7b:e7:ef:c0:b4:df:c1:0a:d4:c3:d7:21:
59:de:7b:f1:ef:13:52:ae:05:43:4b:fb:27:12:aa:
ea:d8:07:ae:f0:4c:35:43:39:05:8d:09:6e:f8:c8:
0d:f5:f6:0e:62:87:e8:bf:08:07:c5:13:b0:37:f2:
8f:48:5e:9f:1b:19:84:eb:3a:6b:bb:b0:1c:6a:4c:
7f:de:47:e5:3e:ef:24:d3:73:a8:2d:bb:e2:23:97:
64:32:1c:cc:d0:85:67:ce:69:1f:d6:ba:4e:a6:f7:
dd:83:3b:95:55:4f:f9:d8:c3:d1:17:f0:48:06:f7:
ef:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F5:44:4A:F7:AE:0E:04:15:B1:D9:7A:D0:94:F6:BC:21:ED:7F:65
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/WvVESveuDgQVsdl60JT2vCHtf2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.142.158.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:3c:87:73:53:99:e1:af:44:b9:05:1c:b5:d5:52:b4:01:2e:
98:b0:97:ff:c1:9a:8a:25:aa:ff:51:41:85:81:79:f7:f5:37:
70:27:27:dc:1e:b7:ac:a6:75:33:51:e5:2f:a7:f4:2c:e8:fb:
83:62:99:86:5b:0a:b7:d2:0f:a6:01:51:1a:66:5b:10:10:ae:
c0:5c:0d:cb:9e:f9:4c:d4:b0:a5:2d:e2:70:1b:78:69:b1:26:
29:e0:60:7d:b5:5d:e7:cd:2f:bb:f8:18:05:b3:f7:32:86:2c:
bb:bb:37:a4:25:0b:a0:6b:ef:a2:90:6a:d5:5f:f7:be:96:f0:
26:02:b5:4a:00:55:dd:e3:cd:e1:e8:d7:92:bf:ca:2f:6a:78:
40:09:7e:76:04:10:ad:d6:9e:d8:99:8b:64:02:cb:68:b9:79:
c6:22:d1:e7:6f:09:fb:71:21:1a:55:c5:1d:d8:9f:27:97:79:
b3:87:c4:cf:61:60:e5:9f:8b:33:82:78:8b:1c:ff:df:48:7c:
4b:c2:08:d5:b7:1a:29:fc:ac:f1:a9:ef:ef:37:33:f6:3f:5a:
3e:33:72:ff:ae:30:3d:64:82:34:83:5e:ca:1c:bb:b5:9e:3a:
1c:2d:1d:09:66:60:3a:08:60:a0:e8:09:39:a4:04:61:e6:70:
38:e9:93:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 13 03:30:47 2023 by rpki-client on console-ams.rpki-client.org