Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/Z4MSh9dOhaXcbpQ-2PasVt1wqtM.roa
File: Z4MSh9dOhaXcbpQ-2PasVt1wqtM.roa (raw, json)
Hash identifier: iZxTld1uOxYf1n5LAIZXWD6mK6NWMwOGB3O9JE8WDFw=
Subject key identifier: 67:83:12:87:D7:4E:85:A5:DC:6E:94:3E:D8:F6:AC:56:DD:70:AA:D3
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 019073DEA9AAC49BB84440BA01F5AC9E5C87
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/Z4MSh9dOhaXcbpQ-2PasVt1wqtM.roa
Signing time: Tue 02 Jul 2024 14:34:50 +0000
ROA not before: Tue 02 Jul 2024 14:34:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207633
IP address blocks: 213.142.132.0/24 maxlen: 24
213.142.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Aug 2024 14:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:73:de:a9:aa:c4:9b:b8:44:40:ba:01:f5:ac:9e:5c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Jul 2 14:34:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67831287d74e85a5dc6e943ed8f6ac56dd70aad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:fd:02:c3:ed:8d:62:6f:9e:fb:6a:45:ec:
5d:36:b5:72:8d:f1:4e:f2:2e:38:47:f8:94:35:4f:
fe:b6:7e:19:18:7c:48:ee:81:75:fe:4f:16:da:bf:
51:a2:2d:f6:20:68:cf:8a:c2:96:87:34:64:d3:2f:
5e:27:d8:0a:5b:d5:43:f9:c9:f1:e3:b9:aa:4b:f6:
f0:00:4f:36:8c:71:7c:51:e3:6b:cb:67:b3:ef:02:
f9:d5:6f:d2:1b:da:d3:8e:91:ef:90:c9:50:cf:28:
e1:e9:e0:71:43:6c:28:56:92:dd:02:10:a1:e3:62:
d5:20:95:db:2f:ee:4a:6c:65:af:72:11:2d:63:c2:
5d:d9:1a:5d:99:8b:b8:82:c5:1e:2a:4f:40:51:82:
84:8e:91:c7:72:09:84:a9:d9:0a:05:7a:e4:bd:66:
9f:39:08:d1:54:e3:14:0b:39:53:e2:e7:c1:63:4b:
82:41:e0:be:a3:2c:45:66:c0:b9:eb:ef:63:06:e1:
23:89:c7:42:b2:df:b4:09:ca:eb:7e:05:20:42:ee:
78:c7:6b:27:49:62:e6:19:c1:e0:cc:45:a3:bf:0a:
58:2d:f9:f3:47:47:b4:83:09:f2:1a:7c:4a:26:17:
a7:10:23:e3:8c:e2:cc:44:55:da:45:a1:27:40:0f:
5e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:83:12:87:D7:4E:85:A5:DC:6E:94:3E:D8:F6:AC:56:DD:70:AA:D3
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/Z4MSh9dOhaXcbpQ-2PasVt1wqtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.142.132.0/24
213.142.156.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:1d:60:75:16:ff:40:40:8e:57:3b:fc:c3:44:53:6b:94:45:
d2:91:05:97:7e:49:c5:5c:68:fc:99:e0:0a:bf:12:b6:60:70:
e5:b0:75:31:2a:e0:b3:1b:51:02:e7:bc:98:31:90:d0:6a:b4:
8b:08:6b:c1:bf:a8:5f:c3:8d:19:a8:0d:1c:c9:82:a4:61:f6:
55:16:85:65:14:fc:23:e6:71:dc:ea:14:22:a5:2e:9d:be:7b:
23:74:f6:91:80:5b:47:04:77:eb:d9:6a:9d:37:ba:81:73:46:
30:56:d6:82:0f:72:2c:46:57:d0:4d:bc:eb:a0:f8:a0:cc:9a:
e0:fc:4c:1a:30:3a:9c:cf:1c:85:12:ec:0a:28:10:30:0b:81:
ee:50:4b:ab:b9:d2:8a:3c:e7:f0:dd:a3:30:0a:de:73:87:13:
d0:44:2b:3a:0c:20:1e:b0:ad:10:f7:58:26:ff:98:f1:dd:57:
fd:a9:e6:a5:ec:72:fa:23:93:a5:08:db:ea:34:b1:fb:9e:a9:
09:16:0f:11:8f:51:2f:63:c8:79:ca:75:eb:88:e5:37:ed:4e:
69:f9:1d:46:ab:33:43:68:43:ab:be:1e:d7:c5:37:0e:a0:81:
90:3d:18:06:84:68:d5:f9:a9:7e:60:19:92:56:2d:f7:36:20:
d4:0e:c3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 19:59:37 2024 by rpki-client on console-ams.rpki-client.org