Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/avs1ehYK08hKKJ9EHvadVlf66DE.roa
File: avs1ehYK08hKKJ9EHvadVlf66DE.roa (raw, json)
Hash identifier: 1u2Mox6kf7GoQoFuBCltzSUGeXyofrh+Y5/VY6YlYLQ=
Subject key identifier: 6A:FB:35:7A:16:0A:D3:C8:4A:28:9F:44:1E:F6:9D:56:57:FA:E8:31
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 018CC7958FF212275C6EEFF7B9E1AE05D357
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/avs1ehYK08hKKJ9EHvadVlf66DE.roa
Signing time: Tue 02 Jan 2024 00:31:56 +0000
ROA not before: Tue 02 Jan 2024 00:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207429
IP address blocks: 213.142.135.0/24 maxlen: 24
213.142.143.0/24 maxlen: 24
80.253.245.0/24 maxlen: 24
80.253.244.0/24 maxlen: 24
80.253.247.0/24 maxlen: 24
91.151.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:8f:f2:12:27:5c:6e:ef:f7:b9:e1:ae:05:d3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Jan 2 00:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6afb357a160ad3c84a289f441ef69d5657fae831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bf:1c:54:d5:69:21:3f:2b:f2:5a:99:a3:7f:
0f:0c:99:d4:39:1a:91:03:63:6a:ac:21:d7:d2:90:
ec:66:94:7a:0b:eb:aa:36:54:15:8d:85:2a:b6:e1:
b6:ad:95:5c:72:e0:fb:27:43:49:e3:b6:52:2f:2d:
9c:63:7f:1e:f7:28:f1:b7:d1:9c:96:89:ac:9a:60:
f6:4c:04:f0:33:04:95:b2:eb:85:d3:ce:a3:79:59:
ea:09:5a:01:c6:85:11:03:89:a4:94:49:78:ac:69:
8e:8b:ad:ca:31:43:3d:26:b4:99:8a:4d:af:25:74:
ef:4a:a3:ef:84:05:ad:2c:76:ed:fb:39:98:e8:69:
c7:53:8c:c2:36:e0:b8:65:c5:2b:21:0c:d4:8d:f7:
95:b9:9e:56:55:8c:4d:96:59:d9:0d:4f:58:54:c3:
86:4c:49:57:dc:62:6c:21:0c:fb:82:ca:33:88:2b:
55:a0:be:25:1f:f0:b5:8e:9d:08:98:d0:19:54:83:
55:68:51:0a:ea:34:18:4a:d1:b2:04:2d:85:e9:18:
c6:0c:b5:90:bb:18:f1:0c:0c:3e:8e:b8:09:e0:17:
81:56:3e:fc:c8:12:ff:03:31:76:6f:a6:65:dd:d5:
e6:b7:2b:07:4b:27:fa:b0:df:e4:3e:ad:d9:fd:dc:
f4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FB:35:7A:16:0A:D3:C8:4A:28:9F:44:1E:F6:9D:56:57:FA:E8:31
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/avs1ehYK08hKKJ9EHvadVlf66DE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.244.0/23
80.253.247.0/24
91.151.81.0/24
213.142.135.0/24
213.142.143.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:5a:98:65:fc:92:7a:9d:e7:ad:6b:01:51:c6:3f:4e:00:e1:
8d:eb:39:68:d4:9b:23:0c:be:ce:58:00:9e:3b:19:a1:8a:a8:
fa:04:76:53:67:15:4d:a1:4f:e6:e9:13:f6:f4:a1:d0:f8:63:
30:88:b3:5f:96:a8:cf:f5:d3:c6:7a:69:79:51:5a:d9:c0:08:
8d:e0:72:20:ff:e7:e1:3b:01:47:3b:b6:bb:0b:96:fd:b1:5d:
7e:df:92:60:1a:bc:81:ec:fa:1e:61:2f:35:c9:0b:51:90:bf:
07:df:3a:80:c6:bf:5c:9d:12:08:62:52:7c:d6:29:90:6b:06:
fe:41:90:bc:5b:89:b4:3d:72:42:80:c1:4b:14:2c:e1:7f:c1:
38:78:11:47:29:9b:f8:4d:fd:a1:38:33:fc:20:37:33:32:1d:
62:42:d8:76:bd:43:22:ae:ef:2c:0f:a8:12:0b:53:d7:3c:35:
fb:5e:61:75:e1:56:3b:b5:15:27:67:2c:92:01:07:a2:81:ae:
38:00:b7:8d:af:af:f8:ba:7e:c6:ef:ba:2d:9b:64:e2:01:70:
13:27:c7:7d:3d:4c:db:74:ee:83:f5:9a:61:a8:5b:d8:8f:00:
d0:2f:ff:0f:b0:19:61:e1:e1:da:6e:1c:6a:9d:b6:12:0f:ba:
71:ca:ee:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 17:52:09 2024 by rpki-client on console-fra.rpki-client.org