Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/sadH0chPL1DCgqDHqp6NGRlI7Ew.roa
File: sadH0chPL1DCgqDHqp6NGRlI7Ew.roa (raw, json)
Hash identifier: tmXiTCjgixf/mZ/EoXhS3uGSA0yT00Cn2iOIaO4Wf3c=
Subject key identifier: B1:A7:47:D1:C8:4F:2F:50:C2:82:A0:C7:AA:9E:8D:19:19:48:EC:4C
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 018C164A64BD7050F0A85F4E727A12E42D4A
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/sadH0chPL1DCgqDHqp6NGRlI7Ew.roa
Signing time: Tue 28 Nov 2023 14:17:03 +0000
ROA not before: Tue 28 Nov 2023 14:17:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207508
IP address blocks: 213.142.133.0/24 maxlen: 24
213.142.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:16:4a:64:bd:70:50:f0:a8:5f:4e:72:7a:12:e4:2d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Nov 28 14:17:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1a747d1c84f2f50c282a0c7aa9e8d191948ec4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b8:c7:99:15:a3:b5:06:34:ec:d7:74:1f:ca:
86:cf:00:07:e1:d4:3d:37:b9:c9:85:de:44:90:08:
16:34:99:97:94:c6:2f:c9:44:03:8f:3b:f8:fc:20:
93:d2:f5:7d:25:7b:81:c3:cd:98:d0:11:b3:91:7f:
e9:d5:e3:dc:6a:80:25:0f:af:73:fa:65:87:ce:5f:
f4:e3:83:eb:44:cf:db:f6:79:67:75:f9:04:40:56:
0f:39:2c:2f:5b:90:b4:4f:88:2e:39:cd:35:e9:8c:
58:cd:88:1c:4d:0a:5e:d7:0e:25:c2:bc:a5:88:01:
8a:55:07:14:9e:9d:05:38:26:24:38:d8:25:4a:7e:
19:ba:4f:35:26:d9:d2:59:bf:6b:3f:bd:fc:8f:2e:
3e:4d:bb:5a:ef:71:b6:b6:c9:28:f9:35:6a:24:35:
a8:9f:f7:c6:7a:eb:5e:ef:7b:4b:d7:0c:07:4d:fd:
e2:5a:71:08:b1:80:dd:78:96:8a:1c:b8:25:7c:fb:
7f:00:1c:fe:c9:4a:76:4e:9e:ea:3f:9d:1d:38:14:
0d:74:1f:7d:b0:ff:d5:bf:14:da:6b:08:3c:61:e0:
2e:58:be:b7:63:ef:67:18:cb:dc:cd:ef:7b:fa:d7:
7e:1c:69:3f:47:20:3f:11:ab:7d:eb:47:2d:ec:22:
8d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A7:47:D1:C8:4F:2F:50:C2:82:A0:C7:AA:9E:8D:19:19:48:EC:4C
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/sadH0chPL1DCgqDHqp6NGRlI7Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.142.133.0-213.142.134.255
Signature Algorithm: sha256WithRSAEncryption
1e:8d:d3:c8:3d:ae:2f:d8:27:c8:6e:e1:b3:7a:a3:0c:ca:e5:
91:2c:95:77:5f:2a:ce:d7:65:7a:f5:ed:3a:5e:83:41:bc:77:
47:e6:76:e5:da:94:63:56:64:f3:7f:d6:2e:30:0e:cc:26:72:
05:35:e7:d7:e0:4b:77:c7:9f:e7:e3:e9:cb:5b:e8:00:6d:c3:
89:6b:6d:09:14:eb:49:ad:f3:a3:a5:0f:62:09:d4:8c:88:36:
76:f0:81:72:d3:bb:e6:4e:dc:33:93:e2:06:7e:eb:7b:78:ac:
8d:f6:b5:0f:b3:88:cb:d0:e4:30:5e:cd:dd:59:6c:4d:43:cc:
e4:98:34:d0:8c:a8:2f:d5:4d:96:bb:fd:67:08:23:cd:7c:0f:
d2:ef:33:c9:6a:16:75:0e:f2:02:f6:d2:b4:80:fc:9b:cd:7b:
1e:ac:e6:1a:9a:3e:9d:9d:c2:06:9d:ef:eb:26:10:e6:7d:e5:
0e:13:bf:0f:9e:88:af:bf:6a:98:7d:ee:ba:d7:ce:58:89:e0:
eb:39:dd:6f:09:09:b6:d9:01:29:db:5b:4d:9e:fd:0c:58:ec:
03:44:00:ae:25:32:1a:86:58:fd:08:07:cf:61:13:ea:4a:24:
fd:25:ef:82:4f:2e:0c:e9:01:d9:9f:3e:0c:10:f9:22:eb:b4:
ed:2c:99:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:24 2024 by rpki-client on console-fra.rpki-client.org