Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Pk0IXR3FAFHdL_7_XeFmplLYSe4.roa
File: Pk0IXR3FAFHdL_7_XeFmplLYSe4.roa (raw, json)
Hash identifier: J/l8U7PsMLpNndx7NdBtiK6Rpaxb5o6mNT2Ikfum240=
Subject key identifier: 3E:4D:08:5D:1D:C5:00:51:DD:2F:FE:FF:5D:E1:66:A6:52:D8:49:EE
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01892C2CE4155D12580267D5C222B26DB0A7
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Pk0IXR3FAFHdL_7_XeFmplLYSe4.roa
Signing time: Thu 06 Jul 2023 17:08:06 +0000
ROA not before: Thu 06 Jul 2023 17:08:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50267
IP address blocks: 213.226.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2c:2c:e4:15:5d:12:58:02:67:d5:c2:22:b2:6d:b0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jul 6 17:08:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e4d085d1dc50051dd2ffeff5de166a652d849ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:3c:c3:cd:ea:e8:da:ed:a4:f9:1b:19:a4:
d7:77:e8:84:d4:95:21:7f:e4:6b:10:a7:bf:3f:4f:
eb:41:39:a6:e3:c3:cd:6c:ed:60:b3:1f:14:51:d7:
c4:6a:71:e5:d3:c1:b0:ed:6c:d6:27:65:cf:cc:f6:
5b:0c:68:52:9c:50:0c:e0:29:2c:1a:e9:52:d5:d8:
c6:66:1f:73:d4:ab:29:e8:a3:33:8a:2b:d4:57:fc:
ff:09:8d:76:68:07:bf:7a:df:bb:bd:25:e0:58:25:
3d:9a:fa:ab:51:c9:53:7d:35:6c:12:b9:78:7c:cb:
01:70:34:36:d6:4d:52:cb:b0:d4:2c:6d:03:63:ee:
92:56:44:ab:a7:58:48:c0:36:5e:a5:10:f4:23:f5:
c3:37:9e:7e:31:f9:a8:1d:e3:51:f1:a2:fb:c7:7f:
ef:f3:0d:58:54:1a:e5:0f:41:17:2f:a6:80:83:f3:
ca:21:8f:b5:b6:f0:a7:79:ff:51:20:ff:59:ba:e7:
cf:30:06:6b:30:24:db:14:a0:b8:e2:ad:c6:db:c1:
4e:f0:7d:e2:c6:c8:2f:53:e4:af:4d:8b:dd:62:40:
22:a0:c0:f3:4d:c3:29:2a:05:27:19:7c:4a:fc:44:
54:78:cb:74:c4:ef:be:88:8a:4d:4d:66:25:d3:e5:
f1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4D:08:5D:1D:C5:00:51:DD:2F:FE:FF:5D:E1:66:A6:52:D8:49:EE
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Pk0IXR3FAFHdL_7_XeFmplLYSe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.226.115.0/24
Signature Algorithm: sha256WithRSAEncryption
43:71:85:b0:55:de:15:70:8f:fd:77:1b:44:66:6e:f7:6a:b1:
b8:0e:c9:aa:97:eb:5e:69:c9:b9:d1:2d:29:af:da:7c:37:92:
54:a7:65:45:a5:78:a8:f8:ba:40:de:f0:6b:d1:28:a7:23:8a:
fb:19:28:99:fd:67:16:ca:3a:c9:0b:d7:b6:99:f9:5a:86:03:
ec:a5:19:7d:42:fb:4a:8d:14:cc:64:92:c6:a2:e9:15:d5:f6:
a1:2e:64:df:c2:16:cf:8a:e2:ce:0a:91:7b:3f:77:d1:55:40:
33:be:10:7b:94:ea:06:c1:cc:5d:99:44:45:7d:0b:79:c9:27:
c4:4f:26:f4:82:24:bc:c8:b5:e1:e4:c8:e7:39:82:4f:c5:3c:
fc:15:c8:42:ea:1f:7e:3b:6c:46:ac:3e:82:78:27:74:89:1a:
ca:56:a7:2b:6d:a4:6b:f4:ce:96:32:59:80:8b:42:23:e0:e9:
3f:3f:8b:10:ea:50:9a:ad:5f:e0:c2:9b:33:8e:ac:12:90:41:
c0:be:38:d9:93:f3:83:85:ff:e5:f8:5c:af:64:9f:66:43:7a:
4d:58:88:5a:7d:fd:c4:8f:36:99:03:37:af:d6:30:5e:7d:7c:
62:32:5a:ca:ee:4e:29:5c:ab:88:7b:f9:44:29:57:0e:1e:c1:
84:b7:78:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:58 2024 by rpki-client on console-fra.rpki-client.org