Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/xjwNwPYhQP3Hy5kfPrYRONkXcGM.roa
File: xjwNwPYhQP3Hy5kfPrYRONkXcGM.roa (raw, json)
Hash identifier: u8I4WvpDc5VQ0S3S0m+4zHObsO2obGBjzcIGAJ6Vv7A=
Subject key identifier: C6:3C:0D:C0:F6:21:40:FD:C7:CB:99:1F:3E:B6:11:38:D9:17:70:63
Certificate issuer: /CN=4fd6646c93c2974789ecef7b444656ee64161729
Certificate serial: 01856D01C84C2447B32410DE77F759908768
Authority key identifier: 4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/xjwNwPYhQP3Hy5kfPrYRONkXcGM.roa
Signing time: Sun 01 Jan 2023 11:05:11 +0000
ROA not before: Sun 01 Jan 2023 11:05:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25575
IP address blocks: 213.145.224.0/19 maxlen: 22
2a03:1000::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:c8:4c:24:47:b3:24:10:de:77:f7:59:90:87:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6646c93c2974789ecef7b444656ee64161729
Validity
Not Before: Jan 1 11:05:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c63c0dc0f62140fdc7cb991f3eb61138d9177063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6f:cd:a5:93:56:80:1d:17:da:f7:55:89:90:
03:c7:74:be:28:15:1a:03:38:ef:18:dc:43:84:52:
73:57:17:ea:ee:a3:78:a0:63:59:bc:7d:30:9b:10:
6a:75:ef:a5:2f:cc:fd:87:99:aa:4a:94:19:3a:06:
6d:35:c7:2e:ad:fc:13:8f:06:23:ee:7d:7b:8e:96:
77:a8:14:9b:cc:37:c6:f6:db:5a:58:0c:bd:fc:24:
3e:12:9c:c6:64:55:33:f2:d4:b7:6b:6a:58:93:f5:
85:a8:fb:4c:bc:77:87:06:58:7e:0c:70:1c:0c:68:
b0:b0:96:0a:81:04:d2:89:a2:87:74:f1:87:2a:d4:
fa:c8:c1:03:4a:52:2a:33:77:eb:b3:82:a2:72:0f:
a3:eb:27:34:22:f7:c8:5a:64:8e:e8:af:2d:09:4d:
ed:cb:00:a7:49:86:6f:8a:47:28:61:94:db:d3:75:
77:a7:59:ff:b3:ca:3e:2d:ff:d4:fb:dc:ca:3e:e4:
89:b8:01:ae:1c:2e:2f:20:a1:0a:70:24:c6:f5:5e:
8c:58:11:fc:e9:a6:dd:b3:b2:ff:00:b6:d8:de:e6:
0e:6d:3a:b1:db:76:49:47:f5:c6:0d:8b:76:a5:1e:
85:f1:f1:21:6a:9a:31:18:29:90:ea:8d:dd:2a:42:
a3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3C:0D:C0:F6:21:40:FD:C7:CB:99:1F:3E:B6:11:38:D9:17:70:63
X509v3 Authority Key Identifier:
keyid:4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/xjwNwPYhQP3Hy5kfPrYRONkXcGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.224.0/19
IPv6:
2a03:1000::/32
Signature Algorithm: sha256WithRSAEncryption
75:32:54:52:bf:ba:ea:7a:c6:b8:e3:47:f5:42:2d:fa:1b:46:
1f:ef:76:cd:ba:56:01:24:79:09:84:64:3d:1e:4e:5d:58:f6:
6e:60:27:78:45:a4:e6:e0:b8:07:c6:cd:6b:aa:59:5b:69:c0:
a2:05:39:15:52:16:4c:2d:17:cc:13:b4:56:f0:18:30:92:5c:
55:30:2d:ff:eb:45:71:a4:d2:7d:fa:a8:1f:28:fd:00:6a:65:
cb:4f:1c:af:f0:05:fc:bf:67:95:d0:dc:06:ac:76:78:2c:41:
ce:03:62:84:28:de:4c:17:82:06:9b:2a:e1:2e:a3:ef:ca:4a:
d5:2b:7a:b7:7b:46:b3:77:8e:99:56:79:c7:87:ca:ab:53:9a:
4f:14:28:c2:62:03:7a:85:7c:b4:b1:e0:01:59:57:bb:53:5a:
2e:d3:da:af:f9:a4:d3:66:f0:14:fb:ef:cf:4f:b1:31:16:a3:
eb:a8:1e:bc:b1:20:fa:9f:0b:cb:26:35:f4:8e:0e:7a:ba:eb:
8e:a3:6a:8c:16:cf:c9:e8:00:02:50:38:ce:6d:14:f9:7b:99:
27:3f:6f:34:c3:6b:95:50:b8:bc:9c:5d:68:6f:1a:ca:f9:5c:
43:27:e4:02:4d:9c:6a:2d:84:a0:5e:ce:95:14:5d:bc:32:d0:
1d:3f:7b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:13 2024 by rpki-client on console-fra.rpki-client.org