Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/dxCHWiDBWpRgO65nmSQ5b6FPtac.roa
File: dxCHWiDBWpRgO65nmSQ5b6FPtac.roa (raw, json)
Hash identifier: gyor+RL/+ugFa4N243Pv+Sq9pqzmxqfMRicFYNm21NA=
Subject key identifier: 77:10:87:5A:20:C1:5A:94:60:3B:AE:67:99:24:39:6F:A1:4F:B5:A7
Certificate issuer: /CN=18886007da1730b0770d8604db73d12fd264f3f9
Certificate serial: 018C03B855A6CFA021599426ECAB210185BA
Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/dxCHWiDBWpRgO65nmSQ5b6FPtac.roa
Signing time: Fri 24 Nov 2023 23:44:21 +0000
ROA not before: Fri 24 Nov 2023 23:44:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57494
IP address blocks: 213.171.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:03:b8:55:a6:cf:a0:21:59:94:26:ec:ab:21:01:85:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9
Validity
Not Before: Nov 24 23:44:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7710875a20c15a94603bae679924396fa14fb5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:42:9d:42:0f:1b:e2:53:d8:95:19:45:60:bf:
e3:c6:50:dc:bd:24:5b:6c:32:ca:d9:d2:31:1f:95:
c6:26:ca:2e:84:e2:44:59:01:90:f6:96:ea:10:80:
ee:7e:3b:0b:df:0a:04:30:ad:3f:35:52:41:d7:d5:
47:00:98:d5:ee:73:68:db:d3:f0:9c:2b:ba:f6:80:
77:d3:f6:32:83:77:37:28:c2:7f:98:8d:a1:88:1b:
f4:bc:bb:e5:07:f4:74:79:00:e3:57:1b:5e:a2:9b:
2f:d5:01:53:a7:31:01:6d:a5:2c:2f:86:6b:4b:45:
d6:f2:0b:26:74:83:51:97:ce:41:56:54:4d:ef:0b:
58:c4:3a:0a:a5:9d:92:46:37:ed:28:e2:77:1c:94:
6c:6b:18:57:94:0f:6c:d2:36:ae:12:96:d0:bd:39:
d8:e0:44:6c:ed:3e:28:f2:f9:58:6e:46:38:ef:a1:
cd:b7:b4:f1:62:ee:96:0f:92:6f:57:f2:70:13:ed:
24:db:83:5d:5e:dc:d6:36:1b:26:3f:23:ab:6f:38:
e7:0a:4a:f8:62:e2:6c:10:a3:37:cb:e0:64:a7:fe:
b5:32:83:a3:4d:bb:0b:9e:03:90:1e:7b:a0:1a:e5:
5f:f0:b7:a5:63:41:18:b4:42:86:15:06:ee:6b:b4:
cb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:10:87:5A:20:C1:5A:94:60:3B:AE:67:99:24:39:6F:A1:4F:B5:A7
X509v3 Authority Key Identifier:
keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/dxCHWiDBWpRgO65nmSQ5b6FPtac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.171.15.0/24
Signature Algorithm: sha256WithRSAEncryption
20:c9:fb:06:f6:99:af:c4:e5:80:14:d0:d1:51:bc:18:7e:16:
10:8a:e6:0a:a0:7b:28:16:6a:ee:4d:41:5d:bd:5a:ad:5e:ba:
00:44:bd:20:5a:ec:1d:97:54:10:fa:1a:ac:c9:50:1e:30:c4:
0f:11:3c:a8:e2:06:7e:9c:3e:76:88:3e:af:43:de:2f:3e:3f:
c8:41:0f:f0:5d:9c:49:fb:7b:48:22:8f:9f:d5:26:95:a2:3e:
76:39:93:ec:d9:22:fc:74:54:6e:97:48:4b:80:d3:e2:2e:bb:
d7:fb:2a:0b:ee:d9:64:31:29:c0:b7:f5:cd:5c:27:9e:a3:b4:
26:3a:dd:5d:03:b5:3c:5e:93:0e:fc:5c:f4:ed:a0:da:e3:13:
97:fb:85:b7:9b:71:64:9f:fd:41:e5:c8:51:84:6a:1f:cd:b4:
f4:fa:ac:6f:6e:cf:88:51:95:69:91:bd:ea:24:07:e5:4b:aa:
c5:14:23:d6:29:6a:fe:08:b0:b0:a9:5c:39:61:44:04:2a:ad:
67:6e:45:73:a3:6c:50:24:a2:a7:fc:73:02:8c:9e:eb:e5:1c:
93:3f:98:c2:1a:85:2f:3d:5f:83:4b:f7:ef:dd:5f:f8:7b:dd:
3d:74:fc:94:79:4c:2b:43:16:55:d8:d1:05:cb:d6:d3:e5:2e:
73:ef:01:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:16 2024 by rpki-client on console-ams.rpki-client.org