Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/CoLpRi8s5_9gF56nH_VfZUDk9HY.roa
File: CoLpRi8s5_9gF56nH_VfZUDk9HY.roa (raw, json)
Hash identifier: +3gNJdGY3XaQ311xhsYsH2sbnsBdRNcXTJD1f0jL2hU=
Subject key identifier: 0A:82:E9:46:2F:2C:E7:FF:60:17:9E:A7:1F:F5:5F:65:40:E4:F4:76
Certificate issuer: /CN=7a05ea59805f94be185282039bbae2fa8a9253f5
Certificate serial: 018570D4F4F22F1427E28773C12C67FF8490
Authority key identifier: 7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/CoLpRi8s5_9gF56nH_VfZUDk9HY.roa
Signing time: Mon 02 Jan 2023 04:54:42 +0000
ROA not before: Mon 02 Jan 2023 04:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39479
IP address blocks: 213.187.10.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d4:f4:f2:2f:14:27:e2:87:73:c1:2c:67:ff:84:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a05ea59805f94be185282039bbae2fa8a9253f5
Validity
Not Before: Jan 2 04:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a82e9462f2ce7ff60179ea71ff55f6540e4f476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c9:3a:fb:3e:1e:3f:98:9b:52:28:3f:68:c5:
9f:8e:3b:03:1b:5f:51:a9:0d:9c:1e:53:f4:61:50:
e4:eb:a5:64:4f:0c:d6:08:bb:87:c4:e1:3e:80:39:
8d:c7:d4:6b:22:68:49:39:cd:68:f4:30:ca:2a:74:
06:09:bf:82:77:50:60:68:6b:50:4f:a4:14:d7:c6:
9a:59:24:bf:59:a8:11:25:cd:ec:59:36:3e:37:df:
60:6c:83:ce:a7:16:c8:6a:f9:03:2e:5e:85:7b:60:
32:fe:a4:01:c1:f1:8e:da:b3:ec:79:db:37:f5:4d:
5e:88:93:83:80:11:c6:2e:dd:71:73:30:f9:f5:0c:
ea:2c:88:02:6b:31:a3:a5:cc:76:3d:41:06:15:70:
ca:85:b7:dc:a6:0a:44:3d:17:d9:52:f4:4b:fb:a9:
4e:f3:fd:ff:cd:bd:ca:b7:ee:e2:a6:8a:44:fa:1c:
9b:8f:0d:73:64:4f:53:82:80:3f:1c:32:9f:e0:fc:
8c:14:23:bf:40:29:84:29:04:66:28:29:1f:e3:fe:
86:6d:23:2c:ef:01:21:94:24:50:58:cc:0c:91:ab:
4f:3d:eb:9b:f4:d4:89:61:83:2d:bf:20:a1:d0:81:
d9:de:8b:78:27:34:dd:66:d9:c8:aa:61:8d:6b:12:
05:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:82:E9:46:2F:2C:E7:FF:60:17:9E:A7:1F:F5:5F:65:40:E4:F4:76
X509v3 Authority Key Identifier:
keyid:7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/CoLpRi8s5_9gF56nH_VfZUDk9HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.187.10.0/23
Signature Algorithm: sha256WithRSAEncryption
10:da:f1:c8:cb:46:4f:49:16:29:ee:f1:08:49:44:83:09:f0:
75:3f:13:df:0a:2d:7c:3f:52:c0:8d:e4:b4:47:67:6f:95:52:
70:9f:cf:5a:ef:17:c9:1d:99:ef:26:cf:98:d2:2f:78:1a:55:
ba:6f:ae:75:7a:23:4c:59:27:99:22:01:24:3f:fa:91:e5:5e:
62:86:0a:7d:2e:cd:42:99:36:62:52:73:52:20:21:ec:cd:aa:
cc:b3:21:12:d0:da:f3:63:d9:3e:a1:21:82:0f:9b:4d:1c:80:
c9:17:92:48:b6:7d:6b:06:a7:87:e5:86:44:f0:60:82:cd:d5:
14:bb:8e:55:b1:a9:f5:be:19:68:d1:fa:9a:4a:a0:d4:80:79:
37:aa:23:83:b4:97:a3:e8:84:8f:08:2b:e5:9b:25:ac:6f:9b:
7a:02:84:f8:ff:73:34:8b:49:29:36:db:03:42:56:3f:d0:19:
c2:3a:3d:df:16:2d:f4:77:23:6b:7b:fe:4e:21:02:bd:d4:ca:
de:72:37:58:48:87:81:e4:8f:8b:ad:51:48:c7:20:73:eb:1a:
76:7a:71:2c:49:d3:1d:5d:79:6c:3c:42:33:52:47:5d:d1:d3:
57:53:0d:1f:4d:6b:52:68:03:2d:35:48:34:a5:54:ec:29:57:
2f:25:92:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:20 2024 by rpki-client on console-fra.rpki-client.org