Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/0hDsWLXFoXSVisclAA19WPo0Obs.roa
File: 0hDsWLXFoXSVisclAA19WPo0Obs.roa (raw, json)
Hash identifier: 2o9hFImjtath6SegiFQyS+gg+a0/Kq+5LYqiL2XmiXA=
Subject key identifier: D2:10:EC:58:B5:C5:A1:74:95:8A:C7:25:00:0D:7D:58:FA:34:39:BB
Certificate issuer: /CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Certificate serial: 018C86D79C0FF75B584EE2915185A1D88343
Authority key identifier: 12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/0hDsWLXFoXSVisclAA19WPo0Obs.roa
Signing time: Wed 20 Dec 2023 10:48:46 +0000
ROA not before: Wed 20 Dec 2023 10:48:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48988
IP address blocks: 213.148.0.0/20 maxlen: 24
213.148.24.0/22 maxlen: 24
2a13:8280::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:d7:9c:0f:f7:5b:58:4e:e2:91:51:85:a1:d8:83:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Validity
Not Before: Dec 20 10:48:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d210ec58b5c5a174958ac725000d7d58fa3439bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:73:a3:e0:e8:f3:51:b4:1c:35:c3:f4:08:70:
23:2a:a6:19:82:e9:47:ec:2c:cb:ed:5e:7e:82:71:
52:dc:73:87:19:cc:bc:f4:58:14:19:88:42:2a:52:
e9:2a:91:d6:a7:5b:88:6c:72:7a:a7:c4:de:4e:bd:
cc:b2:08:51:85:cd:88:52:fa:9c:31:92:e2:3b:58:
75:72:8b:ab:a8:b1:22:13:e3:33:7b:5e:c8:1e:9f:
38:38:0e:2a:e1:ec:d8:9c:7d:7a:98:53:11:80:e5:
90:ca:f4:03:a4:13:0d:32:ef:3b:0b:bf:ed:2d:68:
c3:4d:5a:41:ad:b9:20:08:c6:57:e6:3f:3e:61:eb:
99:75:97:94:5e:d3:95:4f:0f:61:c0:3b:80:71:e4:
9b:eb:d4:be:dd:ce:fd:73:fe:33:b7:90:bb:23:9f:
d8:97:f2:74:c7:0f:e4:33:22:56:af:fd:bd:71:50:
d5:6b:bb:fc:43:76:fc:2c:cc:ff:3b:72:f1:82:af:
d6:98:56:e9:54:1a:8f:26:12:6e:3f:30:63:87:b7:
c7:f6:59:de:30:21:a3:a8:8f:e7:62:66:5e:ea:7d:
fd:0b:89:c7:f4:69:78:ae:22:39:23:2c:55:7b:23:
bc:2e:be:5a:49:7f:4f:5c:77:c0:3f:7d:b6:7e:d4:
12:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:10:EC:58:B5:C5:A1:74:95:8A:C7:25:00:0D:7D:58:FA:34:39:BB
X509v3 Authority Key Identifier:
keyid:12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/0hDsWLXFoXSVisclAA19WPo0Obs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.148.0.0/20
213.148.24.0/22
IPv6:
2a13:8280::/32
Signature Algorithm: sha256WithRSAEncryption
0f:3d:9e:cd:d9:d7:7d:36:7c:26:63:7d:c5:79:45:3a:07:ad:
f5:53:2d:44:d0:38:68:43:e0:85:39:64:45:a8:fe:b8:20:69:
d7:a4:bc:a7:d0:d0:ea:b9:68:5d:5e:67:bd:1f:ca:52:ab:a1:
88:89:b7:64:18:87:9f:40:88:4a:ab:b3:c2:84:88:9d:fc:a1:
12:17:f6:b3:4b:fd:1a:34:0b:09:54:c8:bb:f4:29:4a:d2:88:
4b:c8:98:a7:8e:9c:54:67:8c:00:28:43:6b:49:14:dd:91:47:
5d:81:57:66:83:f7:ae:05:22:f4:cd:4a:87:c8:f2:07:e2:1d:
34:98:6c:a1:12:5c:0b:e1:8e:5e:67:02:de:8a:ea:13:a2:65:
81:6d:93:c0:f8:2f:7f:30:e4:1f:ca:5d:32:d6:3f:b2:b6:83:
fa:53:c1:b9:70:7b:d5:d3:90:ed:df:39:4c:bb:7a:39:02:8e:
ab:0d:ea:2a:14:90:b7:86:47:66:0c:64:2a:ea:7f:f0:f2:a1:
24:f6:29:4f:5b:b8:41:70:35:cc:b5:85:28:31:fd:12:47:50:
19:39:e7:8d:71:8d:ba:0c:26:11:aa:9f:50:19:0d:6b:74:7c:
f2:8c:6a:21:a5:34:8a:a5:4d:65:87:92:a0:69:0d:ec:b6:fa:
7d:35:a4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:48 2024 by rpki-client on console-fra.rpki-client.org