Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/9OVT9uffn8Fn339QVB8VYrxR4C4.roa
File: 9OVT9uffn8Fn339QVB8VYrxR4C4.roa (raw, json)
Hash identifier: 1ofncr1gnLW6787MtNwbi6otsKXAuHwbn6u/ZNwnNVc=
Subject key identifier: F4:E5:53:F6:E7:DF:9F:C1:67:DF:7F:50:54:1F:15:62:BC:51:E0:2E
Certificate issuer: /CN=808c3a6c5cbff0739e438d05744405b16197b15b
Certificate serial: 01867CDBAF0D2AD98466D617A1FD080E3F1C
Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/9OVT9uffn8Fn339QVB8VYrxR4C4.roa
Signing time: Thu 23 Feb 2023 06:00:17 +0000
ROA not before: Thu 23 Feb 2023 06:00:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41820
IP address blocks: 213.109.82.0/24 maxlen: 24
213.109.80.0/24 maxlen: 24
213.109.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7c:db:af:0d:2a:d9:84:66:d6:17:a1:fd:08:0e:3f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b
Validity
Not Before: Feb 23 06:00:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4e553f6e7df9fc167df7f50541f1562bc51e02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:43:27:c0:80:da:51:52:00:3a:c7:e2:72:c5:
3d:9b:eb:6d:32:1f:2c:e6:37:a7:60:79:a9:d7:71:
35:1e:fe:86:a0:c4:a1:86:40:28:9a:5f:9a:d0:60:
b5:bc:96:75:39:ec:18:77:4c:1e:7b:7c:c1:d1:f6:
78:b7:a3:26:78:89:34:38:d2:18:b5:53:3f:d2:13:
92:35:45:59:85:21:ef:fb:24:28:e8:c1:9a:7f:cb:
94:a9:ee:9f:37:80:c2:5b:f9:77:38:7a:a1:b6:eb:
03:06:0f:5d:64:28:65:b9:51:a9:46:be:81:08:e9:
65:8b:47:76:eb:e1:d4:57:86:8d:dc:77:b4:1e:c6:
36:3a:3f:72:0b:86:38:a8:87:22:b1:cc:df:0d:5a:
6b:06:61:80:2f:42:0f:29:8b:b9:72:84:1d:d0:4e:
9f:a7:f9:c5:f7:b5:22:05:11:22:0f:88:92:2c:21:
33:f3:02:6c:75:50:34:dc:39:42:b4:9a:03:2d:6c:
3a:1e:0b:a7:91:47:b4:22:a5:d2:25:72:38:19:79:
9c:0a:1e:06:a5:c9:a5:62:7d:94:0f:eb:4c:1f:86:
82:30:4c:3a:9e:c5:44:ec:72:48:d8:43:9f:c0:fb:
48:e0:b5:b2:ff:32:29:0f:48:85:da:1b:de:8f:7e:
d6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E5:53:F6:E7:DF:9F:C1:67:DF:7F:50:54:1F:15:62:BC:51:E0:2E
X509v3 Authority Key Identifier:
keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/9OVT9uffn8Fn339QVB8VYrxR4C4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.80.0/24
213.109.82.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:9d:d0:f6:c8:23:85:a1:10:83:84:f1:e7:63:c2:ec:71:83:
98:4e:a1:c2:50:d4:9f:6f:ec:f1:14:4e:9b:8c:37:3c:66:7e:
1d:69:fe:e9:c3:86:f8:ef:37:a0:93:1d:20:4c:fd:c5:e9:52:
e2:20:f6:d2:de:da:8a:79:7f:31:a6:47:a0:8a:27:77:32:e0:
b6:b4:2f:a2:b7:23:71:54:f1:7d:21:6d:57:aa:38:a4:64:5c:
71:71:1e:6e:9d:81:b2:1d:4b:24:1e:82:e0:55:b8:78:40:8c:
e1:c1:01:25:15:18:06:c0:b9:b2:ab:6a:70:07:02:a7:0a:4f:
60:bf:03:3f:18:c8:41:b9:87:47:8b:e6:bf:97:98:96:a8:81:
44:4b:fb:76:7a:5b:d9:65:02:cb:38:79:d4:a9:43:a5:fe:a3:
25:af:6a:7b:3c:02:d3:ef:b1:3a:ac:92:43:2e:e5:32:0f:a3:
fb:51:04:aa:74:3f:70:67:b4:8c:42:fd:21:95:9b:f4:9c:87:
10:96:68:09:85:a0:16:97:cd:8a:df:a1:ab:d5:da:05:fb:3c:
cc:43:d1:c7:91:36:1e:0f:75:f8:77:ce:43:1b:40:de:1d:ac:
13:98:91:5b:ad:19:0a:2e:20:4c:a5:2e:08:28:dc:4f:bd:d1:
c7:87:fc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:29 2024 by rpki-client on console-fra.rpki-client.org