Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/J8cL2dhMFD5WZU2m6jWtx4aYQ5M.roa
File: J8cL2dhMFD5WZU2m6jWtx4aYQ5M.roa (raw, json)
Hash identifier: Nu6oDzhYSG1TOdNKfZRyq56EdU20e6KT5zJpKLj5s/Q=
Subject key identifier: 27:C7:0B:D9:D8:4C:14:3E:56:65:4D:A6:EA:35:AD:C7:86:98:43:93
Certificate issuer: /CN=808c3a6c5cbff0739e438d05744405b16197b15b
Certificate serial: 01856F14D41D59E3FBD5F7D1E695B4D39D2A
Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/J8cL2dhMFD5WZU2m6jWtx4aYQ5M.roa
Signing time: Sun 01 Jan 2023 20:45:13 +0000
ROA not before: Sun 01 Jan 2023 20:45:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201184
IP address blocks: 213.109.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:d4:1d:59:e3:fb:d5:f7:d1:e6:95:b4:d3:9d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b
Validity
Not Before: Jan 1 20:45:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27c70bd9d84c143e56654da6ea35adc786984393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:82:44:c7:ed:f7:2d:de:b0:82:ee:1b:89:35:
1d:0f:7d:91:4e:7e:9b:28:e3:81:dd:ce:3b:19:40:
d7:31:df:89:d6:12:2b:24:6a:03:45:9b:0c:0b:e0:
fd:9e:b1:78:84:a9:59:ac:cd:b6:4e:6a:f8:09:18:
aa:6d:e5:ce:2a:26:48:a5:20:f7:0e:73:4f:20:7e:
42:7e:5b:4d:41:4b:e3:c7:10:54:b8:31:f6:bb:b2:
5f:9b:f6:4f:2f:e1:46:e3:49:8f:b7:d9:e8:0a:59:
99:35:02:37:9d:97:2b:31:8e:0f:b0:b5:cb:47:c1:
67:3d:06:c7:25:c2:02:54:8b:96:0a:86:8e:4e:98:
c0:e4:27:5b:e4:65:a2:92:43:17:90:34:f8:e5:e4:
a6:5e:9c:ac:da:91:c4:4c:30:5f:65:a1:d1:bd:16:
9d:11:c1:2d:27:85:0c:37:4c:92:2f:d3:77:78:20:
de:b1:de:ab:5e:b0:ab:05:db:49:d8:b2:d2:b9:69:
a7:13:37:2c:d1:ff:99:a7:0f:57:e4:39:c3:5d:5e:
8f:b1:41:11:13:d7:56:1e:28:e2:b8:e2:c1:cd:d2:
05:01:3c:04:cb:37:08:8b:6e:6b:f1:ae:ef:b0:3c:
c7:10:d5:ee:bf:2f:dd:9e:e4:fb:04:68:57:ef:8b:
8c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C7:0B:D9:D8:4C:14:3E:56:65:4D:A6:EA:35:AD:C7:86:98:43:93
X509v3 Authority Key Identifier:
keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/J8cL2dhMFD5WZU2m6jWtx4aYQ5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.81.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ef:20:ab:f0:d8:2d:0f:78:2f:5b:09:27:a7:62:4e:ee:8e:
51:f6:09:75:f1:41:0f:d0:49:8f:0f:0b:69:15:b0:74:7f:76:
9a:a7:8b:dd:c5:f5:f7:65:c9:ba:fc:1f:6a:8b:d1:cb:b9:f5:
24:cf:ee:04:38:8c:b2:50:a5:dc:87:16:37:5a:93:35:60:6d:
1d:43:38:83:37:82:1d:7a:a0:86:e9:16:e0:e9:b9:11:89:3e:
31:a1:ef:41:0e:f3:4a:18:ff:c2:9c:a0:e1:58:03:99:b9:e2:
81:b8:5b:f8:e5:63:77:5c:74:c4:2d:aa:67:3e:d0:4b:c7:c1:
a4:c3:e7:94:01:04:76:e5:52:55:1e:4f:8b:d3:ba:5a:13:3e:
89:52:46:98:54:6b:ba:cd:7a:e0:0c:2e:a7:b6:63:aa:a3:b6:
2a:c4:97:07:66:21:88:37:0b:2a:2a:2f:3b:59:75:6c:f4:9b:
f1:49:34:45:3d:93:6f:96:4b:2d:ca:cc:20:85:ba:7b:99:8f:
ac:3a:b7:35:4c:95:95:91:0c:2a:d4:0e:ca:4d:8f:aa:a9:66:
cd:86:78:2f:5b:2e:74:f9:50:f7:5e:c0:e3:6e:31:fc:b7:72:
b5:a7:c0:86:46:94:cb:45:89:b5:73:34:d0:7c:fe:0f:50:6b:
e5:23:37:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:29 2024 by rpki-client on console-fra.rpki-client.org