Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/a_T8T4lQ_oIWTyX0ZgD_u6A5JTo.roa
File: a_T8T4lQ_oIWTyX0ZgD_u6A5JTo.roa (raw, json)
Hash identifier: jAHMw/JJyUEXBAPV/Pi1HD0rUWXfEdKjECIC6uvSGO4=
Subject key identifier: 6B:F4:FC:4F:89:50:FE:82:16:4F:25:F4:66:00:FF:BB:A0:39:25:3A
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 01856F2FE2A9D52E8DF98669B9B37467E953
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/a_T8T4lQ_oIWTyX0ZgD_u6A5JTo.roa
Signing time: Sun 01 Jan 2023 21:14:47 +0000
ROA not before: Sun 01 Jan 2023 21:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43803
IP address blocks: 213.155.176.0/24 maxlen: 24
213.155.182.0/23 maxlen: 23
213.155.188.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:e2:a9:d5:2e:8d:f9:86:69:b9:b3:74:67:e9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Jan 1 21:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bf4fc4f8950fe82164f25f46600ffbba039253a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:31:62:c0:b0:1d:74:98:22:a3:7a:1f:1e:
3f:61:92:07:b1:d3:df:60:1c:36:b1:25:b7:43:ab:
f1:00:06:53:95:1c:db:55:f2:15:57:0a:09:c6:e9:
9c:eb:49:95:8c:8b:a0:c8:c2:a1:65:c0:e3:7d:ce:
3b:11:04:87:7d:61:7e:af:25:53:d6:58:ae:c4:5a:
8d:cb:cc:e2:cf:d5:be:31:80:6a:6c:b6:8e:9f:75:
6b:9c:7a:b4:10:03:8c:43:f0:7d:1b:56:13:6e:5e:
c4:12:63:02:9f:fa:85:96:ca:3b:ee:d1:3c:aa:53:
9d:51:21:12:01:2c:bb:08:e8:1c:f2:65:27:57:25:
64:c5:bb:76:c3:a9:ee:1b:a7:2b:aa:c0:02:ad:e0:
18:d3:1b:80:cc:0a:d7:f5:b4:37:75:a1:45:9a:29:
ab:f8:55:23:29:ca:ca:4c:db:b7:ba:b8:78:f8:20:
a5:5e:95:0a:e3:d8:68:ab:97:bb:91:77:6f:e0:32:
e7:e3:8d:92:d3:b4:14:da:43:bf:9e:18:ab:78:87:
5b:fc:6e:b9:4a:c7:8d:6c:dd:4c:00:44:31:c4:47:
c8:37:8b:d6:89:f3:62:fe:2e:a8:78:6b:8f:04:ce:
76:b9:e3:4d:1b:cb:21:eb:ce:00:ce:f6:39:b9:7a:
cc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F4:FC:4F:89:50:FE:82:16:4F:25:F4:66:00:FF:BB:A0:39:25:3A
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/a_T8T4lQ_oIWTyX0ZgD_u6A5JTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.155.176.0/24
213.155.182.0/23
213.155.188.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:11:c5:e5:8f:94:54:58:14:eb:ed:8d:40:3f:b0:8a:fc:33:
25:a0:a8:ba:3a:55:2c:c8:8a:85:ee:a5:0d:d7:48:e5:86:f5:
7e:1b:04:d2:aa:e5:49:87:3a:72:80:79:45:8b:0e:5e:fd:83:
b2:a2:2f:09:49:4f:8d:70:1f:7b:ff:70:36:64:cd:49:12:66:
4c:79:2e:08:e8:cf:03:e3:e4:5a:be:b7:70:f5:2b:57:0b:63:
b0:55:32:f7:a2:8b:8e:20:ff:9c:c7:a8:7e:fe:26:71:46:b0:
05:7a:d0:61:19:f5:ae:62:f6:18:8b:f3:76:db:57:42:32:35:
c2:a1:3a:df:f9:2e:04:8e:30:cc:62:71:9a:c0:c6:e1:f0:32:
4f:f6:01:34:81:6c:93:30:de:6c:91:99:ef:ae:de:34:a8:0d:
8e:db:a4:de:8a:6c:82:56:37:65:dc:76:18:58:79:f7:69:ec:
98:a5:45:66:ae:cc:ae:1e:83:2b:9b:f7:50:2a:ed:9d:84:d4:
7c:22:e1:64:41:b9:59:ad:4a:51:2c:95:7e:55:bb:c1:ac:27:
37:95:06:34:cb:d0:b5:3e:4e:94:ef:b5:ad:c1:76:e5:ae:df:
56:20:bc:dd:d2:2e:59:77:b0:62:e0:40:c9:30:0f:7f:29:0e:
28:e6:cc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:24 2024 by rpki-client on console-fra.rpki-client.org