Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/s9ZJzxDQXGkBlKkAjaU0lhDhqbA.roa
File: s9ZJzxDQXGkBlKkAjaU0lhDhqbA.roa (raw, json)
Hash identifier: B0IpJtQkedbAjWbRtzlM4m1dpIdW0QQI8lIwyXLyFlo=
Subject key identifier: B3:D6:49:CF:10:D0:5C:69:01:94:A9:00:8D:A5:34:96:10:E1:A9:B0
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 01922E0148E2AB8168C1D7D91EC5B51DFE55
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/s9ZJzxDQXGkBlKkAjaU0lhDhqbA.roa
Signing time: Thu 26 Sep 2024 11:04:48 +0000
ROA not before: Thu 26 Sep 2024 11:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203466
IP address blocks: 213.134.13.0/24 maxlen: 24
2a06:f940:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 09 Nov 2024 10:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2e:01:48:e2:ab:81:68:c1:d7:d9:1e:c5:b5:1d:fe:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Sep 26 11:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3d649cf10d05c690194a9008da5349610e1a9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:4a:23:46:53:c4:4a:fb:3d:10:96:53:a6:
b5:7a:a0:1a:0f:7c:b0:1c:a3:5e:20:f8:4c:1e:f9:
bb:6b:1b:33:ce:cf:18:d3:7f:25:a7:7e:0b:af:d3:
0c:4c:e3:93:9c:10:37:6a:a3:74:69:3a:89:2b:28:
0f:a7:ed:d5:98:de:4e:73:5b:45:95:61:3c:27:3e:
e5:cc:49:bb:7b:1e:f6:16:9a:47:20:70:84:79:2e:
98:bf:ad:11:9b:c9:9c:76:be:a3:75:03:4a:fc:ea:
2b:1a:be:dc:22:d8:22:7f:05:8c:1e:62:46:12:90:
00:2c:fb:f4:07:e7:27:db:ed:18:b6:b1:0f:64:28:
13:d4:93:2f:b2:ed:2b:16:29:2b:4a:bf:97:c8:d5:
8e:bd:9d:73:9e:30:f9:6f:6c:15:27:85:9b:57:b7:
9c:e8:6f:ed:39:55:73:0f:41:10:80:e8:92:59:74:
a9:d5:a5:31:3d:17:ca:02:a0:47:26:3f:b9:4e:9c:
ee:04:73:b4:d5:e9:25:a3:95:52:f8:a1:08:c1:21:
87:d0:0d:73:1f:55:1f:e5:2c:32:de:69:0b:09:87:
f3:51:eb:de:99:4b:c2:e7:08:0a:fe:b0:18:b7:2b:
92:51:11:2d:a8:ef:fb:fe:4c:2f:65:0f:90:80:bf:
e4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D6:49:CF:10:D0:5C:69:01:94:A9:00:8D:A5:34:96:10:E1:A9:B0
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/s9ZJzxDQXGkBlKkAjaU0lhDhqbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.134.13.0/24
IPv6:
2a06:f940:1::/48
Signature Algorithm: sha256WithRSAEncryption
a4:08:35:9b:e1:dd:67:66:b0:61:6d:59:af:87:fc:c1:d7:d6:
82:5d:05:2c:6f:45:b1:1e:eb:98:42:9b:60:28:28:f3:a4:90:
4c:41:5e:69:0e:6a:53:b4:8a:3c:d5:e9:a9:86:79:9a:81:b7:
e1:a0:34:07:8c:bd:45:e6:31:97:38:37:6b:a6:5e:24:2d:13:
b9:d3:08:67:74:a9:b1:6e:58:6d:6d:01:32:d5:cf:7b:1a:5a:
45:f1:4f:e6:fa:7e:d0:7e:93:94:4a:39:0d:a8:71:77:e2:a7:
9f:a7:15:22:fc:5b:12:59:6f:8e:9a:d4:ff:7c:fd:cd:8e:8c:
94:d6:82:0a:4d:33:07:ac:e6:c1:a2:b7:cc:28:46:55:69:bb:
f5:33:0b:51:7b:9d:e0:7b:04:10:77:25:8e:c5:08:87:fd:ba:
9e:7c:d5:9e:94:b0:8d:fb:27:5d:2c:57:93:89:6b:96:12:62:
13:02:44:a0:c1:66:fe:52:3d:70:31:9e:90:b0:55:52:b7:b6:
53:bc:e6:5e:37:e1:80:83:9c:83:f4:28:cc:8f:df:0f:70:06:
9e:01:5c:80:7f:26:1a:f6:f0:cb:f4:81:1d:4e:48:97:bd:b2:
3c:0f:94:a9:11:9c:30:f9:f7:54:75:30:ce:fa:b1:c1:04:d1:
6f:9e:1f:c2
-----BEGIN CERTIFICATE-----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Generated at Sat Nov 9 13:42:22 2024 by rpki-client on console-fra.rpki-client.org