Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/DIojPnpJvyTZKldpEyAeI8r_-lk.roa
File: DIojPnpJvyTZKldpEyAeI8r_-lk.roa (raw, json)
Hash identifier: dKmvatdjo0+Kqoex4O87UopZUeweitg3jjC9WYw/rZA=
Subject key identifier: 0C:8A:23:3E:7A:49:BF:24:D9:2A:57:69:13:20:1E:23:CA:FF:FA:59
Certificate issuer: /CN=becec531e5c37756b828663f9cc20ad6217713ac
Certificate serial: 018571832CFD65BEDCF06A3DEB3BC09620B9
Authority key identifier: BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/DIojPnpJvyTZKldpEyAeI8r_-lk.roa
Signing time: Mon 02 Jan 2023 08:05:00 +0000
ROA not before: Mon 02 Jan 2023 08:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33846
IP address blocks: 164.133.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:2c:fd:65:be:dc:f0:6a:3d:eb:3b:c0:96:20:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becec531e5c37756b828663f9cc20ad6217713ac
Validity
Not Before: Jan 2 08:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c8a233e7a49bf24d92a576913201e23cafffa59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:07:4b:e7:51:28:c1:e6:19:9f:74:d3:59:a9:
48:f2:b3:90:53:20:4b:14:2c:95:9d:1e:40:fb:cf:
f0:ac:83:14:4d:c5:b5:b9:31:d1:f0:4e:34:6e:23:
64:64:ae:8c:e9:b3:00:ae:ec:15:1f:7b:5d:66:b8:
78:a7:b3:72:f9:35:b0:13:6f:79:4b:3e:07:a3:11:
a7:a4:57:59:17:b2:29:27:80:ea:53:ef:25:14:90:
79:34:c6:f2:ec:bb:29:82:9e:1c:75:00:c4:d5:3e:
6e:24:d1:bf:32:0f:e4:68:42:4f:c5:80:60:05:d0:
a7:63:36:1f:33:e3:93:67:82:f0:b5:b9:ea:5f:aa:
fe:ae:09:06:71:52:38:64:a1:c9:b6:43:ea:cd:a9:
67:2a:a7:65:d2:56:3c:87:04:60:e5:7d:d4:4c:9a:
b8:ae:39:cb:2a:b7:40:77:47:49:da:50:6e:92:58:
1d:c8:b7:1f:ea:a1:9a:bc:8e:66:ff:49:f1:eb:3a:
8e:c0:3b:dd:19:99:59:3a:29:3b:32:0c:09:20:3b:
43:1a:0c:fd:f5:d0:8c:30:3d:a9:b8:17:c3:34:4d:
11:13:72:bd:d5:33:e0:07:66:63:eb:8b:bc:40:81:
a1:51:f7:5a:75:9a:e6:c5:04:5d:81:fd:e5:cf:09:
9d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8A:23:3E:7A:49:BF:24:D9:2A:57:69:13:20:1E:23:CA:FF:FA:59
X509v3 Authority Key Identifier:
keyid:BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/DIojPnpJvyTZKldpEyAeI8r_-lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.133.230.0/24
Signature Algorithm: sha256WithRSAEncryption
11:36:10:4a:06:4d:d4:9d:6b:a4:1a:c4:12:8f:74:f4:1f:a2:
29:52:1c:d1:91:e2:6c:85:b0:f0:34:c6:89:9f:df:1d:e3:d4:
ef:d8:0e:a1:9f:f5:6e:f5:d3:7e:0b:ab:06:64:57:bf:40:13:
52:c3:1d:3f:3d:7f:db:2b:55:ed:e3:2f:54:f2:8a:94:cd:12:
1a:d7:ad:85:21:a9:28:34:ff:03:01:0c:4c:eb:88:c6:9e:75:
ba:3c:97:ea:ba:99:65:6d:2e:18:25:66:89:30:dc:49:82:6f:
23:78:0f:f8:70:59:40:cd:f4:2f:29:bf:38:77:d8:ce:82:d9:
e4:68:f8:16:e5:76:95:da:7e:52:72:d1:6d:f3:95:3a:c9:00:
38:17:9d:02:2a:4b:34:d7:62:f7:51:91:92:32:e6:16:f3:35:
51:ba:38:ec:1f:ee:37:77:96:e1:d5:60:fd:8b:67:e7:cf:9d:
22:6d:6a:90:37:05:09:b1:df:80:d7:9f:fc:ce:80:58:ee:4b:
3c:67:17:6a:e0:8e:eb:04:d1:1b:20:2a:fd:c2:4e:6e:fc:1d:
1a:53:70:c5:cf:70:3b:4f:c9:69:06:4d:67:2e:25:ba:f3:06:
e7:81:5e:80:f6:de:3f:26:48:a6:4d:84:0f:73:61:72:8f:5b:
ba:fe:36:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:21 2024 by rpki-client on console-fra.rpki-client.org