Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/DtP6Fs-HiVxDeF3kI-sw6pUUnUw.roa
File: DtP6Fs-HiVxDeF3kI-sw6pUUnUw.roa (raw, json)
Hash identifier: cGyb2difzzgva4MAzNnkLkuEgco5N0Vkmcfa1nWnBMY=
Subject key identifier: 0E:D3:FA:16:CF:87:89:5C:43:78:5D:E4:23:EB:30:EA:95:14:9D:4C
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 018B84FFCE6EB47FFEFF1ABF5085D4A95FEA
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/DtP6Fs-HiVxDeF3kI-sw6pUUnUw.roa
Signing time: Tue 31 Oct 2023 09:10:38 +0000
ROA not before: Tue 31 Oct 2023 09:10:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9087
IP address blocks: 213.145.76.0/23 maxlen: 23
213.145.72.0/23 maxlen: 23
213.145.78.0/23 maxlen: 23
213.145.90.0/23 maxlen: 24
213.145.92.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:84:ff:ce:6e:b4:7f:fe:ff:1a:bf:50:85:d4:a9:5f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Oct 31 09:10:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ed3fa16cf87895c43785de423eb30ea95149d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:15:e7:2f:b6:52:1a:f1:98:f9:2d:f4:f6:
c7:b8:b0:36:2e:0e:ee:33:1d:cf:01:ba:ae:d0:ce:
4a:01:11:9f:e9:e3:d9:8c:b4:57:45:29:21:93:6e:
8a:6b:b8:3a:b3:21:fe:51:67:51:55:23:60:cc:3f:
7e:6f:e1:bf:06:3d:9d:fd:be:0e:bf:d5:d1:79:3a:
e9:38:62:e8:32:06:96:78:75:6a:1d:67:84:de:90:
af:c2:ce:f2:9b:46:6c:5a:a0:1d:ae:bb:65:73:07:
4f:ae:d8:f5:04:26:31:c8:1a:2d:b3:6f:1c:88:4f:
b3:86:df:df:4b:4d:25:a2:30:0b:8f:d7:f6:7e:4f:
73:64:82:25:8c:c2:65:14:cb:81:9a:3e:e9:87:96:
ba:80:83:cb:cf:36:7a:4d:7b:94:09:a0:6c:7b:3e:
be:e8:e5:14:be:cd:b9:81:1b:a4:4b:ad:6f:0e:46:
61:cc:4f:a2:18:59:e5:90:ad:aa:13:eb:d4:b2:f7:
cd:b5:3c:ce:be:a8:64:4b:d0:c5:17:f4:d4:c6:20:
1d:8a:13:a2:8a:31:7f:53:f4:bd:9d:1c:39:aa:82:
7b:fe:ba:c6:c5:ed:f0:62:a4:e1:49:00:f4:1e:77:
f2:b6:46:1b:5d:2c:b6:36:da:fb:90:dd:f3:6f:3e:
d2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D3:FA:16:CF:87:89:5C:43:78:5D:E4:23:EB:30:EA:95:14:9D:4C
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/DtP6Fs-HiVxDeF3kI-sw6pUUnUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.72.0/23
213.145.76.0/22
213.145.90.0-213.145.93.255
Signature Algorithm: sha256WithRSAEncryption
48:cd:5c:c7:c2:d8:87:5f:eb:00:0a:77:54:e8:0a:3a:49:d1:
76:c6:7f:d5:86:db:b9:bd:e3:c4:b9:2e:f8:42:90:3f:fd:e9:
4b:19:a7:61:12:0c:e0:6f:75:4d:a3:9d:01:ad:13:87:2a:69:
47:7b:9b:a6:de:42:59:e2:4d:2b:ce:df:90:09:5e:b1:b5:ef:
01:36:65:e6:4a:17:3a:b6:9f:54:6e:41:77:c3:c6:6a:d0:ce:
6c:23:1d:c8:73:bf:ba:79:25:c3:2d:fe:69:f3:2c:83:e6:06:
6a:16:f2:a9:65:9a:c6:01:64:dc:ea:f2:97:47:0f:d7:ea:a2:
8a:61:69:03:80:e5:c6:3b:2b:e5:13:b7:d1:61:08:5d:28:9a:
2f:60:7c:94:29:7c:1a:04:fd:bc:87:37:ac:1d:83:08:61:a0:
9f:0c:cb:11:be:cf:de:d7:50:47:71:56:61:5f:33:0a:2b:eb:
18:a8:64:6c:35:95:c2:42:8d:13:20:11:f6:6a:40:7d:a7:ee:
2f:9b:06:f4:68:a4:75:5f:95:54:db:8b:81:57:13:f6:55:3b:
35:31:ad:36:20:a7:b8:3c:73:60:c3:d2:c8:f7:61:78:29:2f:
c4:0d:c9:70:a4:4f:f3:e7:91:ce:14:49:01:53:18:25:08:7f:
04:39:1d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:06 2024 by rpki-client on console-fra.rpki-client.org