Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/KdbpwbaO_m74E7M-qjNQF8OKQh0.roa
File: KdbpwbaO_m74E7M-qjNQF8OKQh0.roa (raw, json)
Hash identifier: ouJyAUE69Et9Z5T4aHWl8Z1peJngcAiuzsrhHzLo6Pk=
Subject key identifier: 29:D6:E9:C1:B6:8E:FE:6E:F8:13:B3:3E:AA:33:50:17:C3:8A:42:1D
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01912188E295C9078F76E90F9757DACFC05F
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/KdbpwbaO_m74E7M-qjNQF8OKQh0.roa
Signing time: Mon 05 Aug 2024 07:55:04 +0000
ROA not before: Mon 05 Aug 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215287
IP address blocks: 213.145.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 05:56:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:21:88:e2:95:c9:07:8f:76:e9:0f:97:57:da:cf:c0:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Aug 5 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29d6e9c1b68efe6ef813b33eaa335017c38a421d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:59:53:10:08:86:05:48:38:a1:4d:83:f2:41:
f2:02:b4:99:36:26:d4:2b:55:9a:34:44:9f:59:25:
c7:3e:0e:42:c1:9e:2b:ee:b2:20:63:ba:d8:36:ae:
a7:52:37:8f:d2:5d:df:16:7a:fd:2b:1a:cd:4d:1f:
6a:b6:de:67:e0:90:04:28:75:29:e5:71:eb:cf:17:
07:a0:d0:b0:4a:30:78:f9:8d:66:3e:b7:70:50:ba:
9a:f2:5c:3f:1b:5f:79:5f:4a:4c:d5:c9:ec:6b:c3:
37:1c:e3:d6:dc:f9:62:c0:6b:2e:9b:a0:bf:3e:2c:
0e:9c:df:b6:16:a3:50:e6:4d:91:98:96:28:71:a7:
34:8f:43:a5:15:5b:21:75:11:19:a5:a7:13:0d:2a:
0f:39:4d:72:2e:44:bd:26:e8:c9:57:60:11:f4:7c:
42:2f:4f:11:32:64:77:24:20:54:47:f8:68:85:49:
f3:38:08:e8:98:81:38:d4:2c:89:89:74:11:e0:58:
64:e8:19:ba:1d:ce:ce:85:3b:d5:f0:06:8c:df:0a:
85:f2:93:2d:07:f2:34:e0:f3:f2:72:54:b9:e0:19:
e1:a7:3e:cb:4b:26:77:ec:04:38:7d:9b:88:b2:d6:
64:c1:7e:59:96:87:5c:0c:f4:58:57:7f:59:13:0d:
2d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D6:E9:C1:B6:8E:FE:6E:F8:13:B3:3E:AA:33:50:17:C3:8A:42:1D
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/KdbpwbaO_m74E7M-qjNQF8OKQh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.71.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:6e:79:25:14:fd:ec:16:05:19:3b:b0:2c:e1:71:c6:11:0d:
05:37:10:9b:08:b8:d3:74:7f:c8:08:a7:8e:02:2d:b6:0a:17:
c2:54:d8:2f:15:63:69:63:00:cd:a6:25:13:55:71:a2:16:76:
12:92:1d:3a:0a:e0:b3:a5:57:d5:57:97:b0:0a:24:2c:25:33:
0a:44:b9:03:1a:4f:18:06:00:18:6d:9c:d7:53:6c:55:55:3c:
05:a1:6d:69:09:5f:04:f1:b5:27:04:08:a5:52:3c:db:31:29:
f9:ba:67:03:50:fa:1f:90:2a:63:55:5d:4b:77:ff:0b:b5:d9:
ca:06:62:e4:82:12:96:8f:a5:73:14:fc:01:3a:36:2f:7e:86:
d2:4a:cf:10:a1:66:a8:30:ca:3c:ff:f8:10:13:49:0e:95:f7:
a5:30:a9:bb:e4:04:6c:54:d7:25:c5:a9:2c:ee:ff:17:1f:d0:
91:34:80:f6:bd:da:6f:10:9c:20:f1:bc:9c:aa:88:f6:0b:77:
24:97:5c:9b:2c:98:49:6c:81:8b:07:86:8b:a7:79:5d:b6:7c:
44:30:f5:a1:76:73:28:37:4d:ab:b7:80:83:70:45:7a:f0:8b:
68:b6:47:36:47:d0:63:f6:60:b9:c8:1e:d7:96:e7:fc:e9:fd:
ba:78:50:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 08:09:13 2024 by rpki-client on console-ams.rpki-client.org