Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/M_ZdTDBoS0krRHZSOjxtxr4zBW8.roa
File: M_ZdTDBoS0krRHZSOjxtxr4zBW8.roa (raw, json)
Hash identifier: 87joWZKrRK6ldRmR/rWfZIc7zP28kupu+2Jl3T5IyAg=
Subject key identifier: 33:F6:5D:4C:30:68:4B:49:2B:44:76:52:3A:3C:6D:C6:BE:33:05:6F
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 018885019093D75C9C6101DBB570E61D186C
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/M_ZdTDBoS0krRHZSOjxtxr4zBW8.roa
Signing time: Sun 04 Jun 2023 06:04:12 +0000
ROA not before: Sun 04 Jun 2023 06:04:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 213.145.72.0/21 maxlen: 21
Validation: Failed, certificate revoked on Sun 04 Jun 2023 10:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:85:01:90:93:d7:5c:9c:61:01:db:b5:70:e6:1d:18:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jun 4 06:04:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33f65d4c30684b492b4476523a3c6dc6be33056f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3b:04:3d:6b:9a:fb:d4:0d:90:77:92:25:b6:
e8:32:03:60:a2:4a:7e:dc:03:07:ab:95:69:9a:ab:
0d:04:19:df:c8:46:3d:97:6b:d3:9c:6f:1b:2b:92:
30:01:e2:4f:e1:f0:19:8b:7b:42:a2:91:44:0b:11:
ae:32:7e:f9:3f:90:51:69:10:f3:c2:c5:0a:61:da:
1c:d9:30:83:2f:cc:c0:44:81:c3:34:a1:f4:0a:67:
42:8d:8b:a4:8d:51:74:32:8d:48:d8:10:3c:d0:fb:
d7:c9:96:86:71:50:5c:36:61:db:68:69:58:fd:a0:
44:aa:96:d4:2d:93:e2:e0:e3:ca:d4:2e:e9:e9:cd:
1b:aa:12:54:08:7e:15:b9:07:cf:a4:ca:79:9a:ef:
f1:c4:53:98:4e:80:e7:a3:3e:49:bb:43:53:ee:b0:
68:f8:ba:95:a2:1e:dd:11:e8:ac:ee:cc:b3:04:e8:
30:5e:38:b1:f1:de:b3:39:91:27:b5:8c:bb:5c:b0:
62:5d:a3:8c:d9:81:2d:ad:18:9a:18:00:ab:d7:c5:
67:27:88:d0:29:3d:c6:f9:fb:81:af:e7:33:05:90:
37:e6:2f:f3:bc:f3:2f:bd:1c:2e:84:16:cd:33:26:
5e:a5:2f:d0:54:30:ac:93:9a:5a:ad:7b:ff:65:30:
73:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F6:5D:4C:30:68:4B:49:2B:44:76:52:3A:3C:6D:C6:BE:33:05:6F
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/M_ZdTDBoS0krRHZSOjxtxr4zBW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
e1:95:9c:56:44:db:f5:a0:a8:b6:c6:66:50:7d:a3:67:05:09:
d2:07:bc:e6:58:1c:e8:0f:db:a5:c5:ed:df:44:52:e3:b2:86:
05:7d:86:a5:5d:9a:70:5a:ba:1b:d1:27:c9:49:b5:be:b0:34:
8b:e7:10:d5:3a:4a:dc:e8:94:ba:8b:25:85:96:77:a1:d2:02:
7e:8b:ed:09:74:2b:d1:c7:85:5e:89:56:e2:7f:e5:32:9e:b3:
56:45:21:25:41:18:0d:9c:ce:49:6a:28:2b:73:38:f2:82:eb:
d7:cf:9c:15:a8:a3:53:64:4a:df:63:2b:da:b9:a0:df:56:2e:
b3:59:a8:4c:d0:0f:61:b3:82:81:ec:f3:a5:f5:8b:6e:93:f3:
d5:a8:64:54:85:59:7f:e9:d5:e1:ee:63:9c:1c:8c:15:c8:ce:
f2:5d:48:e6:46:a1:5e:09:08:9b:a5:01:18:69:99:35:a8:4f:
00:ab:f6:d6:21:67:6d:cf:cf:12:25:57:37:fc:e6:d4:bd:88:
6e:96:d8:a7:9f:61:ef:b6:d7:b6:4b:9b:17:c1:0b:ee:6e:dd:
01:f6:0b:fb:8d:5d:5e:41:c4:0f:c4:39:5b:c5:c5:a0:30:f8:
b0:c9:25:28:65:f4:52:7a:f4:b9:a1:08:8e:6d:2f:88:85:24:
e1:76:b6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:06 2024 by rpki-client on console-fra.rpki-client.org