Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/aFRw-ODdO6v7Rj7I8tSveSlMtjg.roa
File: aFRw-ODdO6v7Rj7I8tSveSlMtjg.roa (raw, json)
Hash identifier: GZUA8ALeRIsk0PjiPRlyFwd6F4ywNqz3J1C55AFaH8k=
Subject key identifier: 68:54:70:F8:E0:DD:3B:AB:FB:46:3E:C8:F2:D4:AF:79:29:4C:B6:38
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0191F77A3CB148EA34D0E082EE23A197EFDE
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/aFRw-ODdO6v7Rj7I8tSveSlMtjg.roa
Signing time: Sun 15 Sep 2024 20:57:48 +0000
ROA not before: Sun 15 Sep 2024 20:57:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205733
IP address blocks: 213.145.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 11:11:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f7:7a:3c:b1:48:ea:34:d0:e0:82:ee:23:a1:97:ef:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Sep 15 20:57:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=685470f8e0dd3babfb463ec8f2d4af79294cb638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a5:17:b4:56:9e:ab:22:f4:87:02:c4:27:de:
1b:37:05:d7:41:e7:2c:d1:a9:3c:55:d1:db:62:c3:
b9:66:d0:86:2d:82:fc:93:cf:df:9a:43:80:f2:d4:
28:ce:ba:48:66:76:94:c1:1e:22:2f:ae:48:9e:d8:
de:4e:14:76:fb:95:6b:23:cf:d1:6d:86:52:06:a2:
36:d1:89:d3:45:1e:49:99:43:89:3a:39:ce:ca:ee:
84:c8:42:f5:5c:2a:d3:0a:3a:38:18:38:d3:b8:16:
e7:6a:05:f0:36:03:cf:be:6c:00:44:2a:92:66:ae:
71:5c:37:f6:ff:2c:6e:06:9d:8b:ca:a6:20:90:d7:
4f:7b:87:7c:69:11:38:b0:8f:99:37:25:a0:79:24:
49:20:7e:75:99:f8:8f:07:58:5a:df:d1:46:03:aa:
79:1c:3b:ef:bc:7c:16:97:73:21:ee:8f:a2:6c:67:
0f:98:0b:1a:8e:66:d4:56:66:bd:aa:f5:47:c1:9f:
e6:50:95:6c:1d:89:99:94:74:1f:a3:e1:47:bb:66:
e1:53:9b:c2:99:12:84:89:06:86:6d:0c:b4:eb:bc:
74:74:68:19:9a:d3:87:49:80:74:5f:9f:d7:f6:5e:
8d:58:fb:d0:84:9f:42:80:b4:71:a9:8c:ea:80:83:
54:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:54:70:F8:E0:DD:3B:AB:FB:46:3E:C8:F2:D4:AF:79:29:4C:B6:38
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/aFRw-ODdO6v7Rj7I8tSveSlMtjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.84.0/24
Signature Algorithm: sha256WithRSAEncryption
00:2e:e3:ae:90:a5:a6:bf:76:5b:4d:5c:8b:e2:32:c8:48:d3:
09:09:11:e4:37:98:dc:94:48:af:a4:d5:98:4a:4c:48:32:d7:
db:da:f2:f9:c4:9c:6b:fb:1a:8c:84:3c:84:cd:99:7b:25:dd:
11:78:da:79:b9:8f:d1:12:28:04:f4:c0:5f:2a:13:78:2a:81:
00:ac:ea:09:60:e6:fa:3b:5f:57:4e:af:8e:43:8b:6d:c9:08:
f1:e6:24:1f:ad:f3:6d:44:e4:a6:db:95:65:fa:4d:d8:72:c4:
a9:cb:54:cb:67:7e:01:03:0c:16:f7:73:c0:c9:12:50:ed:10:
99:8c:32:9f:49:80:f2:be:57:a3:f1:06:5b:9b:9e:5f:f9:6e:
10:d6:84:66:02:c7:4b:c8:4c:b3:99:66:9a:77:e8:65:a1:7e:
49:61:17:ff:72:19:c5:af:e4:b5:9a:ec:a2:d4:0f:9a:f0:36:
56:6c:fa:12:a0:9d:2f:50:26:16:37:c9:78:2a:40:87:74:37:
99:e8:52:57:36:7a:30:7f:65:41:60:f5:6d:52:43:91:10:ed:
3a:77:bf:18:39:68:91:6c:7d:68:7c:fd:ec:07:2e:91:a1:fd:
5d:04:a1:56:22:1a:c6:16:01:2e:65:5b:59:f0:ce:c8:52:17:
1f:2d:35:9d
-----BEGIN CERTIFICATE-----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Generated at Fri Nov 1 14:34:51 2024 by rpki-client on console-fra.rpki-client.org