Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/diLooRxc68GgOTpfh6yCJ2YmgJw.roa
File: diLooRxc68GgOTpfh6yCJ2YmgJw.roa (raw, json)
Hash identifier: FcD4Tm25gojPh1ZFAoIOwh0bSZ1QH/deRvs87w1sJk8=
Subject key identifier: 76:22:E8:A1:1C:5C:EB:C1:A0:39:3A:5F:87:AC:82:27:66:26:80:9C
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0185EB3629586461946D8C23554EB93E4AC3
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/diLooRxc68GgOTpfh6yCJ2YmgJw.roa
Signing time: Wed 25 Jan 2023 23:14:33 +0000
ROA not before: Wed 25 Jan 2023 23:14:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13115
IP address blocks: 213.145.64.0/19 maxlen: 20
2001:41f8::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 02 Jun 2023 08:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:eb:36:29:58:64:61:94:6d:8c:23:55:4e:b9:3e:4a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jan 25 23:14:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7622e8a11c5cebc1a0393a5f87ac82276626809c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:07:d2:13:b8:d9:d0:4a:42:b9:cf:9c:6b:42:
af:fd:15:41:7e:35:c7:34:03:a3:62:fb:f0:7e:49:
3c:f8:3f:f4:72:fe:9f:4b:77:6e:ec:86:64:c8:e6:
af:e2:b7:8e:ac:e0:2a:66:38:9a:9f:02:6b:c2:4e:
62:18:b4:1e:fb:c6:15:e6:ef:93:85:72:8e:7e:26:
6a:5e:de:22:06:82:7f:37:87:c0:e9:00:08:8d:8c:
bf:b2:03:3c:db:44:be:1b:83:35:8e:46:7d:05:ba:
1e:2c:54:2b:28:c4:37:02:81:14:f8:2c:67:22:05:
fe:b8:0d:60:a2:e0:46:59:f7:4c:b2:5f:a3:e3:f5:
c0:c0:6b:31:13:94:23:1a:a2:50:07:d0:36:8b:75:
a3:a3:a0:8c:de:37:3f:5a:13:a8:d5:6a:33:59:43:
7f:17:6e:1d:04:8a:88:26:cd:d8:39:b5:5b:6c:88:
e3:4d:21:4c:0c:fb:0d:ac:3c:94:43:88:8f:08:08:
85:3c:9d:1d:1f:4f:77:ee:58:a8:21:c9:3d:8b:af:
07:2c:0e:91:ad:03:99:02:78:c1:62:83:71:c3:c9:
c5:62:fe:eb:f5:46:a6:90:e6:9b:61:0b:6a:b3:f7:
59:e9:e5:66:ba:2b:3a:0d:af:4c:ce:ab:ec:1c:69:
c2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:22:E8:A1:1C:5C:EB:C1:A0:39:3A:5F:87:AC:82:27:66:26:80:9C
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/diLooRxc68GgOTpfh6yCJ2YmgJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.64.0/19
IPv6:
2001:41f8::/32
Signature Algorithm: sha256WithRSAEncryption
7f:18:bd:8e:85:d6:66:75:77:f1:4b:12:a9:f9:9f:5b:be:9c:
fd:8f:5c:e0:f7:4b:df:43:c8:8a:00:49:27:06:4a:0e:91:d3:
f9:f8:4e:6b:ab:e8:c9:41:87:c3:c8:ec:da:0c:d1:5e:0c:d4:
9b:48:82:2b:3b:db:c4:d1:48:d3:af:31:22:b9:41:98:30:d6:
0b:5f:f3:4f:61:2c:1e:cd:64:60:aa:2a:7e:de:57:0f:a5:81:
54:5f:63:4a:d2:c7:20:76:4f:1a:18:f7:32:27:47:c0:b0:9e:
d2:53:31:a8:cf:a7:e6:34:db:25:f5:3c:58:eb:6f:ae:81:f0:
29:45:ed:6c:e1:48:1a:90:10:cc:36:0b:a0:51:9c:80:81:2d:
87:ad:ca:4a:54:d4:47:9d:5a:d5:ec:02:6f:de:83:fb:51:83:
6c:b9:f8:38:d8:d4:38:a3:83:48:88:00:8e:76:dc:60:20:fa:
49:c7:6a:44:41:bb:f0:4c:73:51:f5:f1:ad:9c:fb:1a:2c:9a:
f6:5f:fd:79:da:9b:ba:d4:84:22:50:ee:40:89:9c:04:a0:74:
9e:39:7e:e5:fe:4f:2d:6c:cc:93:c1:5e:af:3d:b3:97:d3:a7:
cf:80:e7:9c:87:b2:06:8c:99:3a:24:04:69:ab:e6:04:45:86:
d3:81:b8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:06 2024 by rpki-client on console-fra.rpki-client.org