Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/lRIF1PEB0v_kxuAwTCDB7d1Z-KM.roa
File: lRIF1PEB0v_kxuAwTCDB7d1Z-KM.roa (raw, json)
Hash identifier: MRRjBPi6Ot3qh7NUJF2IlvAR8SMkPlf6JfMbHKYPwUY=
Subject key identifier: 95:12:05:D4:F1:01:D2:FF:E4:C6:E0:30:4C:20:C1:ED:DD:59:F8:A3
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0191039817A139BF9D6E2662F71D6167AE00
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/lRIF1PEB0v_kxuAwTCDB7d1Z-KM.roa
Signing time: Tue 30 Jul 2024 12:23:04 +0000
ROA not before: Tue 30 Jul 2024 12:23:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 213.145.82.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 20 Aug 2024 21:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:03:98:17:a1:39:bf:9d:6e:26:62:f7:1d:61:67:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jul 30 12:23:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=951205d4f101d2ffe4c6e0304c20c1eddd59f8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:a1:71:2c:a8:28:7f:18:46:cc:19:3d:e6:
4b:eb:3c:51:9d:76:54:cd:0b:3f:31:52:a8:ce:4b:
6e:dd:61:07:ad:12:e3:49:fc:03:0c:e2:4e:5e:47:
80:f9:4b:2f:b6:cc:98:ef:d1:3a:c2:5b:32:ca:79:
e4:9a:6d:1a:10:8a:39:d8:38:28:27:ca:33:75:03:
98:0a:52:b2:f1:13:6c:d4:b2:0a:a4:28:ac:d6:02:
7f:d2:9a:8f:8d:3d:89:03:94:0c:4f:f0:1e:c5:32:
3a:67:a7:00:8f:94:2b:19:cf:4a:5e:12:e5:22:ab:
d8:e8:98:23:f2:72:a1:52:e5:f2:e6:f0:4d:2c:56:
49:bf:b6:08:f0:0e:fb:05:5b:ff:9d:30:a0:e5:fd:
af:4b:22:cf:7c:67:9e:dd:53:6b:f2:83:fc:54:b3:
04:79:e5:bc:cf:13:bc:9b:dc:cc:54:a5:c6:8d:6d:
92:71:ad:da:b9:5b:75:98:51:53:9c:f6:f6:4f:3f:
e6:f9:a0:32:22:25:f8:b8:d9:21:ad:4f:7e:9d:55:
47:07:d3:71:88:e9:39:a4:b0:72:44:71:8f:44:8f:
9e:d6:85:9b:08:99:cc:0d:70:06:cb:99:a5:22:b5:
49:c5:43:db:46:02:7d:82:57:15:24:27:88:d3:17:
21:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:12:05:D4:F1:01:D2:FF:E4:C6:E0:30:4C:20:C1:ED:DD:59:F8:A3
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/lRIF1PEB0v_kxuAwTCDB7d1Z-KM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.82.0/23
Signature Algorithm: sha256WithRSAEncryption
96:4a:bb:89:94:6b:b4:0e:0f:b2:d9:9f:af:bb:9d:d2:1d:c7:
e9:f2:b4:a5:fd:3f:6b:ac:ef:cc:77:d6:74:4b:0f:e3:f3:3b:
f4:33:b4:16:8f:82:27:42:38:fb:cc:05:74:70:40:4a:c6:e6:
33:0e:6e:e3:da:77:92:34:e6:74:03:75:d1:6d:84:cc:49:66:
a6:9c:0e:55:79:c8:2f:d6:29:7f:cf:f7:86:c1:6a:3b:2b:b8:
85:01:f3:4c:ad:f1:23:d1:42:67:82:b1:e3:72:09:87:88:ad:
32:da:d4:cf:34:30:01:e9:eb:65:5a:17:d7:28:32:d8:af:be:
e8:0c:6b:24:34:48:db:a0:a4:22:52:ae:77:b7:55:c5:cb:40:
f2:11:d0:76:30:10:62:64:7c:06:5f:6a:4c:3d:b7:81:03:bd:
bf:eb:1d:72:b6:ab:91:6b:c6:8d:35:01:a7:a3:d2:4a:56:d6:
c4:a0:75:79:90:f9:76:63:35:04:1b:b7:25:17:a9:fd:9a:4e:
b8:ea:e1:5e:77:35:7b:e6:94:2d:a5:41:52:c4:28:e7:03:2e:
56:48:98:e2:6f:2a:07:fe:d8:3a:dd:b8:8c:ea:8a:20:08:8b:
e6:84:db:90:e9:fc:3e:e5:f8:b4:15:62:3e:9a:3a:10:27:b1:
1b:2d:e6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 23:49:46 2024 by rpki-client on console-fra.rpki-client.org