Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/uEFtlT86MaLRlLFt3v7yirOdcto.roa
File: uEFtlT86MaLRlLFt3v7yirOdcto.roa (raw, json)
Hash identifier: rSzEeNFDVo8AzWLLfQl7Ei1wFzm2ZjyKFolYSsmSS5A=
Subject key identifier: B8:41:6D:95:3F:3A:31:A2:D1:94:B1:6D:DE:FE:F2:8A:B3:9D:72:DA
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0188BF703EA71D0E4F91F7957A8013146A69
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/uEFtlT86MaLRlLFt3v7yirOdcto.roa
Signing time: Thu 15 Jun 2023 14:23:04 +0000
ROA not before: Thu 15 Jun 2023 14:23:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 213.145.88.0/24 maxlen: 24
213.145.92.0/24 maxlen: 24
213.145.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Jul 2023 08:33:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:70:3e:a7:1d:0e:4f:91:f7:95:7a:80:13:14:6a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jun 15 14:23:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8416d953f3a31a2d194b16ddefef28ab39d72da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:16:5a:41:14:9c:dd:48:a0:f1:d2:da:3c:7c:
cf:8f:a8:ef:b1:d6:ae:b5:e0:e5:01:a7:a1:1d:fa:
35:3c:93:92:c6:ac:a4:35:e8:a9:6c:0e:c3:cd:4c:
a3:0d:59:d5:b8:b6:25:02:8a:4b:6a:ea:9f:46:54:
71:90:2f:07:9e:70:b3:f8:30:6e:9f:18:0d:03:a3:
e9:42:e9:d3:17:57:f0:2d:c6:35:66:93:bc:7b:c8:
59:ea:0b:a6:d5:d6:a1:2e:2f:27:cb:5a:36:28:ec:
43:62:47:73:87:9d:57:73:6e:26:19:6e:4b:12:ad:
16:52:db:8a:87:9e:ad:91:be:9e:ab:46:93:5b:77:
b8:4b:f5:81:ff:d1:01:5a:c9:71:59:79:36:c2:6c:
09:51:58:3d:30:13:9e:45:9c:89:18:5a:ca:39:17:
7e:52:d9:3e:6d:3a:28:8e:77:91:93:15:f6:d6:e6:
58:e8:dc:40:f9:f6:c0:f2:a7:c3:e5:2c:99:58:c5:
1e:51:83:e1:c3:62:e2:82:f7:5e:e4:be:26:1a:14:
9d:16:11:16:88:20:49:68:59:9e:1a:88:ab:7b:6e:
62:ea:2b:de:a9:5b:1e:4b:ee:83:bf:77:62:72:72:
e5:36:de:c6:6b:5f:51:cd:7a:5e:af:f6:5d:40:fc:
ff:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:41:6D:95:3F:3A:31:A2:D1:94:B1:6D:DE:FE:F2:8A:B3:9D:72:DA
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/uEFtlT86MaLRlLFt3v7yirOdcto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.88.0/24
213.145.92.0/24
213.145.95.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:22:e9:bc:6b:4d:46:ce:81:b4:1d:b3:85:cf:6b:a9:45:d9:
cb:65:08:93:1f:81:8a:68:f6:af:9d:e5:8f:28:79:c9:cd:73:
50:71:12:62:c6:b2:05:77:bd:11:94:52:16:a0:04:cd:3e:5d:
0d:fa:f9:07:6d:b6:01:ff:6d:db:06:6e:7b:43:3a:3c:b5:96:
22:50:07:8a:df:39:73:34:e2:87:8c:42:c9:9f:aa:43:be:e4:
98:85:96:de:97:cd:c9:de:7a:de:df:8b:98:32:c2:fc:96:1b:
a6:68:12:e8:84:56:aa:51:52:38:89:44:b7:ca:c5:73:4d:b5:
b9:4c:08:ec:55:b5:31:f4:42:26:5a:d8:5d:42:5c:c4:da:07:
9e:cb:55:19:ff:b1:78:25:ea:d9:57:6c:12:85:c4:e2:8f:ac:
97:a0:3e:75:f4:64:92:5f:ac:e3:0e:bb:b7:fb:d0:00:98:2c:
9b:4a:c8:20:83:69:61:c6:31:85:e0:fc:f9:df:f2:5a:1b:bf:
18:f4:81:40:0a:ec:42:29:9d:d9:b5:18:7c:c7:4f:cc:0e:df:
68:1e:c5:04:64:2f:b8:90:64:ff:73:50:bb:7c:41:fa:7a:df:
b2:08:bb:1d:47:c0:17:e5:04:33:f5:5c:8d:16:36:71:83:22:
ea:eb:d0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:06 2024 by rpki-client on console-fra.rpki-client.org