Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/wtELx7vv8tZGNEyeqzTe4WIAfBM.roa
File: wtELx7vv8tZGNEyeqzTe4WIAfBM.roa (raw, json)
Hash identifier: HXTw5V4ywo+eYOVG/9iUYiV6k+9k5v4Wa+oORkQ8FrA=
Subject key identifier: C2:D1:0B:C7:BB:EF:F2:D6:46:34:4C:9E:AB:34:DE:E1:62:00:7C:13
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 018CC56DF66816DC5D00DB963C740288A2D6
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/wtELx7vv8tZGNEyeqzTe4WIAfBM.roa
Signing time: Mon 01 Jan 2024 14:29:27 +0000
ROA not before: Mon 01 Jan 2024 14:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13115
IP address blocks: 213.145.64.0/21 maxlen: 21
213.145.80.0/21 maxlen: 21
2001:41f8::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 17 Jul 2024 12:36:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f6:68:16:dc:5d:00:db:96:3c:74:02:88:a2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jan 1 14:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2d10bc7bbeff2d646344c9eab34dee162007c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:41:58:a8:48:38:11:eb:74:7e:55:41:ba:52:
6e:c7:4a:d4:03:2a:10:9f:a3:e9:b9:f8:d9:9a:4a:
73:aa:f1:b4:53:84:4a:e4:61:80:f0:a9:c1:35:1d:
4b:ba:c4:e2:7e:8d:be:34:49:93:f2:24:f2:4a:1f:
66:b6:af:5a:f4:b5:3d:e4:2d:49:d0:00:a8:2c:f8:
38:60:2e:5b:8f:76:15:f6:22:c3:20:28:c3:96:ac:
21:e2:78:ec:7f:08:54:9e:72:47:22:fb:a3:b3:0a:
49:a3:d5:8b:b8:ef:a1:14:31:71:65:5a:ab:95:3f:
a6:48:24:2c:5a:a2:38:c4:a5:7b:e3:c2:8a:f6:ab:
c8:2c:80:1a:fa:55:3a:62:40:4f:5e:0d:ce:7c:9b:
4a:75:75:bd:69:e9:4e:aa:c2:05:98:c9:69:12:5b:
4a:f6:24:8b:48:a6:72:7c:32:8a:1d:05:40:01:4f:
a1:11:e5:d1:92:90:80:06:cf:69:78:d4:93:6a:90:
7b:c0:df:99:c2:eb:4c:42:94:ea:ba:df:2a:80:b8:
ba:8f:98:b9:55:d0:9e:ed:63:37:54:df:3d:c9:a3:
24:f5:ef:3a:ca:6b:b0:f0:e4:0a:7c:dd:97:0d:44:
7a:f1:64:41:75:f7:e9:01:64:1d:97:93:2e:96:df:
85:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D1:0B:C7:BB:EF:F2:D6:46:34:4C:9E:AB:34:DE:E1:62:00:7C:13
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/wtELx7vv8tZGNEyeqzTe4WIAfBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.64.0/21
213.145.80.0/21
IPv6:
2001:41f8::/32
Signature Algorithm: sha256WithRSAEncryption
95:94:54:cb:e4:4f:fe:e2:67:95:1c:63:65:0c:d5:b5:cb:a4:
6c:d3:b0:b4:3d:a4:83:22:d9:dc:91:c9:71:c4:ce:31:73:b0:
c4:cc:bf:05:f7:10:8f:f9:00:85:f5:08:dd:60:08:e6:a4:9b:
6a:f7:b4:5e:ef:8f:e4:c4:9c:eb:50:bd:6d:1f:2b:64:07:98:
9a:3f:6a:18:ea:36:6d:c1:ad:5a:b4:d5:64:fe:5f:fc:e9:be:
fc:16:3b:84:e7:86:b3:c7:37:20:70:08:f7:ec:c4:bb:de:c3:
a0:1c:ab:f1:60:bb:07:22:87:6a:58:f9:e3:c7:f6:38:1e:f7:
2c:55:af:93:f1:2e:fc:a3:02:69:7f:ca:73:66:ae:52:24:a9:
00:71:25:ea:77:de:28:3e:09:ae:b2:84:c3:9e:25:45:d2:e9:
28:33:b7:0f:45:5c:3e:22:55:58:84:32:c3:70:b4:03:19:72:
7a:18:41:4c:f4:29:7d:92:8b:91:ba:25:ad:6c:38:d6:b2:85:
5f:9f:25:93:ea:d6:c5:1d:d6:0f:2e:84:a4:ff:4c:ed:4d:54:
87:5a:96:76:8a:17:a4:3a:b9:72:07:6f:d0:b6:f8:59:7f:47:
be:61:73:7f:6a:19:85:e8:2b:3b:a9:49:69:5b:81:9f:8f:4e:
8c:ce:1d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 14:12:20 2024 by rpki-client on console-fra.rpki-client.org