Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/_ajzY5ZcivldVFqHj2a0V-KFqeA.roa
File: _ajzY5ZcivldVFqHj2a0V-KFqeA.roa (raw, json)
Hash identifier: 8E/3t5Y+1SybBQ05U903jbKaWtFEriCjiNKvxR/DKx0=
Subject key identifier: FD:A8:F3:63:96:5C:8A:F9:5D:54:5A:87:8F:66:B4:57:E2:85:A9:E0
Certificate issuer: /CN=951bb490e09df1467e4eec43d8f20484cee839fe
Certificate serial: 018CC7257139A88E1F846B3A956927AECAFF
Authority key identifier: 95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/_ajzY5ZcivldVFqHj2a0V-KFqeA.roa
Signing time: Mon 01 Jan 2024 22:29:28 +0000
ROA not before: Mon 01 Jan 2024 22:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 213.218.48.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 11:24:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:71:39:a8:8e:1f:84:6b:3a:95:69:27:ae:ca:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951bb490e09df1467e4eec43d8f20484cee839fe
Validity
Not Before: Jan 1 22:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fda8f363965c8af95d545a878f66b457e285a9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:03:4f:38:48:0b:4d:b1:2b:dc:11:e5:93:68:
f9:a0:e8:ee:f8:22:9e:93:6f:ca:b7:82:23:8e:d5:
11:de:77:f3:e4:56:df:f9:27:f0:b1:1b:d0:94:b9:
f8:73:22:5b:09:05:93:b3:ae:b9:57:9f:51:1b:df:
20:26:6e:e5:57:e9:92:49:72:c6:b2:b8:b7:2b:18:
77:09:51:36:0e:d3:bc:3c:e5:2d:b4:f2:d2:97:cd:
4e:e7:a9:35:24:9f:48:c9:6d:f9:1f:5e:de:b4:27:
ab:83:08:ed:6d:e7:2b:88:9b:1a:7a:84:95:59:4a:
97:a1:f3:90:15:6b:b4:c8:ba:95:aa:15:7a:06:9a:
1e:71:9f:cd:c4:05:e1:f6:e5:f9:d8:33:63:62:ad:
c9:95:de:96:c8:14:06:04:56:53:db:4c:a1:69:05:
30:e5:ee:56:9c:28:64:f5:34:3d:44:4a:f7:a0:d1:
ab:18:8d:3d:fc:fb:69:e9:c4:56:9d:7e:c8:02:41:
d7:cf:8c:1e:a4:24:a0:99:70:16:36:b0:e5:ac:06:
c2:5c:d7:e5:b0:27:32:f5:74:27:51:9b:86:cb:e7:
b6:f1:a2:d0:ad:4f:11:c7:42:b4:a4:e8:9d:08:05:
a1:53:db:6b:87:24:82:10:bf:15:54:6e:8d:3b:31:
c9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A8:F3:63:96:5C:8A:F9:5D:54:5A:87:8F:66:B4:57:E2:85:A9:E0
X509v3 Authority Key Identifier:
keyid:95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/_ajzY5ZcivldVFqHj2a0V-KFqeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.218.48.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:dc:c3:54:12:b3:c4:b9:82:b0:8a:2c:57:e0:1d:13:fa:48:
3d:de:f3:18:e6:bc:81:6e:2a:4b:c7:c7:b0:f3:a2:d4:d4:ab:
24:75:e3:3e:cd:96:1e:1b:72:d2:1f:77:ce:cc:b7:29:3a:5a:
59:28:66:66:7a:7c:9e:60:73:f7:06:73:9f:42:4a:0f:e9:9c:
38:8d:0f:6c:95:ab:60:a6:1a:e0:29:90:40:fc:41:4f:cc:73:
36:18:fb:98:2c:23:fc:5f:57:a2:65:45:f8:1c:d1:04:5f:4d:
4a:96:0e:41:77:e0:40:cb:86:9f:d9:7d:8d:9f:4c:17:26:e0:
b5:58:88:53:94:8d:fc:21:5d:92:17:bf:2a:e3:ab:56:82:c7:
47:69:2f:0b:97:68:53:97:8b:77:7d:74:19:15:05:e9:b2:56:
68:b0:17:13:32:6f:dc:6a:3b:49:e1:4e:a7:57:ea:13:20:dc:
65:d4:41:2d:cc:9e:c2:7c:5e:71:af:8a:65:c3:d5:bc:04:a4:
bd:30:9f:69:65:4c:1b:71:5e:9a:5f:25:7f:8b:b1:59:40:88:
d6:dc:64:3a:ad:48:e5:48:2e:65:c4:ee:d6:da:16:df:76:30:
9f:43:73:9b:5a:c6:1b:04:c6:7a:77:bb:ba:f9:5e:5e:72:13:
11:16:0d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:22 2024 by rpki-client on console.sobornost.net