Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/uBt4y9MtnGXh0JOJ2XiTYXdLWqQ.roa
File: uBt4y9MtnGXh0JOJ2XiTYXdLWqQ.roa (raw, json)
Hash identifier: J88ZASK4zMWXec9zLijLN1B6xJA+3yO3PcMKiacQlcs=
Subject key identifier: B8:1B:78:CB:D3:2D:9C:65:E1:D0:93:89:D9:78:93:61:77:4B:5A:A4
Certificate issuer: /CN=951bb490e09df1467e4eec43d8f20484cee839fe
Certificate serial: 018DC642263DD7F2142A77C42D0BC28EBECD
Authority key identifier: 95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/uBt4y9MtnGXh0JOJ2XiTYXdLWqQ.roa
Signing time: Tue 20 Feb 2024 11:24:00 +0000
ROA not before: Tue 20 Feb 2024 11:24:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 213.218.36.0/23 maxlen: 24
213.218.48.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 09:20:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c6:42:26:3d:d7:f2:14:2a:77:c4:2d:0b:c2:8e:be:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951bb490e09df1467e4eec43d8f20484cee839fe
Validity
Not Before: Feb 20 11:24:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b81b78cbd32d9c65e1d09389d9789361774b5aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b3:0f:52:3b:7d:2c:8f:8e:45:14:b5:45:d8:
e2:60:8e:23:75:d4:38:c5:0a:d4:b6:b5:9e:9c:ec:
1c:5d:2f:16:27:24:86:93:02:48:87:6b:27:91:f4:
df:d1:7e:ac:3a:7d:f9:20:38:0d:d5:e6:42:71:c4:
9a:a6:68:4b:e6:fc:c8:7c:a2:7d:d6:d4:65:ad:36:
88:28:f9:20:a9:3d:c8:20:58:5f:10:2c:1d:de:fb:
e1:53:19:9f:65:92:38:4e:bd:84:30:0c:d5:63:bb:
37:55:c2:fc:b1:25:28:89:2c:57:46:bb:bc:f0:24:
23:44:db:bc:31:39:a4:18:6b:2a:69:7f:2d:1f:c2:
f8:b5:66:ee:3c:66:b5:ad:98:32:17:c4:88:08:b7:
e3:a9:f4:78:10:90:7b:51:01:d4:76:da:e8:f8:cb:
53:4b:59:87:d2:f9:72:fe:46:6f:d5:b1:25:d2:42:
7a:cc:cf:32:e8:8f:47:3b:31:0d:c2:9e:02:12:b1:
f7:bd:80:53:9e:31:3b:fb:12:9b:58:24:11:a5:0d:
c1:1e:62:82:93:39:5d:c2:40:33:1f:74:7c:9a:f5:
aa:94:fe:ff:5a:0c:ea:d5:7b:c0:8a:db:6b:ce:6a:
c7:51:a1:89:70:3a:c1:d6:4b:56:26:92:91:ef:3d:
6c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1B:78:CB:D3:2D:9C:65:E1:D0:93:89:D9:78:93:61:77:4B:5A:A4
X509v3 Authority Key Identifier:
keyid:95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/uBt4y9MtnGXh0JOJ2XiTYXdLWqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.218.36.0/23
213.218.48.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:de:b1:85:6f:53:23:f6:1e:f4:c7:28:c4:ee:51:9c:81:aa:
4e:f5:03:52:f0:7f:8e:d3:e7:99:be:c7:ef:18:43:df:37:23:
ac:c4:56:e8:f2:41:5b:73:a1:ba:51:7e:99:82:ee:69:b0:08:
71:1f:41:61:1d:49:b9:72:c2:a9:d4:0c:6c:87:f7:09:7d:4a:
b5:09:28:ab:2e:e3:c4:23:1c:44:a1:f3:0f:88:4b:85:e4:d8:
87:bb:3c:97:90:3c:9a:84:c9:63:74:b1:02:4b:7d:d8:ea:e8:
06:97:00:63:fb:87:57:fb:a7:ad:ca:e7:9a:49:03:e9:ae:d1:
47:39:ff:95:80:29:af:cb:59:d9:9f:9f:d7:67:18:76:16:4d:
bc:d9:ac:b4:89:f8:f8:f3:69:f3:6a:a4:36:3f:0f:bb:a8:28:
be:c1:ba:03:f4:ed:dc:c1:2e:0d:9b:19:f0:de:35:7a:18:02:
4b:f9:b2:4c:cc:f1:88:39:4a:4a:48:b4:e5:8e:c0:20:ba:01:
61:6d:d9:dd:5a:7f:ba:fa:ef:1d:e3:05:bb:b9:53:b6:b5:4e:
1c:a9:74:12:1e:20:8e:3e:5c:a8:6f:53:c9:3e:8d:e8:4c:d0:
df:b4:6f:49:e1:91:2e:2c:b3:45:98:01:84:b0:a6:e7:39:88:
7a:c3:30:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 14:09:43 2024 by rpki-client on console.sobornost.net