Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/taSFMhCaPDyqDGG8_hrfO9uV6mY.roa
File: taSFMhCaPDyqDGG8_hrfO9uV6mY.roa (raw, json)
Hash identifier: 82oduCBmz8tCGkHS0OHqR2TKnMklQs85cpegrVXCIEw=
Subject key identifier: B5:A4:85:32:10:9A:3C:3C:AA:0C:61:BC:FE:1A:DF:3B:DB:95:EA:66
Certificate issuer: /CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Certificate serial: 01856D2F3C9FBD0D41339C0EA65790910F0B
Authority key identifier: 7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/taSFMhCaPDyqDGG8_hrfO9uV6mY.roa
Signing time: Sun 01 Jan 2023 11:54:50 +0000
ROA not before: Sun 01 Jan 2023 11:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21478
IP address blocks: 213.129.192.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:3c:9f:bd:0d:41:33:9c:0e:a6:57:90:91:0f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Validity
Not Before: Jan 1 11:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5a48532109a3c3caa0c61bcfe1adf3bdb95ea66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ce:d6:e1:e0:65:94:49:67:d8:f9:6a:6a:8a:
46:e7:6c:51:87:bc:89:a3:a0:fb:ea:33:1c:85:17:
27:bf:7d:bf:31:5a:06:48:e7:52:e8:66:0c:b0:e7:
8e:5b:e4:20:8f:9f:0a:e9:6b:70:09:ae:6b:0d:8f:
1f:1d:d4:2a:26:05:fd:f2:7c:ec:01:4c:1f:47:43:
dd:42:ad:94:bd:ec:4d:2c:63:04:93:cc:26:55:3d:
2e:92:cf:8b:39:1a:cb:5a:c5:38:93:88:0d:7a:3c:
91:c4:0c:4e:6e:cf:2f:58:51:9a:bc:fc:df:61:bc:
b1:43:d2:ec:6b:f2:36:38:5c:9f:94:0c:79:39:eb:
39:32:4b:d5:31:b7:3a:0d:cb:10:38:da:77:20:d7:
84:29:4a:23:e5:13:26:aa:22:de:86:61:a8:ba:e6:
00:d6:9a:b3:51:37:5e:d3:a5:f6:36:0e:a7:8c:9b:
a5:32:0e:06:39:6c:6e:af:77:e1:94:b3:b0:8a:16:
c2:1b:4e:f5:37:7f:d5:27:f1:3b:86:c2:20:cd:e7:
ac:40:0b:ef:1d:79:fa:a2:e9:6c:80:c7:6a:28:89:
b1:7f:aa:d1:77:dd:98:01:e8:eb:a0:1d:f0:a0:b2:
2a:34:68:82:c8:2c:4c:09:5d:c9:6d:42:f6:85:37:
79:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A4:85:32:10:9A:3C:3C:AA:0C:61:BC:FE:1A:DF:3B:DB:95:EA:66
X509v3 Authority Key Identifier:
keyid:7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/taSFMhCaPDyqDGG8_hrfO9uV6mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.129.192.0/19
Signature Algorithm: sha256WithRSAEncryption
5d:e9:1a:2e:fd:9c:ed:39:6c:b1:81:64:47:b5:28:e5:2f:5d:
ad:8a:f4:2c:3f:38:a6:64:b3:a1:23:37:09:cd:82:3b:9f:99:
6d:86:12:fd:79:34:9c:e4:ec:5f:ec:af:97:72:49:5a:df:37:
a0:a8:8e:19:10:cd:19:65:8c:ff:fc:dd:a5:dc:e1:dd:02:b3:
af:5b:6a:b7:57:d6:ee:52:9d:14:90:38:4f:29:7b:8f:f4:e2:
3e:9f:8c:05:52:2e:12:05:80:ec:92:3c:fb:ad:83:5d:25:77:
b9:47:f0:08:b8:de:22:85:92:31:06:b2:5d:44:e0:5a:a5:3b:
11:eb:46:dd:79:c8:76:bc:6d:07:49:a8:84:be:7e:98:9e:48:
a7:51:bb:2c:51:09:20:b6:c1:a6:7e:c2:41:b3:7b:90:0e:ff:
17:bf:b1:0a:32:9e:01:77:6e:db:f3:7f:48:e6:11:f9:db:2e:
d4:40:20:c9:ae:61:e3:bb:95:3d:8c:ba:22:7b:0d:31:95:19:
94:ae:3c:fd:8e:6b:c8:aa:da:dd:2d:41:0b:6f:66:fc:cc:77:
1c:b1:10:5a:0e:08:99:c7:22:14:14:44:9d:e8:20:f3:99:14:
6d:7f:58:c8:97:ec:fa:ea:f2:5a:40:85:af:02:04:db:1a:f6:
91:20:4b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:48 2024 by rpki-client on console.sobornost.net