Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/4rcBstCxECMPoOlQteU0g54eW6A.roa
File: 4rcBstCxECMPoOlQteU0g54eW6A.roa (raw, json)
Hash identifier: oFEIfrj7PMJB6xhO1l4RKqwSyrg8ck2vVN9HyjP1pzo=
Subject key identifier: E2:B7:01:B2:D0:B1:10:23:0F:A0:E9:50:B5:E5:34:83:9E:1E:5B:A0
Certificate issuer: /CN=afba10b0a676d3e1fab56528430fac891a083652
Certificate serial: 01856C65DAC14749011ACA3515543A05AB99
Authority key identifier: AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/4rcBstCxECMPoOlQteU0g54eW6A.roa
Signing time: Sun 01 Jan 2023 08:14:52 +0000
ROA not before: Sun 01 Jan 2023 08:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28900
IP address blocks: 213.190.240.0/20 maxlen: 20
213.190.224.0/21 maxlen: 21
213.190.232.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:da:c1:47:49:01:1a:ca:35:15:54:3a:05:ab:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afba10b0a676d3e1fab56528430fac891a083652
Validity
Not Before: Jan 1 08:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2b701b2d0b110230fa0e950b5e534839e1e5ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:96:f5:67:68:f9:5d:9d:10:81:dc:67:7d:
9c:93:ff:16:2b:0d:b0:22:7a:a2:08:3c:e6:fa:54:
b8:28:a3:79:62:c8:28:6e:f0:7c:cd:7f:5d:3f:25:
ba:0d:a0:b9:c7:ba:97:79:93:0f:4a:0b:a5:29:cf:
a0:76:f3:ef:7e:e5:e9:b2:5c:d2:28:e7:78:0a:3f:
e2:fa:87:6b:14:78:f5:0b:1a:f7:62:7f:ed:92:33:
dc:c1:31:8b:4f:7e:f1:49:68:85:eb:83:33:69:2d:
a8:c7:9b:a3:90:e8:11:dc:b9:7c:e3:18:17:8a:6a:
fc:40:db:f2:a4:c5:a2:fd:1a:10:22:f1:83:89:6b:
63:dd:35:16:d0:5e:7d:ff:12:d3:2d:5b:9b:57:23:
c1:f8:41:f4:a3:86:87:8c:f6:bb:62:cd:b2:0a:9a:
64:55:69:0b:3e:f0:09:72:4b:7a:3a:92:97:00:e6:
b6:63:17:66:de:22:ea:53:ca:12:16:e5:9e:fb:a9:
38:1f:38:24:cd:44:e1:98:19:59:1c:de:ae:55:ca:
fd:50:04:32:d9:28:21:e1:15:50:13:54:b9:60:57:
93:38:d8:a1:a1:bd:c6:1b:ee:63:f7:4f:9b:5c:f4:
f4:f8:6e:99:00:28:18:f4:db:ed:e7:9f:90:5b:59:
5a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B7:01:B2:D0:B1:10:23:0F:A0:E9:50:B5:E5:34:83:9E:1E:5B:A0
X509v3 Authority Key Identifier:
keyid:AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/4rcBstCxECMPoOlQteU0g54eW6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.190.224.0/19
Signature Algorithm: sha256WithRSAEncryption
ab:0d:9e:89:09:98:be:18:02:0b:53:ac:0c:67:36:fc:7b:ca:
ee:aa:b3:00:b6:63:c2:80:f7:12:1c:73:21:aa:12:37:ec:82:
e6:4d:dc:ee:85:d2:de:fa:4f:d5:5e:fe:54:12:47:d7:b9:81:
66:86:f7:47:3a:19:ee:54:50:ab:6c:7f:8a:6f:1b:26:83:5b:
4e:5c:3f:7a:ed:36:9d:47:ac:4f:02:e4:31:3f:71:49:cc:6a:
88:3c:fc:a7:05:4a:73:84:c4:91:2b:52:45:da:88:27:22:be:
2c:8d:62:02:8c:10:30:1a:93:39:dd:1c:c2:e7:58:a5:5a:1e:
dc:9e:42:17:c6:77:ff:ee:7c:66:56:2f:31:d1:31:00:6b:f4:
bc:dc:ba:b2:73:8b:55:b3:2e:e0:8c:5b:32:bc:57:b8:b7:5b:
99:67:b8:81:a2:ab:4d:2c:85:f5:9f:61:35:94:7d:30:5a:3b:
cb:18:07:9a:0a:70:4a:47:5f:1d:62:e1:25:7d:d1:c6:d1:3e:
7b:f1:0d:6c:6b:cd:11:e4:90:72:83:a9:43:b9:40:fd:52:0c:
b1:f0:c2:a7:e8:6b:f4:fa:63:68:06:15:56:d0:2e:3b:bf:5c:
bf:a8:b1:3d:40:f4:63:c2:22:58:89:ef:af:57:2b:7d:bd:3e:
51:b0:85:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:15:08 2024 by rpki-client on console.sobornost.net