Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/UTFQsevB1qMX5NMwclBpfmQhHm4.roa
File: UTFQsevB1qMX5NMwclBpfmQhHm4.roa (raw, json)
Hash identifier: F14KIoksqklq41NT1F+r8O032Tmy2G5q2D52K6jpCkk=
Subject key identifier: 51:31:50:B1:EB:C1:D6:A3:17:E4:D3:30:72:50:69:7E:64:21:1E:6E
Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784
Certificate serial: 01857094E1816E028BCE8327E73C95111C46
Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/UTFQsevB1qMX5NMwclBpfmQhHm4.roa
Signing time: Mon 02 Jan 2023 03:44:43 +0000
ROA not before: Mon 02 Jan 2023 03:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 212.19.236.0/24 maxlen: 24
212.19.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:e1:81:6e:02:8b:ce:83:27:e7:3c:95:11:1c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784
Validity
Not Before: Jan 2 03:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=513150b1ebc1d6a317e4d3307250697e64211e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1c:24:79:90:bc:39:f2:7d:4a:b8:00:20:b5:
5e:da:23:c5:65:51:49:cd:bb:82:d2:67:f9:6e:cf:
67:fb:5a:de:0e:c0:d6:62:83:3d:c3:a1:72:ab:6b:
11:df:4d:16:cd:65:5d:0d:e5:30:81:99:af:69:cf:
2e:a1:b8:eb:7c:8f:3d:9c:e4:61:c7:91:47:60:34:
6d:1f:66:d5:4e:17:45:89:08:39:a4:e4:59:aa:00:
2f:86:34:0b:39:25:5b:17:40:11:29:56:5b:ee:dd:
08:0a:b4:ff:de:a6:a4:92:8b:34:85:6f:2d:56:30:
61:56:0d:e8:b3:0c:ef:74:f8:f6:68:19:cf:69:48:
cd:7e:af:ea:6b:6e:bc:94:19:b2:45:d6:0f:03:42:
a7:8c:b4:d8:94:59:4c:8b:ce:49:3e:33:81:a8:3a:
63:89:63:34:c7:cb:c6:a4:4c:4d:28:60:db:f9:2a:
a6:0b:b4:ae:44:46:24:93:e5:a6:11:b0:2b:4f:5a:
a1:af:6c:43:0f:d5:d3:9a:e9:ba:63:5c:0c:d4:4a:
0e:74:1f:1d:8a:8f:80:5f:1a:62:9e:97:28:86:db:
b0:48:8f:83:2d:53:f9:21:55:ea:b2:c3:ff:75:46:
f7:4d:d1:e2:80:ac:3d:e1:02:a9:f4:82:83:0c:03:
e5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:31:50:B1:EB:C1:D6:A3:17:E4:D3:30:72:50:69:7E:64:21:1E:6E
X509v3 Authority Key Identifier:
keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/UTFQsevB1qMX5NMwclBpfmQhHm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.19.235.0-212.19.236.255
Signature Algorithm: sha256WithRSAEncryption
5a:7a:c4:36:4f:b0:8d:ba:f5:44:75:e9:96:03:51:34:38:99:
da:28:41:98:da:80:8e:05:07:06:6f:48:0e:50:ad:67:4b:18:
61:1b:31:b7:94:6d:64:91:94:0c:37:bc:32:59:ef:da:48:48:
87:83:2c:91:f6:0d:69:f7:fa:38:56:db:f6:31:b0:c2:88:e0:
10:1c:a5:fe:22:16:cf:60:b6:18:46:78:62:5a:21:d3:df:b9:
82:b5:cb:cd:9a:17:df:ea:2d:66:f2:6f:b8:5c:46:be:b5:3b:
0e:5c:16:ae:d1:c5:aa:de:f5:04:f8:da:c9:13:ee:b5:fd:68:
73:fd:e1:2f:f5:40:c5:3c:4b:85:a7:a4:a9:0e:e4:18:79:86:
3c:0d:a7:79:fc:8d:8c:fb:26:c0:ad:1b:f1:a6:b6:10:d3:e9:
e7:35:4a:9a:c4:e2:f7:c1:a4:26:cb:1f:ca:20:2c:d1:8d:43:
f8:b9:32:4c:9b:8e:52:51:86:b4:a6:3f:93:31:ed:65:a6:af:
81:a3:73:ea:4c:f4:14:fa:53:6b:39:e2:1e:17:ad:25:c6:63:
9e:a8:62:e6:41:11:28:04:d9:3d:09:df:3a:57:a5:36:88:88:
a1:fb:c8:53:cf:d6:51:1a:73:5c:35:e2:ca:6b:2a:b1:25:c5:
23:1e:53:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:30 2024 by rpki-client on console-fra.rpki-client.org