Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/58jTzJzpjcpkX4TuzCSNgk6iF24.roa
File: 58jTzJzpjcpkX4TuzCSNgk6iF24.roa (raw, json)
Hash identifier: e5CZTlU4j8FFLeR0bANfsD6DI7Ts0wimyzy/zLSiZwg=
Subject key identifier: E7:C8:D3:CC:9C:E9:8D:CA:64:5F:84:EE:CC:24:8D:82:4E:A2:17:6E
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 01876EFDD7D254D3090A39010381F40A7E99
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/58jTzJzpjcpkX4TuzCSNgk6iF24.roa
Signing time: Tue 11 Apr 2023 06:25:42 +0000
ROA not before: Tue 11 Apr 2023 06:25:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29076
IP address blocks: 212.113.125.0/24 maxlen: 24
212.113.126.0/24 maxlen: 24
37.202.12.0/24 maxlen: 24
37.202.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Oct 2023 07:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6e:fd:d7:d2:54:d3:09:0a:39:01:03:81:f4:0a:7e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Apr 11 06:25:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7c8d3cc9ce98dca645f84eecc248d824ea2176e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f3:26:9e:a8:53:1e:34:ab:ec:f5:50:6d:d3:
ab:35:5e:43:12:f4:e2:75:90:7e:61:ec:84:14:6e:
51:75:14:15:71:6b:9d:b8:f2:44:e2:ea:4c:95:18:
14:23:30:19:01:53:5b:9a:5e:4d:d8:f1:26:08:71:
7d:1c:fa:4b:7d:8d:66:a7:4b:92:43:d9:97:e1:db:
99:17:a3:05:2f:eb:5f:eb:ee:18:51:8c:3d:10:57:
2a:44:23:79:1b:50:22:e0:53:6a:0b:07:70:f4:f3:
03:e5:d2:9a:8d:ba:d5:b2:c6:3b:f4:22:bb:8e:63:
e3:e2:be:f6:f8:2a:51:43:40:21:39:27:6c:8b:d5:
f4:26:cc:2b:60:69:26:7e:3b:1b:5e:06:f4:4a:9b:
4c:85:00:ae:93:c8:9f:29:89:a0:12:f4:26:ab:70:
bc:6b:4d:df:ba:8d:25:32:3c:1d:80:a3:02:6d:f1:
d8:a2:60:c4:46:f0:48:f6:e4:0b:45:93:88:47:ae:
1a:29:9e:ab:c0:61:c9:90:04:ad:79:99:47:83:c7:
91:6b:e4:7f:eb:fc:92:b5:b5:e9:cd:95:bf:5c:c2:
81:93:68:49:a4:5b:cc:d5:44:f7:d8:02:30:04:cf:
a4:ce:f9:d4:80:35:fc:8e:d2:db:8d:ab:f3:68:c4:
2d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C8:D3:CC:9C:E9:8D:CA:64:5F:84:EE:CC:24:8D:82:4E:A2:17:6E
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/58jTzJzpjcpkX4TuzCSNgk6iF24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.12.0/23
212.113.125.0-212.113.126.255
Signature Algorithm: sha256WithRSAEncryption
6f:3c:8c:22:ec:d3:3c:4a:6b:80:16:16:bc:f6:ff:f8:1b:12:
45:4d:b3:a5:d7:5d:3b:fe:f5:a6:a5:3e:56:9a:8f:b4:c5:24:
c3:51:39:b4:0c:3d:b4:f1:8c:22:f4:73:23:09:55:40:0d:02:
f5:a9:db:1d:89:74:1c:74:4b:8b:72:60:d4:b7:49:ec:d1:8a:
46:47:84:a7:83:52:5d:63:eb:06:32:63:97:1b:a3:30:41:ce:
22:ad:96:71:73:18:de:b8:4e:ea:0a:f5:e1:0d:01:94:3a:0d:
65:63:e0:59:f8:25:9e:9c:df:61:a1:9d:3d:d0:0d:b2:0b:fd:
d1:eb:c9:a1:d4:53:b3:a5:88:9c:d5:4c:a1:1a:64:8e:e7:3e:
53:98:68:7b:19:42:13:a5:b8:7e:e7:fd:58:df:ac:37:51:f1:
25:d2:94:1a:fc:89:96:73:c3:79:96:3b:58:90:81:f1:50:8c:
9b:78:14:02:ce:c9:e3:a9:a8:e4:ed:dc:a3:3b:62:e3:69:be:
7e:b5:c2:b0:e6:9a:85:8e:5a:84:26:33:56:1f:92:06:0f:bb:
9d:ed:9c:84:9e:45:17:c2:0c:2d:db:b1:96:3f:ae:f0:22:9b:
42:dd:7c:b3:26:4e:01:80:e2:3a:bc:ee:f4:73:51:22:b5:68:
62:e5:04:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:44 2024 by rpki-client on console-ams.rpki-client.org