Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/12wydMsq-7ru7RcRAA7g-7463LI.roa
File: 12wydMsq-7ru7RcRAA7g-7463LI.roa (raw, json)
Hash identifier: EwZnMqkcgMGDzyOnngux76Ybptjz5yZ0YsIEOiiWYp4=
Subject key identifier: D7:6C:32:74:CB:2A:FB:BA:EE:ED:17:11:00:0E:E0:FB:BE:3A:DC:B2
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 018B480F04492532E9CC604B995D049903DF
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/12wydMsq-7ru7RcRAA7g-7463LI.roa
Signing time: Thu 19 Oct 2023 13:10:25 +0000
ROA not before: Thu 19 Oct 2023 13:10:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25054
IP address blocks: 81.90.192.0/20 maxlen: 24
185.94.36.0/22 maxlen: 24
212.101.32.0/19 maxlen: 24
130.193.96.0/21 maxlen: 24
2a02:1318::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:48:0f:04:49:25:32:e9:cc:60:4b:99:5d:04:99:03:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Oct 19 13:10:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d76c3274cb2afbbaeeed1711000ee0fbbe3adcb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c4:75:e1:6f:c9:0e:75:01:68:ae:85:89:ce:
dd:08:d8:f9:a1:96:7a:57:d0:b0:fc:26:aa:7e:9d:
ea:82:72:7b:1f:7c:4f:05:b6:ee:e5:f7:3b:ed:d4:
f8:41:fa:35:78:00:1a:d9:ff:23:0d:f1:93:cc:7e:
e8:eb:f6:b8:83:c2:13:c2:9d:f6:31:01:38:7a:89:
ee:ab:b4:76:bf:54:d7:a6:80:d4:52:d4:94:a7:02:
96:1d:79:1b:6d:e8:c9:90:85:d0:b4:66:31:1b:cc:
96:05:86:8d:c9:0f:b4:9e:b5:df:48:35:65:1f:95:
6c:2e:08:b9:89:9a:00:6c:c4:c2:ae:f7:c3:96:56:
e8:3d:cc:76:14:7c:be:69:f3:ee:73:8c:ea:7b:d9:
d8:d8:1c:c4:c5:8c:6e:a2:89:eb:83:f2:ef:06:04:
26:bb:4e:3f:67:1a:d1:5e:0c:78:3d:dd:a8:5d:b3:
4d:7f:d2:5e:a2:d4:18:93:71:0f:49:f9:30:e6:03:
dd:11:5c:7a:ff:17:6e:10:21:45:46:f6:eb:24:cb:
91:6d:fa:53:3a:3a:56:33:6f:39:0b:cc:55:d4:84:
17:eb:a2:32:49:d5:cf:90:1f:09:c6:a4:62:f4:40:
2a:d9:65:06:12:96:35:d3:1f:36:59:fd:60:64:33:
e5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6C:32:74:CB:2A:FB:BA:EE:ED:17:11:00:0E:E0:FB:BE:3A:DC:B2
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/12wydMsq-7ru7RcRAA7g-7463LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.192.0/20
130.193.96.0/21
185.94.36.0/22
212.101.32.0/19
IPv6:
2a02:1318::/32
Signature Algorithm: sha256WithRSAEncryption
95:c6:dd:2b:d2:e5:3b:bc:08:d3:27:a8:55:ac:80:ec:07:34:
95:07:b1:8e:0e:63:ab:40:51:bc:69:8f:99:86:29:fe:50:c5:
bd:aa:21:cb:17:f4:9e:f0:25:f3:87:9e:ac:f8:33:1b:ae:d8:
ad:55:52:86:cb:b3:37:e6:59:5f:2f:e6:d4:00:b5:3d:45:78:
1e:1d:5b:5c:0c:d3:68:27:4e:9a:f2:d2:4b:f1:25:0f:34:6c:
73:54:1a:5c:91:11:8c:43:08:23:d0:42:a3:8f:58:04:f6:95:
4a:69:12:9c:fc:81:f4:c1:04:40:c6:69:09:d0:25:99:fb:cb:
3f:3e:79:46:ac:d1:72:94:7f:48:4b:53:31:2b:e1:27:95:7f:
7a:2d:8e:fc:d3:21:53:87:14:39:ee:af:17:3c:a9:3e:8b:c0:
e2:c3:43:9d:06:89:46:49:d8:22:94:7b:1c:de:81:6a:e9:61:
e6:89:31:2e:77:54:10:20:55:03:79:c7:7c:26:9f:c1:60:0a:
1d:ba:24:41:61:05:f4:e2:c3:2f:23:a3:e0:d3:ca:d5:0e:b0:
49:54:a7:14:f9:98:6c:92:3a:0b:19:14:e9:43:76:da:58:88:
36:15:5f:20:8c:3d:dc:7a:1f:0c:bd:51:57:22:10:91:a7:0c:
30:fe:a5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:27 2024 by rpki-client on console-ams.rpki-client.org