Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/4TKGNn4fobG-tWiRzTm9-uDMAoo.roa
File: 4TKGNn4fobG-tWiRzTm9-uDMAoo.roa (raw, json)
Hash identifier: czbF3hwnJshPJQg5Nh0BcaeDLaZNjK5DhhOX6vwZN7E=
Subject key identifier: E1:32:86:36:7E:1F:A1:B1:BE:B5:68:91:CD:39:BD:FA:E0:CC:02:8A
Certificate issuer: /CN=58fdc4e22becb535a1c57f4b8dc441b5331677e3
Certificate serial: 01856D78887F9A0A07F437E735000A532218
Authority key identifier: 58:FD:C4:E2:2B:EC:B5:35:A1:C5:7F:4B:8D:C4:41:B5:33:16:77:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WP3E4ivstTWhxX9LjcRBtTMWd-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/4TKGNn4fobG-tWiRzTm9-uDMAoo.roa
Signing time: Sun 01 Jan 2023 13:14:53 +0000
ROA not before: Sun 01 Jan 2023 13:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47194
IP address blocks: 212.65.160.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:88:7f:9a:0a:07:f4:37:e7:35:00:0a:53:22:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58fdc4e22becb535a1c57f4b8dc441b5331677e3
Validity
Not Before: Jan 1 13:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e13286367e1fa1b1beb56891cd39bdfae0cc028a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:16:d2:6b:7b:2e:ba:d6:0f:83:ab:cc:75:e2:
11:14:d1:74:73:cb:a8:5f:06:9b:b6:94:56:82:42:
41:54:c7:59:1b:81:10:f5:df:a8:ce:1c:ee:97:90:
0a:c9:44:d3:c3:c0:15:9f:d2:a8:4a:07:8b:b3:bf:
4a:f1:21:c9:2e:ef:97:32:28:9f:a5:ea:74:34:06:
2d:09:81:be:31:77:7f:9d:95:2f:47:67:6e:c3:b3:
9c:72:a9:e2:c9:cf:84:14:96:da:1e:73:a8:d2:bc:
57:05:82:f6:d9:86:fd:2d:32:5d:8d:93:cd:f1:81:
c8:8c:9c:8d:e6:f7:b5:a7:a0:9d:1d:bd:4f:2c:37:
39:78:98:f8:04:2d:ed:24:45:c6:e6:c8:cd:9a:47:
94:7d:c1:eb:23:cc:0f:22:31:29:ec:ce:c1:81:45:
8a:9b:6a:5c:04:8a:b7:da:e0:f1:d1:6e:f2:58:6a:
b1:47:04:90:d1:8a:ea:d9:6e:4c:cf:77:30:b7:53:
1a:52:b3:63:d9:b6:28:28:18:15:2a:9c:d4:62:89:
c7:b8:c8:e5:10:a8:6d:8c:0f:8f:29:05:18:76:d9:
dd:46:aa:7f:84:ab:4c:24:05:58:de:b1:3b:b2:93:
7e:e8:7c:12:f9:fe:57:c9:06:ee:20:cc:92:65:8f:
d8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:32:86:36:7E:1F:A1:B1:BE:B5:68:91:CD:39:BD:FA:E0:CC:02:8A
X509v3 Authority Key Identifier:
keyid:58:FD:C4:E2:2B:EC:B5:35:A1:C5:7F:4B:8D:C4:41:B5:33:16:77:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP3E4ivstTWhxX9LjcRBtTMWd-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/4TKGNn4fobG-tWiRzTm9-uDMAoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.65.160.0/19
Signature Algorithm: sha256WithRSAEncryption
96:3e:4c:1b:70:53:20:7c:3d:f3:6e:e2:bd:e1:4a:17:13:6d:
b2:8e:39:ad:2c:13:2b:67:b3:02:30:d0:a3:8a:5a:e6:5e:e1:
a5:9b:e7:e9:3d:d8:8f:a9:37:79:4d:73:9e:09:f2:62:c9:2d:
6c:42:a1:80:78:c2:65:43:1a:c3:a0:70:7f:7a:63:3a:0d:a9:
ba:55:1c:92:9f:2a:7d:29:0a:8d:65:7e:84:f9:94:5a:ff:ff:
a8:13:64:66:89:f0:a5:75:81:5c:67:01:91:72:43:be:5b:aa:
e8:eb:ee:20:af:84:6b:f5:c9:f5:fb:92:bf:33:d8:2f:cd:a3:
63:2e:a0:21:64:a2:a8:5b:46:1c:68:41:80:86:d5:65:f5:92:
c9:36:6d:f4:69:dd:b4:f2:a1:d3:c3:d2:b2:49:e9:61:85:59:
9f:41:ae:5c:96:a3:7d:b4:34:fb:cd:d1:2d:d4:03:46:ea:2a:
c5:c1:47:b1:0d:1e:c6:e2:c3:a3:81:98:d2:30:83:03:cb:64:
0d:89:20:71:5a:dc:23:97:60:22:e4:0c:4f:35:f5:cc:c4:f5:
03:fb:9b:de:5c:82:17:4a:31:89:b4:85:9b:03:c1:85:64:ef:
da:ae:a3:08:cc:cd:1a:63:32:18:a2:e5:c1:c0:80:ea:6f:71:
bb:4e:96:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:45 2024 by rpki-client on console-fra.rpki-client.org