Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/2pVIdCnGeptu4Htl_Wp-IJ81nBY.roa
File: 2pVIdCnGeptu4Htl_Wp-IJ81nBY.roa (raw, json)
Hash identifier: LS40cPEiMuP3oo/XVM2ykz3vAHYwQevS83SpQBrb750=
Subject key identifier: DA:95:48:74:29:C6:7A:9B:6E:E0:7B:65:FD:6A:7E:20:9F:35:9C:16
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 0189B5F2895D3EC13766946F30E6C8F688B5
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/2pVIdCnGeptu4Htl_Wp-IJ81nBY.roa
Signing time: Wed 02 Aug 2023 11:11:58 +0000
ROA not before: Wed 02 Aug 2023 11:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209805
IP address blocks: 212.22.70.0/24 maxlen: 24
212.22.94.0/24 maxlen: 24
185.65.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:f2:89:5d:3e:c1:37:66:94:6f:30:e6:c8:f6:88:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Aug 2 11:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da95487429c67a9b6ee07b65fd6a7e209f359c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:34:da:b8:60:2b:d8:4f:f0:4f:91:01:60:c0:
00:56:83:c5:84:19:7f:80:c0:b7:52:12:13:2e:92:
77:a8:c1:9a:97:aa:66:b0:35:fc:12:f2:54:db:41:
c9:52:ed:33:8d:d6:df:f3:59:3c:ec:7f:ef:e0:99:
02:ea:46:c3:6c:12:d2:c1:d4:88:de:e1:29:88:95:
44:ef:dd:36:a8:b1:0a:25:fb:9d:b8:eb:f6:71:b7:
06:cd:f8:81:61:9e:57:74:25:3c:bf:6b:07:3a:ec:
4e:da:34:05:6f:e9:38:6d:4b:a7:47:69:ff:bd:fe:
ac:d6:d1:ce:01:7d:27:fe:dc:64:67:5e:e1:b4:79:
c7:7f:bd:39:9c:7c:b8:69:48:b7:15:5b:d6:83:4a:
6d:87:5c:15:95:33:09:d4:d1:ee:0f:d3:55:b7:8c:
33:b4:64:97:4b:aa:31:2a:a8:be:fa:79:e2:ed:35:
ba:ba:21:be:0f:7d:64:6f:0d:28:8a:7a:17:85:e3:
06:f7:33:7d:b7:19:7b:41:22:f4:69:fd:b4:4b:18:
36:4d:6c:31:cf:7e:71:f8:84:e5:37:29:e6:35:d8:
18:a2:8c:56:e5:01:1d:a2:04:78:95:f3:4a:b0:3c:
a8:f8:28:b3:01:58:b4:98:d1:84:6e:f2:eb:47:c2:
ea:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:95:48:74:29:C6:7A:9B:6E:E0:7B:65:FD:6A:7E:20:9F:35:9C:16
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/2pVIdCnGeptu4Htl_Wp-IJ81nBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.200.0/24
212.22.70.0/24
212.22.94.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:cb:af:3a:ee:b9:03:4a:87:95:c9:15:01:01:49:8d:1a:7c:
6a:61:64:97:26:f5:19:76:5a:ce:86:b9:72:bf:fe:ed:88:31:
a7:7f:e7:f6:2c:88:9c:2e:4b:d0:7e:b5:ca:70:60:49:fd:3b:
62:64:7e:6d:f9:82:22:d8:e7:09:aa:eb:09:f2:62:cf:cb:40:
97:4f:79:37:8a:3a:11:0e:f7:63:3f:7b:8d:d5:e9:26:99:e2:
29:a8:76:30:af:1b:8c:df:cc:f3:7e:1f:d8:cf:67:31:ef:cf:
7f:b7:3d:b1:a1:53:21:f8:04:46:de:ed:5d:fa:57:73:59:b5:
c2:a3:c4:3d:40:c7:a3:b8:4e:a6:39:bb:8a:a3:85:f1:d6:49:
37:5f:bb:8e:b1:7d:65:7a:52:aa:e7:43:7b:63:61:e5:39:38:
53:71:02:5c:b1:db:23:36:b2:e6:44:a7:8a:d7:6a:0f:74:fd:
4e:e7:8f:c9:42:5d:5b:66:08:cb:9b:60:bd:2f:03:de:e8:66:
f9:1f:53:a3:62:c8:e6:46:c8:e4:6c:2d:1b:8d:fc:7e:b5:6f:
cc:a5:1b:d7:35:6b:4a:3b:cb:61:61:e0:08:70:94:3f:e5:58:
5f:8e:94:a1:f7:69:c4:94:32:1f:e5:52:e0:67:f8:b1:6f:97:
ab:09:0e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:21 2024 by rpki-client on console-ams.rpki-client.org