Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/6KC1QBqzg6kBUfYQiWrsSk_yT-s.roa
File: 6KC1QBqzg6kBUfYQiWrsSk_yT-s.roa (raw, json)
Hash identifier: DtKIEjcSmT/Q0wkruodk5Dk2bFqmFAqre5iug7Ryohs=
Subject key identifier: E8:A0:B5:40:1A:B3:83:A9:01:51:F6:10:89:6A:EC:4A:4F:F2:4F:EB
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0185727A351990C2BDB34B45C2E5D5CAA3F7
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/6KC1QBqzg6kBUfYQiWrsSk_yT-s.roa
Signing time: Mon 02 Jan 2023 12:34:49 +0000
ROA not before: Mon 02 Jan 2023 12:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 212.87.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Feb 2023 07:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:7a:35:19:90:c2:bd:b3:4b:45:c2:e5:d5:ca:a3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8a0b5401ab383a90151f610896aec4a4ff24feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ab:a2:ed:72:68:04:b7:7f:c7:0b:d7:18:4c:
8d:2f:25:9e:a7:a0:ca:bd:e2:68:07:c9:19:92:52:
c4:86:5b:09:8a:57:5c:f2:49:37:54:4c:1c:3a:b6:
ad:1b:47:a7:ec:29:5b:e3:97:fa:b6:e9:6f:dc:95:
44:e2:49:69:7a:40:44:e2:62:7e:09:56:90:59:54:
b9:10:30:1f:76:43:cc:21:11:84:50:45:1a:94:0e:
d5:29:f7:0e:65:12:ac:23:5a:32:47:94:ca:02:b0:
d8:9b:1d:53:e8:ff:56:2f:6d:d2:78:bc:9c:18:8a:
30:f4:93:38:af:1b:b5:33:59:29:7b:27:36:a1:98:
d8:79:20:fe:a2:5e:80:40:c3:0e:82:7e:f8:2f:0b:
9b:fa:cb:9c:be:06:18:cc:ab:83:a8:f2:2b:43:7a:
4a:2d:5d:18:f5:45:05:6b:62:b6:15:4d:e8:e8:d4:
36:29:f7:60:e3:ed:69:59:18:d9:12:9b:74:b4:fb:
8c:dc:75:01:6a:07:ca:a1:39:38:6d:83:83:6f:73:
99:7e:43:1a:38:5c:60:9e:f0:fe:44:5a:b6:b0:d8:
da:23:56:91:58:51:dc:9d:5d:25:9d:2f:5d:02:37:
40:21:b6:fa:a8:75:f3:91:58:3e:ee:7e:56:28:39:
3f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A0:B5:40:1A:B3:83:A9:01:51:F6:10:89:6A:EC:4A:4F:F2:4F:EB
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/6KC1QBqzg6kBUfYQiWrsSk_yT-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.192.0/22
Signature Algorithm: sha256WithRSAEncryption
36:00:98:ce:de:d2:8b:b9:51:cc:c0:bd:58:45:bc:d5:bd:bb:
1f:78:99:bd:3f:ee:16:b7:db:57:58:50:cc:4b:e8:f0:57:2e:
6a:53:c3:77:2c:99:9d:dd:f2:39:9a:33:ba:12:a0:0b:86:54:
cb:44:54:f8:57:ba:68:7b:b8:6e:9f:3a:b4:63:5a:9b:c6:49:
64:7c:61:e7:8f:89:d8:1b:7c:50:b8:89:fb:43:b1:6b:aa:a4:
18:d1:14:6d:ce:1d:c4:58:8a:23:af:87:f6:e0:c4:a9:d5:ee:
f9:d8:ec:d6:1b:8c:7f:46:20:93:52:5c:9c:ba:e7:9d:fe:40:
8e:ac:ce:a8:5e:da:7c:23:45:b0:b2:40:ce:ca:df:0f:a9:04:
c8:5d:10:5e:bc:79:7e:c2:f6:5e:74:9e:1f:14:a3:f4:32:26:
f0:5f:62:11:2d:fe:50:39:b6:3a:75:d1:94:93:4c:66:f2:aa:
fa:36:53:c0:93:be:9e:b8:44:3d:8d:63:67:15:c6:f4:39:a7:
9a:73:5e:2d:2b:db:db:27:a4:3a:be:a9:7f:04:b7:1c:59:a2:
78:5a:1f:ec:78:6d:f4:e5:68:ea:af:16:5e:bd:cc:44:4c:86:
aa:02:c7:fd:05:c5:1f:7d:33:6e:a5:1d:c4:b5:53:0c:24:ae:
a2:8c:8d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:15 2024 by rpki-client on console-ams.rpki-client.org