Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/1NWIUXd8y-1ZsV7JNRUo8Bi0u0k.roa
File: 1NWIUXd8y-1ZsV7JNRUo8Bi0u0k.roa (raw, json)
Hash identifier: b4oK/cJ2lKsHz6T5krln/ArVmiroAMAbb/g3yJNTNfE=
Subject key identifier: D4:D5:88:51:77:7C:CB:ED:59:B1:5E:C9:35:15:28:F0:18:B4:BB:49
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0185719E8C689A3EDB3AE5E9FA93DC6FAC62
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/1NWIUXd8y-1ZsV7JNRUo8Bi0u0k.roa
Signing time: Mon 02 Jan 2023 08:34:54 +0000
ROA not before: Mon 02 Jan 2023 08:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61265
IP address blocks: 212.192.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:8c:68:9a:3e:db:3a:e5:e9:fa:93:dc:6f:ac:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 08:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4d58851777ccbed59b15ec9351528f018b4bb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:17:10:75:e6:44:96:d3:45:46:dd:72:0e:e5:
de:5f:61:91:00:b3:a6:45:02:e8:6a:2c:64:92:f6:
2e:46:99:dc:85:d7:e4:61:fd:8e:32:8a:65:e6:bb:
58:fa:a2:49:6e:40:44:a8:a7:21:ee:66:c7:bb:a2:
a1:39:bd:ff:5e:fc:51:b7:60:34:90:eb:4e:8c:3c:
71:c5:8f:6c:7c:92:91:27:23:74:89:9e:93:b7:44:
f9:d5:5c:1b:3e:d8:46:4c:61:14:77:b2:68:59:19:
c7:26:d6:3b:ab:22:ac:93:1b:01:eb:4f:98:e1:79:
62:e7:fe:d0:b7:29:51:61:4c:43:97:25:56:55:84:
b3:f9:48:4d:b2:c9:cf:12:c7:ed:29:17:11:a8:44:
9a:1e:60:ad:75:4a:0d:c0:55:d2:79:69:f3:a9:cc:
18:4f:a7:f2:f0:9c:df:a5:c4:2b:7b:18:10:70:1f:
b3:95:b1:7c:cc:43:e4:7d:7d:ed:a7:d7:c7:c1:2e:
86:7f:62:7d:4c:bf:43:55:3e:f6:f4:53:76:bf:2f:
85:1b:ca:fa:94:6c:7e:d7:7c:d0:dd:0f:dc:fc:4e:
0d:13:ac:6f:41:3c:49:a9:52:f4:4f:66:4b:fa:72:
41:ad:d4:a2:73:d5:88:d0:bc:d5:24:5a:13:01:3d:
0b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D5:88:51:77:7C:CB:ED:59:B1:5E:C9:35:15:28:F0:18:B4:BB:49
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/1NWIUXd8y-1ZsV7JNRUo8Bi0u0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.226.0/24
Signature Algorithm: sha256WithRSAEncryption
23:6d:17:15:cb:53:84:4c:0f:f6:58:ad:3b:30:d2:7e:05:9e:
00:18:f6:ef:a6:d7:80:31:93:cb:34:e4:42:1d:95:43:3a:6d:
e7:c0:57:20:f2:ae:38:8c:6c:d8:92:0f:99:53:ab:ee:7a:cc:
ee:5e:81:00:b3:81:36:e6:db:a4:e2:44:4f:ca:46:0c:d2:19:
70:11:93:5e:dc:e9:38:0c:b4:13:18:88:ad:9f:1d:db:4b:16:
d5:0a:5a:8d:79:4c:1f:42:81:e4:6b:36:ca:98:f4:fa:e4:6f:
6d:30:56:e2:69:45:7d:64:5c:ec:34:e3:70:ab:d1:cc:4a:8e:
12:c0:76:16:6d:1e:b2:a1:f6:d2:f8:83:98:f6:0c:0d:8a:dc:
af:3c:49:08:94:de:94:a8:87:b6:fd:5c:07:20:68:88:36:46:
d5:68:31:26:0d:61:32:6b:71:e9:a1:5b:20:21:94:a0:be:96:
ff:41:99:85:c6:33:c3:1c:6b:90:7a:2a:0e:3f:8b:39:4f:ea:
a7:82:82:4d:7f:ed:ee:96:f9:8f:5f:78:9e:e6:1f:63:74:d9:
34:bc:65:90:e6:9d:8b:6f:be:ed:2e:1c:84:79:b1:45:64:a9:
ec:64:91:c5:a3:06:ed:11:25:9b:a0:b2:66:e1:a6:60:b2:47:
7e:08:91:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org