Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/JeRhMqcVZt7aXTysUOwXg8q9tpQ.roa
File: JeRhMqcVZt7aXTysUOwXg8q9tpQ.roa (raw, json)
Hash identifier: fvQOBIvQRe0Qp74IssdqGuh0Sgn19dlUpYeKS3j1I3E=
Subject key identifier: 25:E4:61:32:A7:15:66:DE:DA:5D:3C:AC:50:EC:17:83:CA:BD:B6:94
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01856CE66CBF67AE33A67540591214B37434
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/JeRhMqcVZt7aXTysUOwXg8q9tpQ.roa
Signing time: Sun 01 Jan 2023 10:35:18 +0000
ROA not before: Sun 01 Jan 2023 10:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202690
IP address blocks: 212.5.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:6c:bf:67:ae:33:a6:75:40:59:12:14:b3:74:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 10:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25e46132a71566deda5d3cac50ec1783cabdb694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:08:b9:1f:89:32:70:4b:b7:40:90:4e:e2:53:
73:7e:07:e2:a6:6c:b2:44:6a:60:10:66:f3:9d:0b:
0f:58:1b:99:27:c8:59:03:6b:39:43:89:b3:64:66:
a9:fd:ea:6c:e5:03:f8:eb:40:0c:62:f8:db:9b:38:
13:cc:3e:f8:05:e0:76:77:a5:b2:08:ec:6d:6b:db:
de:d6:25:81:6f:3c:dc:e0:08:a7:3e:ec:c7:7b:d4:
48:e0:2e:3e:61:fc:ae:31:c4:2b:d5:fb:59:db:4e:
90:fa:b4:9d:d0:6e:0c:9e:f7:8f:e8:09:43:19:4f:
58:00:c0:85:ad:eb:f9:5e:98:2f:fc:6b:0b:eb:1f:
d4:ff:dc:1d:4e:78:00:ae:b8:eb:0e:a1:f6:76:a2:
d3:d9:7e:59:f6:47:ec:b9:77:96:56:a0:9e:b2:47:
14:40:ec:72:ef:bf:cc:65:2c:9b:e1:3b:38:05:ab:
1d:26:46:70:d7:73:f1:8c:ee:a7:a3:03:73:ac:a4:
99:f6:c3:3c:a6:ee:49:7f:a7:f8:82:d3:a6:fe:35:
20:dc:a4:f4:da:02:60:fc:b6:7f:7a:05:5b:d8:d1:
37:48:17:56:df:02:98:f1:86:0a:1a:f9:e6:9b:a5:
8d:ec:0f:0c:e4:80:15:dd:28:98:8b:7a:ae:c9:4e:
ed:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E4:61:32:A7:15:66:DE:DA:5D:3C:AC:50:EC:17:83:CA:BD:B6:94
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/JeRhMqcVZt7aXTysUOwXg8q9tpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.5.156.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:00:53:5e:de:6c:38:df:26:7f:35:2a:09:8e:75:3b:80:41:
2b:3e:3f:cc:ee:11:92:be:fa:0b:00:11:3c:a7:5b:1e:b0:1b:
ed:de:ff:0d:c3:10:db:82:78:1f:01:b9:5b:51:4f:0c:bf:04:
0e:a7:72:ce:eb:3a:59:38:58:5d:a0:2d:0c:03:a6:89:00:b8:
49:a0:ae:b4:69:b6:3a:f1:6c:ff:58:bd:68:24:cf:4a:fd:7e:
0e:1f:27:df:b0:bd:56:c5:4f:a3:f4:83:8b:31:66:8c:51:c3:
8b:40:fa:00:58:c0:ea:54:70:ee:31:9d:4d:51:32:e0:67:86:
12:85:c4:1b:8a:46:36:e4:3b:36:b1:08:e9:6e:05:21:5d:09:
d7:05:64:65:24:51:bc:25:35:7a:07:17:7e:00:ca:3a:31:d7:
dd:bd:9a:a1:77:6b:da:e9:20:7a:a9:f9:26:22:88:11:18:09:
27:fb:09:fb:57:3d:04:13:4d:d4:39:7f:94:3a:88:45:c9:05:
78:6c:56:3d:bf:05:d1:75:e9:45:e2:29:b4:f5:90:47:5c:27:
c4:85:a1:32:65:f5:0e:99:37:3d:b7:42:17:8c:04:c0:44:c0:
53:0f:d4:94:60:42:c5:1c:03:95:d0:c9:7f:a9:c1:08:4f:1e:
1f:f9:6a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:04 2024 by rpki-client on console-fra.rpki-client.org