Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/At_Cw5PXkhi08hiwilQ13LMuxUs.roa
File: At_Cw5PXkhi08hiwilQ13LMuxUs.roa (raw, json)
Hash identifier: 6fbdAJTyYMj8qucHf1fTB3CACXZE7QfCuw9bnXghUfo=
Subject key identifier: 02:DF:C2:C3:93:D7:92:18:B4:F2:18:B0:8A:54:35:DC:B3:2E:C5:4B
Certificate issuer: /CN=b0cc95fc42f3d81920f464b0f20c8a5203f21e30
Certificate serial: 018B9465B969B86E15831AD3182B125AF22E
Authority key identifier: B0:CC:95:FC:42:F3:D8:19:20:F4:64:B0:F2:0C:8A:52:03:F2:1E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/At_Cw5PXkhi08hiwilQ13LMuxUs.roa
Signing time: Fri 03 Nov 2023 08:56:16 +0000
ROA not before: Fri 03 Nov 2023 08:56:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212215
IP address blocks: 212.8.192.0/19 maxlen: 24
212.15.192.0/19 maxlen: 24
2001:ae0::/30 maxlen: 32
Validation: Failed, certificate revoked on Tue 07 Nov 2023 10:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:65:b9:69:b8:6e:15:83:1a:d3:18:2b:12:5a:f2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0cc95fc42f3d81920f464b0f20c8a5203f21e30
Validity
Not Before: Nov 3 08:56:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02dfc2c393d79218b4f218b08a5435dcb32ec54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f0:c5:99:2f:e7:fa:38:fd:20:a0:27:43:1d:
95:d1:85:dd:72:94:93:3e:46:c5:ce:29:6a:b4:7a:
b3:75:fe:5c:22:24:eb:e5:17:62:83:c0:5d:28:cf:
50:ee:89:e1:cd:c4:a9:60:6e:cb:3d:2b:df:36:54:
9d:92:4e:1c:ea:01:9a:80:08:0c:bd:4b:36:de:14:
69:bc:d2:e8:de:9a:14:cd:6b:f0:fe:4f:c9:ed:5f:
01:4b:9b:32:a3:36:0d:e1:e1:91:4d:53:5e:5e:c4:
fc:d1:df:5d:29:87:28:d2:3a:70:58:3c:74:ad:c7:
98:18:59:6b:d0:40:63:21:7f:d2:f5:d1:e3:fa:5c:
e8:69:58:d7:73:b2:7d:7d:53:cc:7a:21:18:00:4f:
35:7e:d2:b6:38:b0:1b:3d:55:cf:d9:77:4f:bd:df:
6b:69:9f:2b:a2:3f:07:05:38:12:8a:28:5d:57:a4:
d7:c2:b6:6a:88:f9:2f:32:42:39:fc:79:66:b2:11:
83:50:13:ed:81:ab:5a:6b:a9:eb:ca:29:91:c0:fb:
60:09:85:47:5b:fb:a2:04:e1:06:f7:e2:7e:5e:cb:
63:99:52:48:45:6e:7c:28:e8:71:f1:7e:46:9a:ca:
d4:50:ff:8c:d0:ec:46:ea:16:f0:36:9a:98:fb:c9:
bf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DF:C2:C3:93:D7:92:18:B4:F2:18:B0:8A:54:35:DC:B3:2E:C5:4B
X509v3 Authority Key Identifier:
keyid:B0:CC:95:FC:42:F3:D8:19:20:F4:64:B0:F2:0C:8A:52:03:F2:1E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/At_Cw5PXkhi08hiwilQ13LMuxUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.8.192.0/19
212.15.192.0/19
IPv6:
2001:ae0::/30
Signature Algorithm: sha256WithRSAEncryption
ce:a0:ce:b7:8f:f0:9b:3b:75:af:03:5a:b3:b1:8e:91:e1:af:
33:55:ce:23:fc:88:9d:fe:32:a6:92:52:15:68:1c:f3:47:99:
b7:68:d0:6f:e7:f4:3f:20:94:d1:84:46:5f:24:44:27:b8:cf:
9b:c5:d8:1b:f0:40:ed:c0:f5:9c:04:a5:03:f8:ee:78:d0:81:
59:0a:72:e5:03:56:8c:ba:97:e7:c9:b8:60:aa:90:42:55:c1:
30:9a:1a:a2:94:8b:4d:2b:a9:87:17:32:f6:79:66:0b:90:1f:
a6:01:17:1f:3e:67:ca:5a:7c:20:f3:aa:03:14:92:cf:ae:7e:
17:ca:e2:b7:63:1a:64:93:89:79:c3:34:23:72:c4:99:d0:4b:
86:15:03:12:4b:47:70:fa:34:50:16:26:ff:1a:60:7e:37:1c:
de:a7:0b:34:6e:8c:90:ee:6c:f1:90:a3:4f:18:97:86:65:0f:
32:2d:43:44:0f:d7:71:ad:8f:13:d8:68:19:01:14:3e:b6:a3:
c1:13:d3:d0:3a:0c:2c:71:a5:d5:74:ba:3d:4d:4d:65:81:2c:
8b:d1:68:2f:3b:30:82:75:ef:dd:c9:7f:92:51:c5:29:f2:a8:
d1:bd:a9:42:5b:a4:dd:cf:78:04:4b:6b:c5:12:92:84:b6:1d:
5e:71:86:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:20 2024 by rpki-client on console-fra.rpki-client.org