Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/HUvLQypN5DrR-JzqIu72ibqGsKw.roa
File: HUvLQypN5DrR-JzqIu72ibqGsKw.roa (raw, json)
Hash identifier: btM8zzr1rFd10jTr4skf05EcuFImWiwMn5CvxngaDro=
Subject key identifier: 1D:4B:CB:43:2A:4D:E4:3A:D1:F8:9C:EA:22:EE:F6:89:BA:86:B0:AC
Certificate issuer: /CN=b0cc95fc42f3d81920f464b0f20c8a5203f21e30
Certificate serial: 01898CD6FF9D655EB51B79114E7BB00E0353
Authority key identifier: B0:CC:95:FC:42:F3:D8:19:20:F4:64:B0:F2:0C:8A:52:03:F2:1E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/HUvLQypN5DrR-JzqIu72ibqGsKw.roa
Signing time: Tue 25 Jul 2023 11:37:27 +0000
ROA not before: Tue 25 Jul 2023 11:37:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212215
IP address blocks: 212.8.192.0/19 maxlen: 24
212.15.192.0/19 maxlen: 24
2001:ae0::/31 maxlen: 32
Validation: Failed, certificate revoked on Fri 03 Nov 2023 08:53:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8c:d6:ff:9d:65:5e:b5:1b:79:11:4e:7b:b0:0e:03:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0cc95fc42f3d81920f464b0f20c8a5203f21e30
Validity
Not Before: Jul 25 11:37:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d4bcb432a4de43ad1f89cea22eef689ba86b0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:7e:91:20:1d:af:64:8a:92:92:ff:35:db:
eb:79:dd:7d:1f:b1:bc:09:c9:64:34:21:c4:cb:22:
26:07:e3:1d:e7:7c:47:8c:26:66:c4:d0:cb:33:9c:
49:55:82:22:f3:15:54:46:fc:9c:f9:0f:75:05:20:
36:0c:07:b4:39:f5:f5:b8:68:ce:00:5d:43:fa:9c:
43:0b:4f:50:9a:07:62:c1:a6:42:17:ac:9f:7d:da:
8d:63:89:7b:75:b3:8f:27:10:66:0a:7d:ab:38:01:
8b:9e:6c:a8:57:b1:6f:4c:d9:fb:d2:98:83:97:56:
fb:2e:25:da:3e:33:13:91:29:81:b6:ce:d4:05:79:
74:16:fc:ac:6d:65:9a:f7:d5:40:da:dd:d5:e7:a6:
3e:6a:f7:75:0d:fe:1b:65:63:88:1b:62:d2:e0:30:
a6:1d:12:b1:28:4f:9f:57:28:bc:2e:56:57:84:b1:
8d:b2:30:be:ea:7c:b1:e7:da:b3:b7:5e:b0:73:ab:
05:b5:b4:d0:87:19:12:a4:2e:29:e6:30:dd:e7:85:
57:b6:a6:9e:02:9e:70:c3:8e:e1:ac:f1:16:27:53:
bb:00:66:53:f5:54:46:02:34:17:06:ad:e4:fe:72:
5b:ee:ad:47:41:5e:1d:f0:ed:ab:d9:c7:75:45:68:
90:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4B:CB:43:2A:4D:E4:3A:D1:F8:9C:EA:22:EE:F6:89:BA:86:B0:AC
X509v3 Authority Key Identifier:
keyid:B0:CC:95:FC:42:F3:D8:19:20:F4:64:B0:F2:0C:8A:52:03:F2:1E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/HUvLQypN5DrR-JzqIu72ibqGsKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.8.192.0/19
212.15.192.0/19
IPv6:
2001:ae0::/31
Signature Algorithm: sha256WithRSAEncryption
44:b5:7c:24:55:43:30:3d:76:72:22:57:4e:3b:cd:22:b9:e3:
9f:5f:a9:f9:51:57:c4:51:77:09:64:c1:01:6e:99:de:ce:6a:
65:10:78:1f:e9:36:c6:b6:60:5c:ee:d7:b2:fb:6c:34:f8:23:
c9:2b:e3:c7:dc:56:6b:1b:e2:6d:6b:e1:b9:34:62:ea:bb:d0:
94:4f:d7:a4:60:68:bc:c6:6a:85:b2:75:3c:f2:94:ae:e7:ef:
13:e1:21:10:fc:6c:62:3e:ef:eb:5d:59:e0:eb:f2:45:78:10:
84:d1:73:f0:f2:2b:de:8b:c3:dc:9f:8e:d1:78:89:ce:92:2b:
cc:9b:31:ff:8a:ac:7d:db:f1:97:a1:a0:35:55:73:dc:41:3d:
4a:af:d0:7e:24:20:35:f5:b4:d8:0c:04:91:c0:90:b1:cf:3c:
05:a9:3d:be:50:01:36:2d:7f:8b:01:a6:3d:95:2f:4c:66:1f:
39:bc:91:22:55:5c:44:01:a9:a7:a7:b3:c9:a0:3e:91:6a:2e:
f9:03:c5:4a:12:b5:7f:78:aa:81:42:e5:01:1a:fb:66:81:01:
2b:27:2d:0c:f4:d4:81:06:18:44:a6:05:fc:6b:50:1a:25:28:
7c:4f:17:97:08:cd:30:57:bc:80:88:b3:f6:fd:21:21:e7:e6:
10:bb:a5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:14 2024 by rpki-client on console-ams.rpki-client.org