Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/DyQ-7JdTWG0LSvwlKHFIfVkzSSc.roa
File: DyQ-7JdTWG0LSvwlKHFIfVkzSSc.roa (raw, json)
Hash identifier: zPIJQ1ypaPLRUaVh0kYFsehJL2v6CTeyzmXENxdz1WE=
Subject key identifier: 0F:24:3E:EC:97:53:58:6D:0B:4A:FC:25:28:71:48:7D:59:33:49:27
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 01856D385D7A6CEFB5F6024C886F1F73D1F4
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/DyQ-7JdTWG0LSvwlKHFIfVkzSSc.roa
Signing time: Sun 01 Jan 2023 12:04:48 +0000
ROA not before: Sun 01 Jan 2023 12:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12548
IP address blocks: 212.68.160.0/22 maxlen: 22
212.68.164.0/22 maxlen: 22
212.68.172.0/22 maxlen: 22
212.68.176.0/22 maxlen: 22
212.68.180.0/22 maxlen: 22
212.68.184.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 09 Jan 2023 21:28:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:38:5d:7a:6c:ef:b5:f6:02:4c:88:6f:1f:73:d1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: Jan 1 12:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f243eec9753586d0b4afc252871487d59334927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:99:a9:fe:b2:cf:13:81:12:70:1f:d9:d2:1c:
87:25:92:ce:ca:eb:3c:39:8b:e0:0a:89:32:d7:57:
cf:2b:2d:21:05:19:dd:71:ea:78:35:a3:17:dc:c7:
34:83:a8:1c:13:6c:b4:d2:a3:54:97:b2:17:a7:bc:
41:32:d5:17:ab:37:4a:6d:c6:93:60:75:7e:93:00:
77:bd:c5:ab:fc:69:b4:b8:d8:bd:cb:08:26:85:ec:
89:e0:9d:e4:5c:85:ba:3a:23:30:c2:91:23:a8:6e:
33:87:8a:13:82:7d:53:9c:6a:36:79:f6:54:ad:74:
f0:01:24:73:73:0a:07:a1:e4:6b:da:ae:8e:84:1f:
ee:65:ee:a9:38:4a:95:7d:e9:8d:34:9e:c0:ec:8d:
a7:0f:62:ba:7b:71:ae:d6:cf:f9:bf:3a:d2:c7:11:
0e:18:28:d4:e6:c2:f0:3c:89:f1:46:d8:a1:b0:62:
b8:ad:7c:04:a8:ef:a5:5f:9c:e5:f5:aa:40:93:db:
88:05:a0:5c:a2:e2:ce:9b:24:e7:f3:72:e4:b0:85:
73:cf:84:1c:94:ed:39:9c:c0:43:23:4b:f4:1d:b2:
a4:f5:9d:58:76:44:b5:e6:6c:53:5e:7a:1b:81:27:
73:80:9c:3e:9f:29:1e:c2:ea:8f:f1:e5:88:d9:b4:
7d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:24:3E:EC:97:53:58:6D:0B:4A:FC:25:28:71:48:7D:59:33:49:27
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/DyQ-7JdTWG0LSvwlKHFIfVkzSSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.160.0/21
212.68.172.0-212.68.187.255
Signature Algorithm: sha256WithRSAEncryption
0b:1e:d8:d4:29:05:c9:d4:7e:c2:8b:66:6f:17:1b:d8:8d:73:
48:91:79:6c:43:87:7e:e6:f9:d6:f5:c3:5f:f6:e5:ea:ec:54:
56:04:b6:bd:fb:0b:4d:b0:f0:ae:c2:c9:20:ff:9d:ba:6c:73:
3f:96:3a:12:75:e5:bc:b2:a5:e2:d4:7e:7d:0f:f9:10:f8:a8:
3e:b8:4a:a7:7f:3d:08:0f:e4:4c:92:07:74:34:9c:41:3c:e9:
c5:42:e1:df:50:4c:f5:a9:72:78:16:73:b8:b3:00:ca:7b:35:
ec:b4:b7:94:4e:e1:1c:62:40:5c:a3:0a:c3:3f:63:33:eb:1a:
fa:41:b2:90:33:f4:6f:66:6c:b0:f1:7d:d3:7b:da:c2:0c:35:
20:d9:ca:9a:f2:57:17:a9:ab:4b:c5:2a:4e:7e:3e:0c:e9:ac:
bb:56:8b:62:09:c8:c9:48:78:77:5e:b5:3a:30:4f:ee:fd:35:
7a:12:b3:73:6a:78:8b:86:ea:f2:93:ea:f9:0e:91:8c:fe:63:
08:3d:2e:2e:c6:74:4b:fc:51:8b:ae:78:16:f3:3e:ab:dd:e6:
23:dc:49:23:cd:d9:1e:31:6b:58:7b:10:a7:ac:75:c8:1e:62:
67:4d:17:5e:88:a7:ce:34:40:06:08:1d:76:6b:c8:12:c9:a1:
50:a1:ab:c8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:15 2024 by rpki-client on console-ams.rpki-client.org