Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/prkqluetkzRICnq-wmAghDU3xps.roa
File: prkqluetkzRICnq-wmAghDU3xps.roa (raw, json)
Hash identifier: xJoCWqq5otUZ9zT0+XuIHQCHkfyUrrNSTmch9rz+bWo=
Subject key identifier: A6:B9:2A:96:E7:AD:93:34:48:0A:7A:BE:C2:60:20:84:35:37:C6:9B
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 01863FBD2E013F43E85316D75D2F9C81055C
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/prkqluetkzRICnq-wmAghDU3xps.roa
Signing time: Sat 11 Feb 2023 09:10:08 +0000
ROA not before: Sat 11 Feb 2023 09:10:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12548
IP address blocks: 212.68.160.0/22 maxlen: 22
212.68.164.0/22 maxlen: 22
212.68.176.0/22 maxlen: 22
212.68.184.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 30 May 2023 11:19:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3f:bd:2e:01:3f:43:e8:53:16:d7:5d:2f:9c:81:05:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: Feb 11 09:10:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6b92a96e7ad9334480a7abec26020843537c69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:e1:27:7b:d1:43:87:46:96:bc:80:24:0b:
4a:17:b6:cc:b6:d5:9f:3a:1b:ac:89:8c:fa:51:50:
4d:ba:7b:a2:8c:24:16:e9:6c:b3:0f:31:5d:a3:d5:
e8:f8:3d:be:db:85:49:b0:b1:3f:3c:bb:0d:a0:d4:
61:a5:a1:d9:47:3e:15:36:ae:b5:8b:90:88:18:8f:
cd:f4:71:99:6f:17:66:4d:64:0d:82:a4:e6:db:3a:
7d:f1:ef:a7:ad:bb:e8:cf:2c:0e:64:37:84:df:6d:
9f:57:70:c1:43:30:0a:66:57:d6:50:f4:44:35:7a:
a4:72:91:94:c3:7a:f9:44:d6:af:bb:18:d0:c2:28:
0d:b2:33:f4:19:87:ca:d6:42:11:07:24:48:35:71:
0b:6e:56:c7:b2:59:e1:55:91:b3:3f:2c:68:f7:70:
63:35:20:71:e6:af:65:a0:8a:a3:a6:2c:93:53:15:
29:f3:29:62:22:68:da:24:49:1f:14:4d:0d:94:63:
47:6f:f8:d0:ed:56:24:68:a0:f7:74:25:74:a5:a6:
35:35:2d:43:a7:fa:03:4c:66:78:d7:55:71:46:d5:
c1:97:52:a3:f4:cb:1c:62:bd:63:d1:98:a5:cd:18:
53:42:8c:09:8f:e9:96:12:68:1e:db:2d:5d:96:f8:
58:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B9:2A:96:E7:AD:93:34:48:0A:7A:BE:C2:60:20:84:35:37:C6:9B
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/prkqluetkzRICnq-wmAghDU3xps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.160.0/21
212.68.176.0/22
212.68.184.0/22
Signature Algorithm: sha256WithRSAEncryption
53:3a:d2:1b:06:10:c4:26:87:24:05:6c:b1:7d:f3:1a:19:ca:
7c:bf:d0:69:36:b3:a0:cd:39:a4:de:81:93:af:ca:d2:93:1a:
89:be:a3:d7:fb:6d:35:e1:9a:98:61:bf:54:bc:a3:18:d4:e1:
90:22:a7:ca:ab:08:28:0a:51:c8:7b:76:99:7c:6b:25:f1:c5:
7b:c3:e4:8e:96:9b:2c:71:1f:31:0e:dd:fa:a4:24:17:d5:ba:
15:14:86:82:cc:18:4d:71:8c:20:7e:c9:7a:88:0d:f0:d3:2c:
9c:6a:e0:fc:22:3f:c8:b5:11:0a:a7:58:08:7d:cf:0c:5d:4c:
60:3b:9c:c1:2a:39:53:67:a9:ff:62:2b:ef:05:8a:59:19:ca:
bd:2f:c0:df:04:0e:74:07:fd:4e:4b:a1:f1:a5:3b:3c:93:88:
23:3f:c3:dc:c2:9f:65:64:31:e1:6a:80:ad:89:8a:00:4c:1c:
c5:5c:15:c6:89:7f:a1:09:b2:1b:8c:ed:b5:c6:cc:78:26:58:
57:9e:10:eb:f0:58:2e:da:eb:1e:cd:ac:cc:8b:27:38:51:38:
02:6c:96:2c:1e:7c:4f:d0:99:8e:8e:28:ca:4d:c4:bd:c7:1b:
e8:c7:92:e1:b2:59:ad:88:5b:21:d5:c7:e1:7d:6c:43:4d:c4:
59:50:4f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:15 2024 by rpki-client on console-ams.rpki-client.org