Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Sd_pvlCGdlNjJ3Wa_NhSQHcFFxU.roa
File: Sd_pvlCGdlNjJ3Wa_NhSQHcFFxU.roa (raw, json)
Hash identifier: EuwIjRklsX5PO1btAGb6BO4gpgTvGOYJLFzCcgIwWsk=
Subject key identifier: 49:DF:E9:BE:50:86:76:53:63:27:75:9A:FC:D8:52:40:77:05:17:15
Certificate issuer: /CN=25a89539520004270d34253bdc16d87784156e1a
Certificate serial: 01856F700C5B380521C52D663D1F438703A1
Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Sd_pvlCGdlNjJ3Wa_NhSQHcFFxU.roa
Signing time: Sun 01 Jan 2023 22:24:52 +0000
ROA not before: Sun 01 Jan 2023 22:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210236
IP address blocks: 212.53.178.0/24 maxlen: 24
212.48.111.152/29 maxlen: 29
212.48.111.144/29 maxlen: 29
212.53.193.0/24 maxlen: 24
212.53.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:70:0c:5b:38:05:21:c5:2d:66:3d:1f:43:87:03:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a89539520004270d34253bdc16d87784156e1a
Validity
Not Before: Jan 1 22:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49dfe9be508676536327759afcd8524077051715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a0:6f:0e:5b:46:a3:2e:60:d1:04:bd:26:05:
4a:14:84:7a:c1:4a:24:d0:a7:94:dd:3d:4e:de:4a:
24:ac:0d:b0:d8:9d:5d:b5:37:1c:8b:0e:a5:ec:a1:
0e:40:f2:39:a6:dd:78:5e:ec:9d:b7:60:43:b5:42:
d0:b5:91:fe:29:c7:fa:c9:bd:62:30:7c:d5:7d:15:
a2:75:eb:0d:82:5b:93:34:a0:e6:1b:b7:b3:5c:d5:
f5:68:4d:16:ff:96:c9:48:02:6d:9e:bd:db:42:1e:
47:fd:5f:07:99:49:0d:f6:59:e0:f5:9f:f3:52:a2:
d4:74:9e:28:f5:cc:74:3d:98:30:70:60:f3:06:ce:
25:6e:7c:c8:01:7d:7e:a5:ce:d6:ea:4d:5c:c1:bc:
1d:7b:f3:78:92:80:e2:04:d0:ab:d9:4a:b7:0f:d7:
44:2a:2a:7f:d6:18:5e:2a:4d:4f:f4:44:9f:02:a4:
04:99:9a:6d:84:cd:82:f0:49:a4:2e:08:b4:4d:f9:
6b:b8:58:3c:38:77:1c:4e:b8:73:f5:40:b1:3f:f4:
1b:65:7c:18:50:9f:47:0f:a3:99:a6:a5:47:5b:ab:
7e:98:7d:aa:eb:a0:68:4b:10:50:21:40:f0:9e:6a:
de:50:96:30:85:5e:4a:56:be:96:1b:f0:c8:29:38:
31:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DF:E9:BE:50:86:76:53:63:27:75:9A:FC:D8:52:40:77:05:17:15
X509v3 Authority Key Identifier:
keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Sd_pvlCGdlNjJ3Wa_NhSQHcFFxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.48.111.144/28
212.53.147.0/24
212.53.178.0/24
212.53.193.0/24
Signature Algorithm: sha256WithRSAEncryption
24:39:13:09:a1:68:75:6a:7e:1e:99:53:22:61:07:a0:59:bb:
27:22:6e:d7:b3:12:b5:74:58:e1:ef:39:09:5d:25:8f:55:38:
c0:a2:e9:2b:03:78:c8:94:ec:50:01:a6:6e:ec:f4:3c:80:7a:
ef:79:cb:d5:1d:65:40:61:68:4a:71:1e:52:d3:4a:1f:15:51:
30:34:f2:3b:8d:d4:90:77:ec:64:00:22:e1:b7:ff:be:0e:51:
1e:4a:67:56:9e:4f:2c:bc:80:f9:3b:d3:e0:a9:fa:2a:da:9c:
5a:ed:31:14:88:d0:52:74:a4:ba:21:1d:42:78:16:70:fe:e6:
d0:c6:17:ac:77:4a:ac:9d:93:28:17:1b:9a:02:ac:06:ba:e2:
92:ae:86:14:67:c6:a4:d6:5e:5d:4e:f8:31:41:f8:66:ee:13:
34:2c:fc:4b:17:15:5a:da:fd:51:2c:9a:16:1b:c2:86:01:fd:
48:7a:cd:64:b2:70:67:e4:cd:4f:e0:b9:9b:e3:5b:ae:29:1d:
da:7b:c8:88:49:63:16:3f:18:88:a9:32:01:cc:a0:1a:fe:c2:
f1:dd:5d:1b:0e:e9:d7:e6:19:9c:1e:5f:47:ed:4b:a3:1c:eb:
9c:e0:72:84:e2:9f:83:68:b0:00:20:bd:cb:ea:39:9b:72:67:
19:04:79:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:10 2024 by rpki-client on console-fra.rpki-client.org