Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4_c_vYI1Z8e-NhgcytY9kBjaAEg.roa
File: 4_c_vYI1Z8e-NhgcytY9kBjaAEg.roa (raw, json)
Hash identifier: KlU16wiRUQSN6/D4miK1Zewe3cvZjC1BpeIsQAmJ4RE=
Subject key identifier: E3:F7:3F:BD:82:35:67:C7:BE:36:18:1C:CA:D6:3D:90:18:DA:00:48
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A46762DC884C13E0818E8D11DA6F91E26
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4_c_vYI1Z8e-NhgcytY9kBjaAEg.roa
Signing time: Wed 30 Aug 2023 12:41:04 +0000
ROA not before: Wed 30 Aug 2023 12:41:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 212.192.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:46:76:2d:c8:84:c1:3e:08:18:e8:d1:1d:a6:f9:1e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 30 12:41:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3f73fbd823567c7be36181ccad63d9018da0048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:20:b0:e6:41:28:41:7b:72:ec:58:93:98:50:
5c:30:6b:72:a6:8c:93:dd:45:42:0b:7c:3d:06:1b:
c9:36:bf:74:91:86:65:8f:05:60:47:0e:51:73:3a:
3d:e6:be:66:bb:40:d2:85:95:cc:a6:7f:a9:0c:0e:
af:e3:81:59:48:17:90:a0:83:f4:68:ed:29:45:a5:
c4:00:b4:d9:d0:36:05:b9:36:0d:18:96:d6:dd:32:
0b:4e:bb:5b:7d:9e:85:73:59:e9:52:32:97:3d:da:
51:dd:36:79:94:e2:08:06:ea:a0:3b:dc:cc:a6:36:
d5:b9:57:48:63:d8:a5:dc:aa:b3:25:ed:83:55:9b:
8b:af:97:c7:67:e6:82:48:ad:e1:af:db:e3:0c:39:
75:1b:25:34:b4:49:8c:cb:65:e6:98:bb:12:2a:01:
f7:d8:50:ca:ae:60:8d:4e:25:6c:6a:96:b5:b2:81:
4f:6f:b1:85:11:d2:18:fc:5d:71:f1:65:5a:63:d8:
8b:2a:e1:4e:d1:aa:be:24:c0:a1:dd:81:50:87:57:
64:5f:c0:e8:79:f4:e0:40:a9:7d:f5:5d:f1:d3:2d:
c6:37:17:0e:4d:9b:6d:12:49:c3:b1:67:ba:2d:89:
19:b2:ec:f3:c2:73:62:f9:e9:24:03:88:a1:17:71:
50:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F7:3F:BD:82:35:67:C7:BE:36:18:1C:CA:D6:3D:90:18:DA:00:48
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4_c_vYI1Z8e-NhgcytY9kBjaAEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.251.0/24
Signature Algorithm: sha256WithRSAEncryption
60:b9:5a:9e:4b:5a:31:9f:4a:01:de:36:de:e9:a3:9e:bc:fa:
60:13:4f:f8:df:6d:5c:b9:ba:2b:a7:52:6b:49:39:25:91:26:
a8:4a:77:bc:46:55:c7:76:8e:0a:f4:be:b2:8a:2a:80:2f:46:
ea:d8:4b:c8:9a:5f:2f:3a:da:c2:cb:cb:67:14:81:28:c8:1b:
63:48:37:66:8c:f6:d7:9b:54:78:09:15:85:3a:83:ab:d1:2e:
93:65:2e:21:9e:d9:ff:3e:69:73:2a:4f:df:3e:d9:87:82:5a:
78:c0:64:b6:33:5b:50:8b:52:c4:2b:5c:92:78:27:62:eb:c1:
81:fc:54:9c:50:ce:4b:74:ad:ea:00:37:78:5e:83:56:53:c5:
48:75:ab:7d:a5:58:95:12:68:ce:9f:7c:c1:6b:9f:fa:ba:da:
3f:6b:51:08:59:71:db:a3:a5:42:6d:25:0c:c9:b9:9d:24:5a:
87:0f:9f:14:a9:91:72:9f:26:af:d5:a7:4d:a5:f0:59:96:f7:
13:b6:e4:d7:2d:cc:b4:8e:56:13:7b:3f:2e:4d:08:04:3c:ec:
de:1e:ab:18:d6:ba:b9:31:54:a8:84:eb:0f:42:2f:58:68:9e:
da:87:15:32:3d:66:b5:30:53:76:33:a5:bd:50:a5:e1:cc:fe:
07:da:de:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:18 2024 by rpki-client on console-ams.rpki-client.org