Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5iNuoiep1zgM_g_nxne6oUCjzrw.roa
File: 5iNuoiep1zgM_g_nxne6oUCjzrw.roa (raw, json)
Hash identifier: iQc+jTs7OjkG4mmGsAs+10h9dGuDL2KH3cJf118A3Hw=
Subject key identifier: E6:23:6E:A2:27:A9:D7:38:0C:FE:0F:E7:C6:77:BA:A1:40:A3:CE:BC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01874FC924181CE4BCE721FE696AF7011D6B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5iNuoiep1zgM_g_nxne6oUCjzrw.roa
Signing time: Wed 05 Apr 2023 04:59:54 +0000
ROA not before: Wed 05 Apr 2023 04:59:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61003
IP address blocks: 212.193.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4f:c9:24:18:1c:e4:bc:e7:21:fe:69:6a:f7:01:1d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 5 04:59:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6236ea227a9d7380cfe0fe7c677baa140a3cebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:83:10:a6:05:df:bf:51:5f:65:75:4c:5b:17:
2b:41:f2:24:f8:eb:6d:2f:03:48:dd:83:33:7d:5f:
42:2a:2d:35:46:7a:52:55:2e:a4:af:a5:5f:a3:3f:
6a:51:38:8c:ac:2e:c8:93:57:e8:32:78:a2:7f:db:
d8:92:60:40:ce:71:0a:ea:8c:c8:74:a0:1d:5f:a3:
2b:8a:5d:75:60:b4:61:69:26:6c:c8:c1:92:cd:ff:
a6:1e:d3:ca:d4:3b:74:a9:0a:02:94:bb:5f:ca:3e:
25:bc:1d:fe:26:e7:6b:69:95:b0:5b:a1:27:55:ee:
87:5e:f3:ab:8f:f8:d7:e3:30:2b:f1:92:20:99:1b:
1f:bb:da:0f:b7:be:f1:e3:b3:0e:53:1c:35:65:7d:
3f:fd:e2:34:cc:8c:6c:2c:86:8a:54:fc:f0:9c:2e:
1b:5f:20:a9:98:40:f8:33:55:46:10:da:4c:df:fd:
f3:c9:fc:2e:71:a9:01:e6:d8:7a:91:d4:ed:15:36:
23:80:9c:b1:66:36:a8:df:44:3f:4a:1b:80:74:0e:
ae:d9:c9:37:69:57:1b:24:99:83:88:2e:16:11:f1:
38:59:ca:5a:65:26:a9:97:69:4a:51:29:c3:dc:ad:
7c:f8:89:a0:48:b5:a1:9e:dc:78:3c:2e:8d:bd:27:
d7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:23:6E:A2:27:A9:D7:38:0C:FE:0F:E7:C6:77:BA:A1:40:A3:CE:BC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5iNuoiep1zgM_g_nxne6oUCjzrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.193.3.0/24
Signature Algorithm: sha256WithRSAEncryption
34:7d:c4:4c:08:d5:13:f6:07:bc:53:a8:72:30:54:d5:6c:c7:
bd:3f:0c:21:d8:a0:23:83:e9:ae:3d:fb:92:8d:1e:8e:a3:70:
c1:5a:04:63:a4:0c:43:0b:fa:3a:82:b6:49:45:c8:6c:cd:b9:
89:59:5e:b0:c0:f6:06:f0:71:17:1c:64:16:44:9c:84:8e:02:
51:0c:e6:fc:77:8a:ff:d4:67:d8:f1:2a:10:d9:49:f0:fa:ac:
06:96:5f:07:ce:6f:c0:70:64:70:b9:67:fd:38:a8:a8:ff:8f:
b2:29:81:75:3a:ef:a2:5b:fd:ba:19:22:51:6d:be:69:0a:1f:
18:49:6a:82:cb:4e:c3:88:dc:c6:29:d9:dd:01:27:87:4a:d1:
10:06:14:4d:90:52:93:6b:6e:1d:a6:61:13:e8:4e:fb:ff:c7:
c1:a2:51:ea:3f:5e:68:9f:53:c0:35:e7:b0:9a:2a:5f:f0:1c:
d7:02:e8:b7:c1:83:6f:9b:f5:4b:32:f2:69:90:47:28:d7:76:
05:4c:23:1a:b4:88:04:68:6c:bd:52:fc:4b:94:59:bb:f9:96:
12:7b:0c:bf:f7:60:be:55:d0:90:fc:63:29:fa:73:a5:ef:b6:
1a:36:36:df:58:57:a4:b8:05:b9:b6:79:c8:0c:24:63:0c:d8:
37:4e:9c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:20 2024 by rpki-client on console-fra.rpki-client.org