Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ApHHe3FoYupjtA2fufUyQFYy-TQ.roa
File: ApHHe3FoYupjtA2fufUyQFYy-TQ.roa (raw, json)
Hash identifier: dzBKYR9FKAjCndo7tZMFmME+kMdHSSbqEmPdyxxq5kw=
Subject key identifier: 02:91:C7:7B:71:68:62:EA:63:B4:0D:9F:B9:F5:32:40:56:32:F9:34
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01926694032AF038D811BB419B1F94FDDE65
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ApHHe3FoYupjtA2fufUyQFYy-TQ.roa
Signing time: Mon 07 Oct 2024 10:43:49 +0000
ROA not before: Mon 07 Oct 2024 10:43:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216157
IP address blocks: 212.193.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 18:08:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:66:94:03:2a:f0:38:d8:11:bb:41:9b:1f:94:fd:de:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 7 10:43:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0291c77b716862ea63b40d9fb9f532405632f934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:57:44:57:26:5a:0d:c7:7b:99:cc:95:cc:71:
30:de:0c:ee:75:1c:8f:2e:e1:09:80:be:23:62:dc:
4b:b6:52:66:de:cd:45:64:b5:e4:1b:5a:51:c0:12:
eb:f6:01:df:2e:9d:28:6e:80:f0:14:04:54:b1:14:
7e:41:b5:f1:6f:bf:f8:81:d6:fb:a4:6b:94:af:ea:
56:21:71:3b:59:c8:8e:6a:38:13:f7:79:16:88:bb:
8a:a1:14:e7:18:6b:4e:c6:4f:9f:4c:2f:ea:c6:a0:
0d:24:94:5d:c3:69:5e:79:9a:f4:d9:56:41:03:60:
72:18:8d:d5:ed:df:9c:63:89:fa:de:54:a5:c3:2a:
f0:de:36:6b:6e:f6:a4:c8:0f:3b:c9:f1:4d:14:c5:
7e:f0:27:57:54:ca:a1:95:62:5e:3b:d6:83:c9:ff:
52:be:c8:ea:71:ac:bf:0f:29:ba:40:8e:d2:cd:f7:
f0:92:f1:57:29:98:35:e8:d8:4a:06:b9:58:46:47:
bc:a7:bb:cd:d6:4a:e5:77:e1:f4:a9:54:c4:53:89:
f4:9b:4e:95:f6:5f:b1:84:a7:38:57:b7:ee:b5:c9:
9f:5e:2e:cc:13:bb:33:1a:44:91:54:27:43:61:ce:
fb:18:df:33:87:69:3f:40:fc:d2:84:dd:02:c9:c5:
c2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:91:C7:7B:71:68:62:EA:63:B4:0D:9F:B9:F5:32:40:56:32:F9:34
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ApHHe3FoYupjtA2fufUyQFYy-TQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.193.11.0/24
Signature Algorithm: sha256WithRSAEncryption
19:54:ee:4d:9e:71:7a:ff:c4:f3:0a:84:a1:ca:55:e5:b5:24:
af:86:f5:87:d4:21:64:fe:65:2d:21:7d:aa:b7:fc:74:30:fe:
da:49:79:03:f3:14:97:5e:69:5c:58:59:53:ec:b3:06:64:ce:
96:11:d1:84:5b:22:d5:97:9d:57:95:37:a9:19:43:b3:22:11:
6a:bc:72:3a:30:3e:0f:1b:e8:66:8f:fd:31:d9:33:2b:92:8a:
c7:34:9e:d3:ad:ca:6d:7c:b1:cb:be:4c:7f:a8:1b:7a:58:0f:
8e:92:9e:79:73:f6:f4:03:7d:96:5f:88:11:f4:0f:7e:af:97:
2e:55:41:31:bd:bf:38:89:6a:e3:e1:1d:69:37:42:62:29:26:
27:4f:eb:cf:9d:19:0d:44:3d:c1:e0:6e:8d:c4:71:46:ee:5c:
59:45:38:87:68:1b:5e:5d:2b:a1:ab:94:e0:f1:80:9d:c0:c6:
f4:d7:44:09:f8:25:f1:c6:e1:51:e5:60:09:5a:d2:78:eb:4a:
07:24:e4:f4:d3:69:a1:d9:cd:62:a3:7d:28:ef:1e:2c:13:ad:
f4:cb:d5:14:37:d3:5d:99:40:69:c5:b1:cd:d3:b8:58:65:3c:
5b:5f:a2:17:16:bb:78:b6:39:fb:79:90:25:a3:69:82:b5:aa:
e6:e2:f1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:28:28 2024 by rpki-client on console-ams.rpki-client.org