Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/BhBs1ciiM19WcSW7NxNKDoQITmQ.roa
File: BhBs1ciiM19WcSW7NxNKDoQITmQ.roa (raw, json)
Hash identifier: wDzKt1FY0rC4s+sAfSXXgb1rHvhfvw0KUCyGTkeeuwc=
Subject key identifier: 06:10:6C:D5:C8:A2:33:5F:56:71:25:BB:37:13:4A:0E:84:08:4E:64
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CB56361F62F854F2C72405C82649946D9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/BhBs1ciiM19WcSW7NxNKDoQITmQ.roa
Signing time: Fri 29 Dec 2023 11:43:58 +0000
ROA not before: Fri 29 Dec 2023 11:43:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 212.193.12.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:25:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b5:63:61:f6:2f:85:4f:2c:72:40:5c:82:64:99:46:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 29 11:43:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06106cd5c8a2335f567125bb37134a0e84084e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:ac:00:8f:dd:fb:c1:d6:90:42:97:c4:37:
cc:89:f0:ab:62:1c:85:bd:c2:01:35:35:3d:42:ce:
09:e9:74:9e:e7:94:b8:dd:a4:10:e8:98:9e:41:02:
5f:de:1d:07:42:b9:ab:be:a9:44:74:59:a5:3f:a9:
15:a9:b1:92:42:16:02:87:2d:22:b8:c0:60:7e:db:
81:7c:a3:62:24:9b:dd:54:41:45:66:7f:83:d5:ed:
24:ee:28:cf:7c:56:16:83:cf:73:0f:91:28:18:38:
cb:00:78:c0:e1:cd:d1:72:70:f5:27:0a:ec:43:e1:
18:f5:8d:ec:9b:31:26:e1:1c:27:26:b5:7b:9b:20:
04:b9:66:04:57:55:c4:73:f5:cf:b2:6c:41:25:09:
ba:eb:ce:35:45:e4:67:8d:4b:9e:ad:6d:34:5d:df:
42:48:7a:14:33:a0:9b:04:43:7c:0a:18:36:7f:29:
5d:ed:3d:01:90:2f:64:5d:cd:51:95:16:a8:ca:23:
8d:6d:98:99:90:7f:f7:54:7b:31:0d:13:7c:49:ca:
69:98:cc:8f:a7:0f:7d:5f:a3:d7:b4:26:24:31:87:
b8:3b:2b:45:91:96:07:34:c6:d3:fe:96:bc:87:9b:
c4:00:6f:12:1c:8b:29:e6:b5:3f:39:e5:ad:37:17:
1d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:10:6C:D5:C8:A2:33:5F:56:71:25:BB:37:13:4A:0E:84:08:4E:64
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/BhBs1ciiM19WcSW7NxNKDoQITmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.214.0/24
212.192.222.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
04:77:a3:16:e7:a6:a1:8e:90:ea:6f:d5:5b:13:45:45:27:b7:
b5:d5:30:7d:19:6f:3a:de:41:51:3b:79:a4:f7:87:84:3c:ba:
46:54:82:44:8c:60:eb:40:fe:8e:6c:38:18:36:c4:9a:6e:42:
c5:7b:3f:63:87:a8:33:c3:0c:40:6b:b7:d4:02:f6:c9:ca:25:
51:a8:79:9c:e2:ca:17:7b:67:a1:cd:4e:ec:c3:0e:9f:3c:1a:
6b:28:80:fb:98:60:51:70:7d:be:8c:c2:d2:e2:9b:2c:14:92:
db:eb:b6:24:4e:07:2e:0f:1a:7e:cf:7d:92:fa:f7:63:c8:b6:
2c:40:bc:dc:c3:56:ed:e7:91:ad:92:6f:c2:4f:0c:43:e3:56:
e3:e0:d2:a3:d1:b3:5e:14:a2:4f:be:7c:a5:65:b7:1b:a9:5c:
e8:27:e0:29:2e:ab:6f:5d:f5:4c:dd:29:20:43:93:88:f4:fe:
72:4f:58:cf:e1:ae:fd:ae:5d:66:67:98:bd:40:71:5c:fe:fd:
32:0d:71:19:0c:b4:c6:4f:fb:71:21:62:76:bd:86:cb:f9:a8:
ef:1e:75:61:0a:9c:be:01:c8:d8:41:a6:df:74:36:bf:aa:0d:
55:85:1a:50:55:00:61:46:aa:e9:a2:9a:ce:22:a2:e8:63:cb:
28:77:70:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:08 2024 by rpki-client on console-fra.rpki-client.org