Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GYK8mbfu8-YBARHaFvAzO-11Jws.roa
File: GYK8mbfu8-YBARHaFvAzO-11Jws.roa (raw, json)
Hash identifier: 5qzjkTO//FCn+Bidbb6wy5CqfRL9Yrt3mpPM6DZuFMw=
Subject key identifier: 19:82:BC:99:B7:EE:F3:E6:01:01:11:DA:16:F0:33:3B:ED:75:27:0B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A91DA0ECB5EE2C72822085E9D96C0
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GYK8mbfu8-YBARHaFvAzO-11Jws.roa
Signing time: Tue 02 Jan 2024 12:33:56 +0000
ROA not before: Tue 02 Jan 2024 12:33:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212027
IP address blocks: 212.192.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:91:da:0e:cb:5e:e2:c7:28:22:08:5e:9d:96:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1982bc99b7eef3e6010111da16f0333bed75270b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:95:8b:9a:4a:92:ce:5d:63:4c:c9:1e:ec:53:
2e:bc:db:67:0d:42:97:98:0d:4e:bc:42:c4:f6:8e:
38:1f:2d:50:bc:b3:d0:6c:96:17:2e:5c:a2:74:31:
e0:fa:a9:a8:69:31:10:a9:12:6f:2f:c2:c9:06:23:
75:05:96:ef:38:18:56:24:52:21:3e:2d:52:f8:d4:
ea:a8:ec:26:e3:ba:51:bb:6f:ea:08:36:fa:1c:23:
53:be:1e:27:bd:da:b2:b6:b2:98:42:32:ce:73:c2:
8d:93:5f:5c:fa:19:25:ad:f9:e5:b4:6e:31:0a:49:
70:f1:58:91:fa:02:c2:6a:16:6e:8a:88:8b:e6:83:
a2:c5:48:e0:d1:55:b3:1d:01:80:c7:92:9f:f6:22:
13:8f:22:c7:d9:97:5c:1f:81:66:d4:f1:a7:59:07:
fb:fc:19:cd:a0:b1:b8:d3:3f:3f:07:f3:f9:7e:66:
be:e0:62:6e:b0:58:29:a2:90:5e:00:d7:c9:2f:21:
34:06:ca:da:82:08:a4:dc:f5:c5:a9:98:20:65:51:
0e:ac:b0:2c:c0:b3:46:00:18:3c:e6:e6:9e:77:02:
2e:17:29:4a:f0:f7:8f:bd:83:10:a8:82:0d:d1:db:
c1:66:99:98:fa:19:c8:69:9c:45:07:23:ba:bf:ee:
ec:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:82:BC:99:B7:EE:F3:E6:01:01:11:DA:16:F0:33:3B:ED:75:27:0B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GYK8mbfu8-YBARHaFvAzO-11Jws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.213.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:6b:05:34:a0:72:41:41:7c:bb:2d:3f:43:5e:e2:86:ab:00:
31:43:56:b3:5a:8e:e4:04:59:21:20:11:92:6b:db:c4:05:91:
fc:d4:c1:4f:59:32:6f:f6:67:a7:13:28:0b:4f:9e:e6:1f:17:
ee:21:21:9f:d1:8b:cc:35:31:78:e6:46:92:56:cf:a6:0f:ce:
9b:d4:b3:86:52:3b:08:4d:a1:76:f6:43:4c:a7:5a:fc:78:07:
d0:45:3f:dd:5d:0c:18:fa:ff:7d:1c:d6:86:5a:c3:b5:d4:78:
22:e0:bd:fe:e7:ba:f2:49:8d:d8:d9:81:5d:3d:e6:1f:1b:01:
36:49:11:ed:d3:dc:64:a3:2c:8d:9a:fc:3d:ef:a2:1d:74:55:
f7:f8:98:b8:65:12:68:9d:d9:9e:48:62:23:0a:72:bc:61:ba:
cc:82:7d:d1:d0:b5:2e:44:bd:0f:d8:43:c6:52:dc:18:1d:71:
d1:7a:37:c6:7f:ff:70:67:d0:d3:1f:fe:2c:a7:d4:a3:20:b4:
bd:9e:84:fe:99:af:db:9a:00:c1:98:f6:4d:c5:27:12:75:63:
69:13:4f:81:33:22:d3:a4:7f:11:49:3d:39:1b:9e:de:72:fe:
df:d5:c2:d0:7b:9c:0c:e6:ac:c2:4b:bf:be:51:24:07:c6:10:
36:34:6e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 20:23:37 2024 by rpki-client on console-fra.rpki-client.org