Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IQWR11d8CFa4qTOPzFaUZ7cP0GM.roa
File: IQWR11d8CFa4qTOPzFaUZ7cP0GM.roa (raw, json)
Hash identifier: oCAbVPflQFfH52CdqiWYak+9WCg5N2ks+IJq7gEe7LI=
Subject key identifier: 21:05:91:D7:57:7C:08:56:B8:A9:33:8F:CC:56:94:67:B7:0F:D0:63
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018758A68BD0BE2961A8F4B3AA0AF6AB0EA6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IQWR11d8CFa4qTOPzFaUZ7cP0GM.roa
Signing time: Thu 06 Apr 2023 22:18:42 +0000
ROA not before: Thu 06 Apr 2023 22:18:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2856
IP address blocks: 212.192.212.0/22 maxlen: 24
212.192.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:58:a6:8b:d0:be:29:61:a8:f4:b3:aa:0a:f6:ab:0e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 6 22:18:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=210591d7577c0856b8a9338fcc569467b70fd063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d7:51:95:19:f2:03:14:f9:37:5f:84:f3:73:
57:10:05:86:3f:20:81:20:22:65:cf:24:88:58:5b:
11:2e:fa:ea:d7:1a:be:14:af:26:ba:c9:4b:20:12:
0f:17:7f:ef:7d:98:cc:fd:ab:62:ae:36:ce:8e:a4:
45:9c:3a:04:96:a2:35:c0:cc:92:75:b6:ce:e0:94:
f4:2c:6f:b2:de:18:ce:0a:10:34:8b:f6:4b:b4:4c:
f9:3c:c1:64:aa:75:ef:60:a4:05:8c:a2:47:c9:a2:
16:75:c7:29:24:ed:0f:bf:f4:d0:8f:2d:5b:63:7e:
f0:c2:32:3b:58:0f:e7:8c:b7:35:7c:c0:00:82:85:
dc:dd:b4:53:f8:29:d3:e3:3d:cd:d4:9f:4d:d7:e5:
fd:47:8e:99:29:f2:58:01:b2:39:d0:f9:de:24:4a:
51:9b:11:a6:17:31:e4:c5:91:e3:90:b9:6c:2d:10:
8c:29:c4:39:a0:b9:3b:0e:33:4b:2b:62:93:80:6b:
21:11:54:4c:56:4d:62:97:96:22:72:0d:6f:b1:54:
63:57:cd:b5:0e:15:92:cb:39:27:11:ba:1e:5a:76:
43:d8:ac:be:76:fe:cc:98:90:9a:d0:99:a8:c8:4a:
fd:7c:3e:f2:ff:cb:80:64:9d:32:15:66:1d:22:4c:
bb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:05:91:D7:57:7C:08:56:B8:A9:33:8F:CC:56:94:67:B7:0F:D0:63
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IQWR11d8CFa4qTOPzFaUZ7cP0GM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.212.0/22
212.192.252.0/22
Signature Algorithm: sha256WithRSAEncryption
86:db:bf:d5:2b:1c:9d:9b:0f:3a:9b:74:62:fc:40:37:6c:a6:
72:4e:50:d2:ba:94:c2:9b:aa:a1:3d:53:b0:28:96:30:a6:b3:
34:da:19:88:ea:ac:4d:e0:bc:73:1b:f4:65:4a:43:b4:99:05:
39:3c:6b:12:0b:d2:68:42:b4:ca:a0:a0:79:49:88:02:b2:c1:
ca:28:87:7d:a8:6a:0b:e7:bb:9e:c8:47:05:90:c9:53:0c:46:
b6:3e:e5:fe:f2:ab:06:cf:94:e4:3a:86:e3:65:51:e6:36:b8:
7b:46:4f:40:e4:6f:f2:51:3d:f1:02:00:33:39:d6:ab:30:f5:
63:3a:89:67:4f:41:e1:6d:24:45:57:61:e2:53:e9:9c:f6:ab:
7a:12:14:d3:14:c5:87:86:50:76:77:dd:6d:9e:72:a2:2a:88:
52:d5:f3:ad:93:5a:57:37:61:f7:74:4e:b5:17:9b:2d:7e:f8:
39:bc:9c:c1:59:a6:d2:2c:f6:41:84:73:de:ff:02:0c:a9:dd:
ac:f2:cc:05:6f:a9:62:8d:0a:8a:fd:10:be:8f:7a:4d:ac:98:
c3:fe:d2:5b:fe:c8:af:47:ea:1e:a0:6d:c0:0c:28:c2:4b:99:
d5:62:2f:dc:0d:ba:70:05:7c:c9:8f:50:8b:73:22:f7:a6:33:
5d:41:45:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:54 2023 by rpki-client on console-ams.rpki-client.org