Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/K6YnVmr7mcH5a2lF1Uoh4yvyW44.roa
File: K6YnVmr7mcH5a2lF1Uoh4yvyW44.roa (raw, json)
Hash identifier: Ckj+yuXcqyty0dQxshhyuhH+h47PWU3Z8CC6dfv6PnI=
Subject key identifier: 2B:A6:27:56:6A:FB:99:C1:F9:6B:69:45:D5:4A:21:E3:2B:F2:5B:8E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185A7417ED6DC60A058D4D907F784B60DD8
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/K6YnVmr7mcH5a2lF1Uoh4yvyW44.roa
Signing time: Thu 12 Jan 2023 18:32:45 +0000
ROA not before: Thu 12 Jan 2023 18:32:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203905
IP address blocks: 212.193.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Apr 2023 15:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a7:41:7e:d6:dc:60:a0:58:d4:d9:07:f7:84:b6:0d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 12 18:32:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ba627566afb99c1f96b6945d54a21e32bf25b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:74:79:02:63:15:91:6d:de:30:2c:47:77:
45:35:8b:75:49:e5:4b:20:bb:2a:39:1c:4d:b8:46:
05:e6:ad:3f:7e:ce:43:e8:c2:d1:2d:04:a1:25:0e:
71:fa:e5:3e:a1:51:cc:3c:9a:b6:0d:fe:5d:8c:68:
f1:fd:7c:4e:46:98:bd:07:df:b8:ef:cc:6a:94:81:
13:3a:55:25:c6:04:5d:30:fc:d0:fa:b0:18:d4:e1:
7e:1d:1b:5f:21:f0:ef:1c:9a:3d:2a:36:30:cc:5b:
c3:90:9b:20:2f:68:eb:1c:b9:ea:f2:c6:fc:54:ed:
6c:31:09:65:91:85:48:1d:9e:6f:62:03:88:b8:3b:
b8:85:10:4e:3b:80:cd:63:0d:7a:1f:3c:9c:18:d0:
56:c6:12:a3:14:6f:52:70:d2:18:58:c4:88:68:6d:
dc:24:ca:36:cf:81:ba:fc:98:4c:e6:61:ae:69:25:
27:e9:44:5f:6d:da:5e:b6:23:67:45:de:ba:64:96:
0d:8c:d4:4e:fd:b2:82:39:89:12:bd:bc:3f:61:9f:
dd:e7:49:06:77:70:ff:77:93:36:98:97:c7:b9:eb:
7a:ca:5b:1c:cf:ed:f8:c7:24:75:98:e4:40:91:56:
02:f3:72:f9:12:32:e4:af:a2:ec:4c:74:d0:04:70:
8a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A6:27:56:6A:FB:99:C1:F9:6B:69:45:D5:4A:21:E3:2B:F2:5B:8E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/K6YnVmr7mcH5a2lF1Uoh4yvyW44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.193.8.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:b0:5c:c2:be:38:ed:b5:a3:02:f3:f1:05:2e:57:49:4d:d8:
11:32:46:fa:89:f1:54:61:01:aa:f9:d8:73:ad:24:9b:7b:2c:
f4:13:3f:b4:84:62:f1:a5:47:92:8d:0a:fc:f6:73:ee:35:69:
10:26:6e:f0:2b:e7:83:bf:d4:8e:0d:d0:42:91:09:de:aa:f5:
db:70:67:4c:a5:39:a9:60:a5:76:8e:ec:a2:24:77:44:5b:e6:
d7:10:0b:57:69:a7:9f:79:42:15:6c:ce:77:42:f6:9b:63:7d:
be:72:05:01:3e:1b:48:ce:b5:9d:0d:ce:a6:07:e8:54:1e:0c:
5d:5b:28:40:d9:79:6b:56:9b:af:89:29:44:20:bf:dc:c0:ba:
18:0e:73:c1:17:30:af:e5:62:7b:3e:63:35:b8:0a:29:f0:51:
81:ac:93:e9:fd:9e:fa:79:e1:17:97:52:94:09:c3:6c:98:cb:
eb:50:43:42:6f:58:ec:9c:b6:e7:80:4b:60:bd:b4:28:c0:82:
47:bf:76:4a:65:fb:0c:cc:16:63:10:d0:b5:aa:f7:f3:af:f0:
dd:1e:8b:6c:07:6d:46:eb:4a:0d:f1:2c:5b:77:2e:76:f7:53:
3a:03:45:c5:50:2a:8f:55:6c:fb:84:8e:ef:d3:e9:80:a5:8c:
92:cf:38:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:13 2024 by rpki-client on console-fra.rpki-client.org