Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/L57GafK5g_lgWbkczOKnd_Y0zRc.roa
File: L57GafK5g_lgWbkczOKnd_Y0zRc.roa (raw, json)
Hash identifier: D/fB2BLTOXm3WQ9ZKffyAHWkTjpERJiCWuc/0GKcfNM=
Subject key identifier: 2F:9E:C6:69:F2:B9:83:F9:60:59:B9:1C:CC:E2:A7:77:F6:34:CD:17
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01896383890751853B50C8AED4EAD2D27BEB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/L57GafK5g_lgWbkczOKnd_Y0zRc.roa
Signing time: Mon 17 Jul 2023 11:01:51 +0000
ROA not before: Mon 17 Jul 2023 11:01:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210773
IP address blocks: 212.193.4.0/24 maxlen: 24
212.193.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:83:89:07:51:85:3b:50:c8:ae:d4:ea:d2:d2:7b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 17 11:01:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f9ec669f2b983f96059b91ccce2a777f634cd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:69:ba:2d:9e:7d:ae:9b:1b:ca:31:e0:72:
db:8e:28:ac:37:7e:a7:d5:3c:1d:19:0e:77:cf:59:
d4:a7:b5:ce:78:86:fa:c8:57:91:fa:b2:79:b7:9d:
7c:2f:b6:8e:25:a5:97:f4:5e:e6:e7:28:92:01:9e:
4a:7f:f0:5e:51:fa:69:0f:ac:12:58:4d:b0:bb:cf:
16:38:c4:64:2e:dd:ba:3c:97:74:2f:a9:4a:cc:26:
60:ea:91:5f:da:a0:44:7a:56:58:dc:1f:ce:77:7d:
c8:d5:fd:d0:ec:f9:0a:05:23:29:1d:1f:19:eb:fc:
2d:58:14:d1:38:44:30:bb:ac:ad:36:11:0e:41:b3:
3a:d4:55:1f:90:99:2c:74:2d:71:38:e8:cd:ce:74:
a0:06:ad:63:6c:a9:84:24:0d:56:2a:b1:17:a4:ec:
14:f7:2c:ee:b3:1b:e4:88:eb:3b:ab:88:93:60:3c:
50:2b:6c:88:75:e0:5a:8e:a5:e9:6c:c8:df:b2:d6:
6c:f4:ec:b7:bb:8a:d4:b5:24:f4:3f:34:cc:5d:ec:
31:19:bb:b8:1d:a6:b1:01:3f:ed:a0:fa:59:64:de:
00:b5:75:1e:19:96:22:0d:9c:fe:b0:2b:c0:33:c2:
5b:60:be:9d:f9:70:27:34:dc:a5:ef:3c:9f:2a:cb:
ef:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9E:C6:69:F2:B9:83:F9:60:59:B9:1C:CC:E2:A7:77:F6:34:CD:17
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/L57GafK5g_lgWbkczOKnd_Y0zRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.193.4.0/23
Signature Algorithm: sha256WithRSAEncryption
51:5e:0b:52:d7:fc:f6:5b:de:38:87:2f:03:0c:34:5b:2d:d5:
3a:5c:99:0d:5d:17:e9:ba:19:47:71:6d:95:f2:94:2d:61:1d:
8b:f5:36:e7:49:77:0b:e1:34:10:3e:1b:33:c9:5f:c0:2e:48:
3d:3c:3d:42:5a:2c:7d:03:1b:52:af:b2:b0:a6:2d:ed:91:6c:
59:72:b2:eb:41:8a:44:93:f2:c7:5b:87:75:20:fa:62:2c:b6:
95:34:42:2f:ba:ff:ec:45:f5:e6:bc:c6:ae:16:91:2b:2d:83:
56:69:e3:c6:5a:ae:4d:ad:11:1f:7e:69:e2:99:43:90:12:3c:
6c:9d:1a:f7:f7:73:92:71:ca:20:f8:77:ed:99:7c:e0:ce:d3:
f6:18:a9:6d:d6:42:30:56:ec:43:76:61:b4:41:cf:2d:05:38:
dd:67:5c:0c:d3:44:17:a7:fb:79:60:dc:46:10:92:0b:ec:73:
81:a5:23:64:f5:88:09:3e:27:69:16:0c:39:b4:a6:50:4b:79:
a5:08:b2:38:14:28:3e:08:2c:5f:8b:0a:58:b8:ee:c7:b9:8c:
8d:17:5b:da:ce:f0:c4:65:17:63:5a:98:68:14:85:93:01:d8:
a8:0b:84:c1:e9:5e:3f:ad:1d:e5:63:d1:e4:62:fb:91:54:29:
48:85:70:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 8 07:07:32 2023 by rpki-client on console-ams.rpki-client.org