Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RKwABFznkE_5mycBonmCNIhdkaA.roa
File: RKwABFznkE_5mycBonmCNIhdkaA.roa (raw, json)
Hash identifier: 2IuOWIPCJfInD8698PaBkzFm0kR+SfrKwjJGXBB0c9A=
Subject key identifier: 44:AC:00:04:5C:E7:90:4F:F9:9B:27:01:A2:79:82:34:88:5D:91:A0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F67114EE671A0D0BA67E56FCACD25F4
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RKwABFznkE_5mycBonmCNIhdkaA.roa
Signing time: Sun 01 Jan 2023 22:15:03 +0000
ROA not before: Sun 01 Jan 2023 22:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210974
IP address blocks: 212.192.2.0/24 maxlen: 24
212.192.3.0/24 maxlen: 24
212.192.11.0/24 maxlen: 24
195.58.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Apr 2023 15:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:11:4e:e6:71:a0:d0:ba:67:e5:6f:ca:cd:25:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44ac00045ce7904ff99b2701a2798234885d91a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f9:b2:6e:d4:e8:84:6f:74:ab:31:bc:64:e7:
4f:01:64:9c:da:a5:3f:67:bf:d2:a1:7d:9a:95:9c:
0f:8d:7e:af:fd:2e:c7:a6:81:85:dc:50:e0:e4:2f:
86:cc:3b:b7:26:6c:8b:e1:3e:70:ae:17:86:11:ff:
49:cc:ce:4d:e4:d6:ef:dd:f2:cc:22:8b:aa:65:f8:
1d:fd:05:1b:b4:d9:0b:66:a9:92:5f:fd:3a:21:6a:
cb:6d:cb:89:dc:dc:e7:dc:15:ee:68:2a:68:66:52:
40:e8:6c:05:5f:95:59:b5:f0:d6:35:56:7d:2a:c9:
ed:57:9f:c0:cc:a0:fa:27:62:ad:6f:5f:79:9e:4e:
b6:83:d1:31:b4:07:47:ea:a6:82:52:16:6b:b8:a8:
f2:63:92:21:a3:dd:8c:6f:29:e7:80:05:f3:fc:67:
36:ba:c0:14:37:c4:f0:c5:e4:17:84:99:dc:50:ba:
ac:5f:fa:e3:6a:6d:94:4b:21:25:51:dc:22:dd:70:
95:79:e8:ed:0e:7d:40:17:e8:76:b8:ad:9c:4a:9f:
45:a4:33:d4:8b:0e:56:42:28:1d:59:09:f9:29:cd:
ba:e7:04:67:30:20:07:00:f0:24:26:ad:91:c0:e3:
84:4e:97:d9:df:da:16:14:d5:bc:16:18:5c:c5:75:
8c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AC:00:04:5C:E7:90:4F:F9:9B:27:01:A2:79:82:34:88:5D:91:A0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RKwABFznkE_5mycBonmCNIhdkaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.60.0/24
212.192.2.0/23
212.192.11.0/24
Signature Algorithm: sha256WithRSAEncryption
40:38:35:fb:71:ca:a9:17:d4:da:5b:34:8c:0d:17:2c:22:ce:
20:85:fc:60:5c:62:f4:4a:09:fc:75:f6:50:b3:3c:aa:e8:3b:
b8:e0:9b:fa:84:22:cc:1f:6a:d1:e7:7f:40:e1:13:4d:7b:09:
4e:02:14:fc:1d:3e:cb:fc:0f:b2:b5:23:8a:5b:47:cd:24:7a:
22:74:af:90:ec:ec:00:6f:3d:17:f0:f1:0a:c2:56:5b:e2:01:
51:6f:23:29:ac:e0:bd:50:69:7e:65:07:b0:a4:8c:4c:e8:fb:
54:3a:37:09:44:5d:c9:a3:80:2d:cf:99:3d:33:2d:73:69:28:
69:c7:a5:41:14:17:e8:43:8a:9a:3d:28:aa:e4:49:b7:7f:98:
dd:19:79:c7:ec:1c:ae:92:34:7f:da:68:40:68:a7:53:84:b9:
e3:bc:0c:75:32:90:17:54:38:f6:00:26:47:6f:62:2a:66:b2:
9d:38:d2:d2:27:67:24:fe:ee:57:b1:4e:f6:96:2a:6c:ab:3e:
9d:18:35:0e:7f:e3:6d:4f:50:c8:b9:c4:0a:d8:74:bf:33:d2:
71:51:41:5d:1a:06:c6:62:8a:91:25:52:c2:57:32:1d:e9:ab:
a2:cf:bc:1c:a7:20:ba:ea:4c:e1:aa:1b:df:65:33:72:b9:fd:
7b:f9:b9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:16 2024 by rpki-client on console-fra.rpki-client.org