Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Zm-qhLT3IDovoLO58x2GIu7usZI.roa
File: Zm-qhLT3IDovoLO58x2GIu7usZI.roa (raw, json)
Hash identifier: PuFVgixB8LmJaNkA/U2Z+w9sL6v94OcDZTYB420391c=
Subject key identifier: 66:6F:AA:84:B4:F7:20:3A:2F:A0:B3:B9:F3:1D:86:22:EE:EE:B1:92
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C87E7B5603808F627EEAAFBEF9B659C67
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Zm-qhLT3IDovoLO58x2GIu7usZI.roa
Signing time: Wed 20 Dec 2023 15:45:58 +0000
ROA not before: Wed 20 Dec 2023 15:45:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216145
IP address blocks: 212.192.212.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:87:e7:b5:60:38:08:f6:27:ee:aa:fb:ef:9b:65:9c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 20 15:45:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=666faa84b4f7203a2fa0b3b9f31d8622eeeeb192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6c:37:f1:a6:0f:0f:9f:c4:46:43:56:0a:71:
3b:cc:15:13:71:c2:e6:f9:ab:17:14:4a:f8:e5:85:
73:88:83:09:db:5f:40:47:05:f3:f7:42:21:9b:79:
69:f5:b0:3e:5d:ef:b8:83:88:59:65:42:87:d0:b6:
85:76:3e:94:35:14:ed:dd:16:ad:cf:24:7e:f5:8b:
f8:80:1f:7f:75:2c:63:9e:b6:68:60:f9:4e:89:31:
36:37:93:9a:44:2a:66:85:6f:5b:63:2b:68:72:06:
79:a4:86:ae:c6:42:e8:81:39:84:c4:2a:66:3d:56:
0f:5e:88:a1:91:03:c1:87:40:05:e8:95:b4:10:c4:
bd:6d:a0:da:47:01:b7:6b:bc:37:2c:16:e9:b1:e8:
42:d5:c8:b9:65:07:93:6f:5b:10:93:6b:11:00:47:
8d:8e:ca:27:ca:05:16:4b:e7:af:fd:d1:3c:10:a0:
6f:07:c8:74:a5:91:8c:b4:2d:2a:c9:08:d4:30:d4:
33:de:44:d6:41:d4:f8:d4:52:0f:90:04:23:74:6d:
64:0e:b0:03:ff:e7:f3:80:7e:39:24:d1:4c:72:26:
2c:b2:ca:24:b5:dc:1d:35:bb:fb:8d:1f:f2:ab:a1:
c3:9f:32:f3:ac:c8:35:9f:15:04:39:50:fc:9c:27:
06:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6F:AA:84:B4:F7:20:3A:2F:A0:B3:B9:F3:1D:86:22:EE:EE:B1:92
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Zm-qhLT3IDovoLO58x2GIu7usZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.212.0/24
212.192.214.0/24
Signature Algorithm: sha256WithRSAEncryption
16:65:c3:02:82:9a:ab:40:49:43:f5:da:a8:30:d9:a5:d4:1e:
ad:d1:4d:e4:64:10:59:5a:bc:47:c4:0b:cd:9b:ca:89:34:6a:
d2:ca:52:3f:0c:09:72:4d:f2:1c:ea:6c:8b:cc:ab:c1:e6:cd:
a4:8b:01:54:8e:d7:52:38:2f:a5:82:21:14:a3:a0:36:b2:f7:
86:d1:2d:78:3f:f9:5d:bf:d5:17:68:1b:fa:74:bc:23:69:d1:
94:ec:86:56:6c:45:14:2b:65:16:55:bf:e6:5f:69:12:a2:6b:
07:56:1c:a7:ea:6d:be:ee:22:80:a0:ab:51:36:2d:be:55:5a:
63:f8:f0:53:25:ad:f9:9e:5d:7a:9b:e7:19:ce:99:de:2f:b8:
93:27:99:e2:17:59:c1:05:09:a7:e7:c9:c8:ed:4c:c3:2f:e0:
01:e5:25:b4:31:9d:97:27:da:52:00:c1:42:3e:12:de:2f:54:
c1:fa:88:64:8d:f3:4c:6a:45:96:66:a8:d6:03:85:37:96:e6:
a3:9a:79:7f:ff:fa:aa:44:ed:e5:fe:45:7b:15:03:a2:7a:85:
c1:31:34:0d:07:1f:0d:84:75:5c:c2:01:c4:e2:14:2e:fc:2a:
78:45:86:98:db:1b:47:82:fe:50:da:ba:b7:9d:54:e7:d6:86:
f1:82:3c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 04:32:35 2023 by rpki-client on console-ams.rpki-client.org