Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/daG_bRwGypOeBEbI_f3eMAQV4cc.roa
File: daG_bRwGypOeBEbI_f3eMAQV4cc.roa (raw, json)
Hash identifier: GX/jWGUJq747VhF3+T8okFEUg5PmHdkXoDQomeNw3P8=
Subject key identifier: 75:A1:BF:6D:1C:06:CA:93:9E:04:46:C8:FD:FD:DE:30:04:15:E1:C7
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C8FAC3B9A16F7249ADEDB1728DB31DB42
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/daG_bRwGypOeBEbI_f3eMAQV4cc.roa
Signing time: Fri 22 Dec 2023 03:57:58 +0000
ROA not before: Fri 22 Dec 2023 03:57:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210974
IP address blocks: 212.192.2.0/24 maxlen: 24
212.192.3.0/24 maxlen: 24
212.192.11.0/24 maxlen: 24
212.193.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8f:ac:3b:9a:16:f7:24:9a:de:db:17:28:db:31:db:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 22 03:57:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75a1bf6d1c06ca939e0446c8fdfdde300415e1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:23:d6:40:5d:bb:3a:88:fe:3a:c5:d7:6f:c4:
8a:04:34:96:23:6b:c1:8b:dc:d6:09:d7:5b:b8:13:
6c:a0:84:f1:eb:f1:0f:a3:eb:bd:44:40:bc:9f:31:
19:dd:94:24:2d:76:3b:7f:09:eb:43:8a:fe:a3:ed:
f0:f3:ac:a3:c2:df:ef:80:21:40:63:a9:2e:09:b8:
55:cb:37:20:ac:c4:e8:75:2b:18:72:fb:27:0c:68:
ef:21:33:f0:12:5b:ca:62:c9:01:41:1d:34:15:3e:
73:f6:89:ae:7f:19:73:ff:0b:c5:42:7f:1c:1a:d9:
73:04:3d:d2:ec:df:a6:0d:82:d8:1b:2d:84:7c:cf:
4b:10:34:44:e9:4f:f6:36:e5:d5:1f:0a:b7:f4:4f:
d3:03:b6:11:49:ea:24:ba:c0:16:62:42:91:c0:19:
79:46:93:30:84:fe:e5:58:ef:67:22:d5:ab:f0:39:
60:9e:7a:05:1d:14:b0:1a:cf:d2:e8:b2:17:55:0b:
3e:1f:ef:0f:90:e7:d2:dd:ff:56:6d:cc:95:44:0b:
13:34:75:a1:7e:e8:b9:b1:9a:b2:93:0e:21:64:d6:
b6:24:15:a5:54:80:67:8a:c0:b2:9b:72:63:b8:3c:
19:17:c5:07:84:61:be:5c:00:f4:7f:46:68:37:9f:
3b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A1:BF:6D:1C:06:CA:93:9E:04:46:C8:FD:FD:DE:30:04:15:E1:C7
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/daG_bRwGypOeBEbI_f3eMAQV4cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.2.0/23
212.192.11.0/24
212.193.8.0/24
Signature Algorithm: sha256WithRSAEncryption
47:f0:17:1b:94:38:71:78:3b:a5:ff:a9:15:1b:4f:fa:23:b2:
4d:c0:2f:b0:03:d0:2c:e9:1f:71:71:8e:53:27:23:41:de:8c:
ec:e4:c3:d4:27:58:1c:90:df:46:04:7b:e9:6c:2c:cb:8e:c9:
5f:4d:9e:d9:15:f5:5b:2e:e2:53:5f:c7:af:f5:8e:13:91:80:
e7:ce:34:bf:da:39:ab:7c:7b:15:e1:c2:fd:68:94:72:a8:64:
24:1f:d8:d9:ad:90:f1:18:f1:89:87:9a:7d:20:f2:28:79:19:
6d:12:42:42:03:73:18:89:cc:3e:62:a5:12:85:30:3e:a2:36:
16:95:d4:6c:b0:99:95:8c:ec:18:75:48:ff:2a:a5:9b:ff:d3:
79:6a:0f:1b:49:d4:92:c2:ef:38:0d:f1:a8:4d:62:35:bc:6e:
4a:76:df:d8:22:88:fe:dc:55:79:71:a3:02:49:3a:5e:0d:66:
ad:01:93:40:1d:ef:b8:d8:6b:40:0a:3e:92:7a:43:34:f5:80:
5a:09:12:8d:86:0a:01:ff:d3:35:a0:12:ca:6c:8b:f0:23:b7:
ba:e5:f2:55:03:16:bd:d7:b4:24:bd:01:47:84:67:bc:2d:84:
f2:52:4e:d2:23:32:37:ae:c7:24:24:6a:5c:1f:42:0b:5d:ee:
4f:49:65:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:21 2024 by rpki-client on console-fra.rpki-client.org