Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eKs9HkLJZdvKkY6tgZFj3V7XHN8.roa
File: eKs9HkLJZdvKkY6tgZFj3V7XHN8.roa (raw, json)
Hash identifier: upQy2ydLmbJdCr9MAPC8pMr+plkZqtoYFR0+mD0nWJg=
Subject key identifier: 78:AB:3D:1E:42:C9:65:DB:CA:91:8E:AD:81:91:63:DD:5E:D7:1C:DF
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01917B2CDAED1A694E1BA92AED836C20B53E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eKs9HkLJZdvKkY6tgZFj3V7XHN8.roa
Signing time: Thu 22 Aug 2024 17:40:22 +0000
ROA not before: Thu 22 Aug 2024 17:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216157
IP address blocks: 212.193.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Sep 2024 11:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7b:2c:da:ed:1a:69:4e:1b:a9:2a:ed:83:6c:20:b5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 22 17:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78ab3d1e42c965dbca918ead819163dd5ed71cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:64:df:a4:95:1d:f3:93:07:c1:0f:84:31:
44:0d:e9:80:ae:6e:21:4d:01:47:6f:30:31:26:35:
9d:d7:90:05:07:5c:4f:35:7c:7c:40:aa:1e:ec:38:
24:78:e9:5b:65:17:32:2d:b7:65:0a:ea:79:3f:97:
26:a3:1e:e6:e1:d7:3c:41:f8:e5:f1:53:dc:26:cb:
90:c6:04:bb:82:55:98:7f:27:f4:4c:03:01:1c:a1:
0c:ca:d4:4e:60:b7:d6:32:5d:43:ae:5e:e5:2f:1b:
8f:ab:4f:64:ef:c7:2d:28:2a:41:b0:79:d9:29:8e:
97:60:76:b8:6c:9e:29:2c:e3:08:da:63:87:20:37:
65:34:b9:5d:d7:9f:5a:f4:3e:ab:64:81:43:cf:fc:
2c:12:f6:84:f2:85:23:54:3d:ad:a1:a5:4d:57:a0:
7c:7f:8a:6a:a1:d3:33:61:b5:06:ec:35:8b:54:23:
4a:e0:47:9d:df:8c:2b:f8:d3:c0:bb:90:3a:af:88:
e4:8d:42:d9:48:e3:43:69:26:e7:19:a9:79:a6:5c:
ad:bb:18:0a:57:66:bb:b2:5c:fb:58:f2:36:d8:39:
a5:de:0b:c2:aa:32:25:9c:ca:14:3c:e9:e3:8a:4d:
7e:63:9a:dc:19:88:27:28:6c:8f:fa:db:43:f8:21:
14:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AB:3D:1E:42:C9:65:DB:CA:91:8E:AD:81:91:63:DD:5E:D7:1C:DF
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eKs9HkLJZdvKkY6tgZFj3V7XHN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.193.11.0/24
Signature Algorithm: sha256WithRSAEncryption
39:03:c6:c7:41:3e:e6:cd:54:3f:32:19:d7:72:66:de:48:62:
bd:02:57:4c:2b:7b:10:22:32:86:4c:39:f2:c4:dd:09:ba:c8:
fb:5e:3e:89:75:3e:32:48:d6:ad:c3:bd:9c:b6:d2:3b:74:d5:
46:b9:68:25:43:e6:ce:af:e7:c4:40:a7:70:1d:40:6b:2c:9b:
3e:6c:d5:ea:c9:a3:cb:f0:6b:4c:cc:54:5b:b4:47:32:33:1d:
54:4e:e1:c0:e9:11:0d:c2:8e:6d:7f:de:26:d7:cb:c3:1c:99:
29:9e:2f:33:5d:68:2a:5d:4e:e7:cf:12:be:e3:24:82:a1:43:
6e:88:77:1f:55:00:70:1a:47:84:31:0e:08:4b:0c:20:08:87:
e1:29:8e:d4:be:f5:4f:c2:9d:50:6c:e6:47:8d:98:b5:e7:c3:
be:35:d2:77:ec:c4:53:0b:a1:75:dd:bc:f9:a0:80:a3:82:18:
f5:ca:05:8c:cd:80:a5:bb:35:34:38:85:d1:49:da:9a:f1:09:
3f:e7:9a:b2:15:49:53:93:0c:8a:9e:e1:78:72:26:99:d2:7d:
81:bc:2a:01:51:0e:ff:88:1b:89:ef:ce:37:5c:31:6f:c4:0f:
ee:1b:4c:9c:a4:2c:b2:6c:3a:ce:8d:ac:c5:4c:80:5f:4e:69:
43:23:0c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 13:33:45 2024 by rpki-client on console-ams.rpki-client.org