Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/nowLwoSRCbz3cEPKOt_YxsZUvYY.roa
File: nowLwoSRCbz3cEPKOt_YxsZUvYY.roa (raw, json)
Hash identifier: Y0EthlhXqm9MDPEIkOO26IpkPRn+5JreyEjG+Rkt0qs=
Subject key identifier: 9E:8C:0B:C2:84:91:09:BC:F7:70:43:CA:3A:DF:D8:C6:C6:54:BD:86
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018949849086239153786665EB172C162DD4
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/nowLwoSRCbz3cEPKOt_YxsZUvYY.roa
Signing time: Wed 12 Jul 2023 09:52:51 +0000
ROA not before: Wed 12 Jul 2023 09:52:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210715
IP address blocks: 212.192.28.0/24 maxlen: 24
212.192.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:49:84:90:86:23:91:53:78:66:65:eb:17:2c:16:2d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 12 09:52:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e8c0bc2849109bcf77043ca3adfd8c6c654bd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:93:9a:d7:c1:68:94:e9:0e:d7:00:57:44:2d:
99:08:42:43:d7:0d:cb:90:fe:7e:c5:ff:45:3f:63:
26:7b:ce:d2:89:e2:a9:79:11:60:58:c2:9a:6c:cf:
5b:9a:a5:a0:98:e8:a0:c6:d2:5d:5f:d2:13:78:cf:
02:44:08:bd:89:c3:2f:12:98:0e:80:1c:1a:e6:06:
43:9c:44:56:c5:ad:4a:67:87:d2:7e:fb:a1:93:0d:
60:68:48:78:ba:a8:99:39:ce:f9:ae:84:c2:b9:a0:
96:58:e4:4e:e8:dc:94:6d:83:a5:a2:bd:cc:84:f1:
e2:07:7b:fd:6d:43:fa:ff:ef:c8:80:d2:9f:41:05:
90:53:49:1f:58:35:a7:19:e8:5a:75:b6:70:a4:3d:
85:70:f4:90:73:ac:90:53:9e:25:dd:5b:89:61:30:
9e:0c:ed:d5:b5:77:fd:d4:b7:de:e2:cd:59:72:f6:
ce:22:5f:3b:72:f6:a1:74:03:ae:a2:0e:26:86:23:
06:8f:56:a1:ed:27:1c:4d:70:dc:6e:a7:98:ea:01:
75:f8:3b:ee:cc:56:0a:4c:52:28:5c:68:c4:93:ae:
3d:db:61:e2:0d:4a:ab:5e:5c:9f:2a:84:4f:e6:e1:
eb:22:d7:13:27:b5:75:89:c4:37:a6:34:f4:f0:8a:
ca:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8C:0B:C2:84:91:09:BC:F7:70:43:CA:3A:DF:D8:C6:C6:54:BD:86
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/nowLwoSRCbz3cEPKOt_YxsZUvYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.28.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:37:85:98:1c:a5:3e:38:86:c4:e4:18:f0:19:f7:df:38:f1:
d1:79:30:f3:f1:66:18:cb:21:14:f7:02:33:5e:32:43:ad:68:
0c:0b:2a:f8:40:0c:c3:c6:21:bc:92:97:1a:87:73:dc:f8:23:
bb:6d:78:e7:3c:e8:ac:48:5e:42:71:2f:b9:6a:83:c6:01:be:
a1:df:c3:85:cd:95:9a:cf:4c:ea:b8:3f:1e:59:af:1f:cc:8f:
16:5c:50:ce:f8:f5:3b:cb:02:d7:ce:7d:5e:0f:8b:cd:02:aa:
73:6f:75:4d:c6:e7:4e:9f:45:25:84:11:04:e0:14:33:dc:b0:
0b:01:0c:04:96:dc:d3:ae:4c:63:88:69:3b:43:ab:d6:c7:2a:
61:eb:dc:5b:6e:b8:ef:3d:76:3b:ed:ba:31:65:a6:08:14:30:
e0:30:17:7d:38:23:fa:e7:a5:56:ba:e7:55:cb:8f:cd:0d:d2:
48:14:a8:9a:9c:ed:57:f3:0b:27:80:c6:2c:ab:92:3f:27:3c:
f2:42:48:33:fa:82:a5:6a:9b:64:c6:ef:63:98:63:a7:d6:8b:
d0:9f:82:24:d6:1d:f9:b5:cd:69:7e:b8:ac:20:96:d8:c9:9c:
9e:26:e9:d5:9a:06:e7:27:e4:88:ce:87:32:d4:3b:c6:49:df:
52:f7:c1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:26 2024 by rpki-client on console-fra.rpki-client.org