Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wfjarxjE0Z-LO_RmqboEt9otJg0.roa
File: wfjarxjE0Z-LO_RmqboEt9otJg0.roa (raw, json)
Hash identifier: T+Vwudf3cKKzSuNZdVz+aNXoR0VI1lOHAy+uDBRc7Kk=
Subject key identifier: C1:F8:DA:AF:18:C4:D1:9F:8B:3B:F4:66:A9:BA:04:B7:DA:2D:26:0D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CD9C3F92F400A608E97105CC3DB2E13D5
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wfjarxjE0Z-LO_RmqboEt9otJg0.roa
Signing time: Fri 05 Jan 2024 13:15:48 +0000
ROA not before: Fri 05 Jan 2024 13:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40467
IP address blocks: 212.192.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d9:c3:f9:2f:40:0a:60:8e:97:10:5c:c3:db:2e:13:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 5 13:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1f8daaf18c4d19f8b3bf466a9ba04b7da2d260d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c2:8c:d2:c2:91:d1:f9:82:75:8a:e5:24:a9:
23:98:4f:76:d3:99:b5:a2:2d:29:e3:53:98:93:84:
9c:52:b9:e4:e8:f9:28:4d:7b:0b:a9:2f:ef:5c:05:
e3:ea:16:3b:90:a1:a2:71:93:b6:94:ea:f9:36:47:
81:a9:b1:32:b0:36:a7:eb:14:6f:10:b7:c5:9b:01:
7d:95:67:ec:40:45:69:2a:e3:c4:16:3d:90:ca:ca:
49:1f:b6:1c:b2:7d:2d:3b:c3:b3:b5:22:79:de:6d:
33:26:75:58:0e:ab:31:16:b3:83:3e:b5:80:b1:3e:
f1:ee:75:e2:58:5c:12:3c:63:cb:20:62:f1:59:2d:
8c:b4:04:5f:29:42:42:f9:77:63:67:99:92:f3:0d:
e1:e3:fe:8b:26:4c:25:b2:34:56:9e:41:a1:e5:61:
98:43:ea:5e:12:19:7f:87:f8:0b:40:23:b1:c8:68:
2f:ac:61:70:6b:d1:2b:c0:66:d1:ff:2e:b6:b2:7a:
f6:4c:ef:f6:c7:f6:e0:fd:1a:2f:b1:c2:30:c0:73:
a0:74:4f:17:86:82:fd:a3:fa:2d:47:0f:a7:b0:19:
df:23:ec:a8:5d:49:91:a7:18:59:8a:ef:35:f5:1d:
ac:2d:eb:d9:31:bc:58:47:22:2c:23:01:f9:11:75:
d8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F8:DA:AF:18:C4:D1:9F:8B:3B:F4:66:A9:BA:04:B7:DA:2D:26:0D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wfjarxjE0Z-LO_RmqboEt9otJg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.252.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:70:1f:cb:de:f1:03:88:1b:2c:c1:a0:7b:d3:3e:56:6d:35:
37:73:97:74:e2:f5:32:b9:e3:eb:f5:06:f9:6f:1d:bc:8e:2c:
99:c7:77:db:d4:22:4b:8d:ad:83:df:46:56:03:b6:42:7b:c2:
9f:dc:e0:10:39:a0:e0:bd:d1:60:3f:c3:85:6d:1c:ad:c8:a7:
78:2c:ef:93:4a:ca:8a:86:21:8e:52:33:de:78:ca:ee:13:7c:
23:e9:ae:71:3f:fd:b4:a3:ef:4d:34:27:42:bd:3f:2c:6c:da:
36:e2:04:a7:f6:f9:e9:41:6f:83:97:f7:2c:96:58:92:4e:16:
df:b0:51:21:9f:06:d1:c2:8f:42:8f:8a:0c:07:ce:4e:e2:38:
5b:fe:e3:5d:8b:e9:75:e4:d6:2f:10:45:d8:f2:d5:66:f8:c5:
19:70:ba:e0:93:40:67:0d:ee:28:dd:f6:70:e5:97:2f:91:d0:
9e:9d:fb:84:50:2c:f7:a5:c6:42:4b:5c:a4:55:9b:2f:50:b3:
60:a0:bc:8b:e7:64:02:3e:9b:b7:40:20:99:f6:49:82:fe:37:
17:15:80:0f:99:17:fa:97:55:ed:4f:2c:92:6c:f1:9a:2b:c2:
1b:83:b7:9e:a7:44:42:b5:98:48:98:2c:f5:4c:86:fb:9d:57:
6f:c2:3c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 19:57:29 2024 by rpki-client on console-ams.rpki-client.org