Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xw217N9zJ0lf4CrEcGTvOnZUZBM.roa
File: xw217N9zJ0lf4CrEcGTvOnZUZBM.roa (raw, json)
Hash identifier: Ap7+1Y85PvoxYAbhL8ojiv/L2bOp31vscy2kOlImi94=
Subject key identifier: C7:0D:B5:EC:DF:73:27:49:5F:E0:2A:C4:70:64:EF:3A:76:54:64:13
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A09689CFA98205A3D779247705F7EF6D2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xw217N9zJ0lf4CrEcGTvOnZUZBM.roa
Signing time: Fri 18 Aug 2023 16:09:25 +0000
ROA not before: Fri 18 Aug 2023 16:09:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 212.193.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Oct 2023 15:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:09:68:9c:fa:98:20:5a:3d:77:92:47:70:5f:7e:f6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 18 16:09:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c70db5ecdf7327495fe02ac47064ef3a76546413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2d:0b:58:63:2f:ea:79:3a:fd:3e:a7:9f:21:
b0:3a:a7:f1:94:bc:dd:ba:4d:0a:de:8d:08:72:e9:
cc:98:b4:ad:84:e2:7f:02:bd:4c:f7:c2:31:1f:1e:
e4:0a:f8:a9:47:e8:11:ce:99:17:53:9e:11:49:d0:
60:06:a0:1b:86:f8:6e:94:54:6e:4c:98:01:7a:94:
fe:fb:71:31:18:29:fa:d7:5b:28:f4:64:ca:85:a3:
58:b8:19:c0:66:32:92:d0:dc:1e:cb:8e:19:2a:a9:
96:07:b4:1a:b2:a1:da:e3:3d:78:6e:73:07:34:c8:
79:0f:ed:b1:0e:9a:59:fc:27:8e:86:ba:66:34:dc:
b9:24:77:6b:8e:e5:55:88:3c:1e:00:b9:2c:c1:aa:
16:3d:54:79:01:c5:c2:5e:95:39:94:b0:31:08:96:
04:8e:b4:f1:a2:a2:36:d5:6c:4e:53:6f:d1:b6:ee:
be:2e:0a:c2:e4:9c:7d:94:2f:47:3d:4e:8e:64:cb:
98:a5:ba:47:00:86:4e:cc:d4:ba:8d:33:bb:33:d9:
76:04:a6:b7:ca:b5:06:7d:83:ed:90:6b:a9:b4:c8:
30:55:5d:40:00:0d:06:39:ab:72:86:65:77:18:fc:
2b:35:28:4c:3d:c6:49:fb:51:5a:f9:3d:da:3c:c6:
90:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0D:B5:EC:DF:73:27:49:5F:E0:2A:C4:70:64:EF:3A:76:54:64:13
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xw217N9zJ0lf4CrEcGTvOnZUZBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
72:96:02:21:4f:dd:36:01:1e:ca:03:ee:71:9d:5f:bb:6a:91:
38:02:c1:f2:5e:25:1b:b6:32:9b:6a:02:99:31:e4:aa:91:24:
8a:ac:99:99:80:6c:8e:5e:5c:9d:c2:0a:ef:34:a5:b4:e1:3a:
f6:a7:cb:38:21:80:20:ad:3c:94:10:f3:a4:90:a6:ad:3a:32:
02:6a:46:fe:27:9a:61:31:7d:dd:38:fa:bf:a7:19:07:fc:35:
4b:56:85:4f:0b:2c:46:28:3f:4b:25:de:46:55:fd:a7:72:0c:
12:e0:3c:f6:32:3a:f8:f2:8a:c9:06:39:57:a0:fe:b3:57:91:
4f:6a:e1:be:88:81:3d:2d:77:86:43:71:a3:28:39:15:bc:73:
c2:bc:a8:f9:b4:c6:9b:ae:a3:0a:0d:63:50:b6:9b:71:fa:3a:
25:18:c5:22:d2:3b:34:b6:4e:90:0b:58:33:17:be:0d:76:9f:
33:1e:0d:39:5c:66:a4:c0:e4:d5:c4:f3:c7:73:31:67:89:71:
97:65:34:29:82:1e:4b:d0:0b:c7:26:43:5b:66:6c:bd:7e:11:
ef:20:0b:3b:46:02:88:a2:3a:a6:74:d7:00:c0:ee:64:92:99:
96:21:55:8a:f8:a2:da:83:85:20:40:51:cd:f6:91:94:f7:ba:
2a:a7:8b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:30 2024 by rpki-client on console-fra.rpki-client.org