Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zI8rbBeyfuu2JaAr2O3QcaXyhvQ.roa
File: zI8rbBeyfuu2JaAr2O3QcaXyhvQ.roa (raw, json)
Hash identifier: NPXQOdnhFOhwoSLpBAUi5Oh2hfYAP1bTx8pOB461l9I=
Subject key identifier: CC:8F:2B:6C:17:B2:7E:EB:B6:25:A0:2B:D8:ED:D0:71:A5:F2:86:F4
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A855D2C1826F2D1FD4169E42C45BB45CD
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zI8rbBeyfuu2JaAr2O3QcaXyhvQ.roa
Signing time: Mon 11 Sep 2023 17:49:50 +0000
ROA not before: Mon 11 Sep 2023 17:49:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49870
IP address blocks: 212.192.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Oct 2023 04:42:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:85:5d:2c:18:26:f2:d1:fd:41:69:e4:2c:45:bb:45:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 11 17:49:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc8f2b6c17b27eebb625a02bd8edd071a5f286f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:5e:e8:a9:d5:28:50:aa:f5:74:8a:5a:cc:
59:a8:a7:2a:64:a1:0c:7e:79:ef:03:d2:5a:18:ba:
f0:96:9e:49:31:96:2a:62:c7:ea:c5:e7:db:54:fd:
a6:96:08:ef:3b:06:00:7f:60:59:36:c5:64:b9:78:
a9:db:43:9c:e3:cb:35:62:49:5c:a3:f1:34:2c:94:
bd:db:f2:49:7b:b6:38:5f:d8:41:a0:af:2f:1e:9c:
23:fd:28:02:70:6d:25:0c:0b:56:6f:e7:0d:18:fb:
cc:e7:d1:3f:40:5f:50:98:22:74:a3:01:04:14:3f:
44:f7:86:2d:ba:0c:12:f6:92:d1:cd:fa:aa:14:ce:
64:e5:be:a3:4f:af:45:de:f5:f1:82:0c:98:da:f6:
b5:9b:5a:69:02:14:1c:5c:04:e2:12:20:14:20:4d:
d7:a1:19:85:fe:15:c7:e7:fe:0e:bf:d0:89:e3:da:
c5:1a:f2:ee:91:0a:27:5b:e0:9c:e2:82:3a:8c:e6:
8a:93:e1:02:39:03:de:98:0f:3c:b8:64:05:13:2b:
b9:70:b6:78:0c:36:6e:5e:db:43:9b:08:5c:5a:50:
d1:ab:54:3d:15:89:ed:9c:c3:fa:84:ee:39:2f:f1:
17:31:4a:a4:cc:fb:b0:19:29:65:bf:5f:d0:13:ec:
3f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8F:2B:6C:17:B2:7E:EB:B6:25:A0:2B:D8:ED:D0:71:A5:F2:86:F4
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zI8rbBeyfuu2JaAr2O3QcaXyhvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.1.0/24
Signature Algorithm: sha256WithRSAEncryption
11:e8:5d:b8:b8:9a:68:7e:9f:c0:b6:d5:cb:7f:bf:ce:08:b5:
1e:2a:19:3b:5e:34:07:39:e8:b0:4f:ba:c1:44:6a:e4:69:c9:
25:ac:94:61:e8:d5:65:4f:d1:8e:ca:7f:82:c7:de:d2:2c:9f:
90:77:d9:31:9a:04:29:b1:5a:fc:ba:3f:a3:04:cc:3a:7c:26:
3a:b6:47:a4:4d:b2:eb:c0:ed:88:f1:ed:32:d5:4a:94:08:eb:
04:84:8a:e8:cb:cd:83:dd:d5:8a:b7:58:17:cf:c0:2e:5e:0d:
11:ea:15:a5:6f:15:32:9b:f2:a5:cf:9c:10:14:1e:32:9c:1e:
0b:82:aa:6a:f6:b7:7f:bf:05:85:3b:d7:c1:58:39:93:4d:e4:
df:f4:dd:e7:94:9c:75:29:88:ee:dd:8a:3c:3f:de:e6:29:e5:
33:a4:64:aa:0b:fc:81:80:0e:69:f7:11:a6:88:68:98:19:6d:
0f:28:64:c0:c6:a3:b7:ad:e0:08:a2:48:2f:cb:82:60:bc:d4:
62:a4:3d:9a:b5:d1:9a:1e:6a:a5:4f:b2:6b:2d:97:39:82:9d:
f8:60:1e:20:66:87:4d:d4:05:38:84:1c:c5:e9:c7:c6:35:3d:
0a:f5:dc:85:f7:28:7e:fa:53:fa:c8:39:c8:73:e2:44:3a:01:
eb:48:6b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:31 2024 by rpki-client on console-fra.rpki-client.org