Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DVG46so_70tYNCxNY-7bs_egv-w.roa
File: DVG46so_70tYNCxNY-7bs_egv-w.roa (raw, json)
Hash identifier: CbEF31SZCF7sh6vYmIfLEzPOBLlOrQ11Y0rpxLU83d4=
Subject key identifier: 0D:51:B8:EA:CA:3F:EF:4B:58:34:2C:4D:63:EE:DB:B3:F7:A0:BF:EC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192C92722CB5D78066C1C119D5826D25326
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DVG46so_70tYNCxNY-7bs_egv-w.roa
Signing time: Sat 26 Oct 2024 14:07:18 +0000
ROA not before: Sat 26 Oct 2024 14:07:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 212.87.222.0/24 maxlen: 24
212.87.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 07:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c9:27:22:cb:5d:78:06:6c:1c:11:9d:58:26:d2:53:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 26 14:07:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d51b8eaca3fef4b58342c4d63eedbb3f7a0bfec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:64:57:8d:6d:03:03:34:4a:0b:4a:f7:0a:
c8:51:2f:a2:0a:53:f4:d5:fc:7d:63:34:35:f7:2f:
b4:41:fd:f1:a6:d6:01:be:63:01:5b:1b:c9:c8:37:
31:50:66:71:0a:5e:e4:e4:2f:74:05:08:b1:8f:e2:
7f:df:9e:73:16:6b:26:88:d2:8a:e8:ec:2d:c5:1a:
c0:6b:21:87:db:36:f7:b5:66:83:4d:60:ad:83:3b:
11:d8:c9:8f:4d:0f:f0:24:80:36:30:91:ef:e9:0e:
89:4e:0c:9e:d1:c2:41:41:55:9b:35:20:1a:6a:9f:
1b:4b:ec:2e:ad:5e:38:c6:7f:d6:c2:4d:7d:fa:db:
c5:ba:6d:4c:14:8a:19:19:c3:21:42:6f:26:90:72:
3d:8d:0a:47:8a:76:a8:73:2f:3d:50:27:83:bc:48:
fb:e8:a1:44:00:10:8e:ae:f7:30:68:46:2f:1a:87:
b4:8c:9b:cf:6f:80:b1:00:35:80:a3:8d:77:bb:c3:
d3:61:23:8c:1d:df:8d:5c:4f:de:e3:2d:54:80:dc:
1a:b1:db:a9:9d:3a:79:7b:8f:f7:58:97:46:7b:31:
29:34:1e:4b:4a:eb:54:e5:8b:65:8a:b8:a5:04:f7:
8a:7d:e4:61:f1:56:75:b2:f5:f8:2c:d5:3f:95:14:
94:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:51:B8:EA:CA:3F:EF:4B:58:34:2C:4D:63:EE:DB:B3:F7:A0:BF:EC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DVG46so_70tYNCxNY-7bs_egv-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.222.0/23
Signature Algorithm: sha256WithRSAEncryption
45:32:a9:f0:65:ff:30:f8:95:84:d3:c0:72:1a:f9:8c:9d:88:
80:2c:eb:75:bb:23:8a:7e:6f:f2:cd:30:68:4d:7e:51:4b:e5:
23:25:9a:70:dd:be:96:e4:1f:8f:9b:23:59:07:5a:fa:2e:f6:
d4:b9:d3:5f:3c:2b:2e:f6:16:e4:3c:60:40:8d:45:b8:87:aa:
83:9d:76:b2:de:51:26:70:1d:15:67:67:4e:42:34:41:93:24:
2d:9f:18:72:61:d3:39:37:4a:31:e7:9e:ae:50:1f:2f:f8:35:
d5:68:36:33:ff:75:2b:61:4b:35:3a:63:90:e4:e3:18:2b:76:
ad:39:37:0a:03:a9:04:b6:43:8f:c5:e3:2d:cb:78:04:33:c1:
cd:50:0b:fb:0d:24:e5:94:9d:f3:51:13:cf:9f:b3:09:e1:f8:
b4:06:50:fa:a7:8e:88:8c:56:24:3f:7d:5e:7c:df:ca:73:5b:
51:2a:5d:e8:9f:f9:e7:41:25:ea:4b:f3:3c:71:ad:2b:6b:0d:
01:a4:1e:f5:7c:9f:75:d5:32:b8:61:a3:8c:c6:b8:72:cb:79:
3f:ac:d9:4a:c6:28:50:e5:b5:46:8f:04:34:42:30:27:be:8b:
d8:7e:29:79:68:91:8a:de:e8:52:fe:b7:97:28:cc:65:17:8b:
36:5c:83:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 09:20:38 2024 by rpki-client on console-fra.rpki-client.org