Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/191GZOJ5GRwVmoZ07apSze5w07o.roa
File: 191GZOJ5GRwVmoZ07apSze5w07o.roa (raw, json)
Hash identifier: tP9MsfhI5FGLzp7FkGtZ8tf5FLp+eVn+DBZb4TvGLyk=
Subject key identifier: D7:DD:46:64:E2:79:19:1C:15:9A:86:74:ED:AA:52:CD:EE:70:D3:BA
Certificate issuer: /CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
Certificate serial: 01885546355E209C9F30CEB2FC7884921AA0
Authority key identifier: C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/191GZOJ5GRwVmoZ07apSze5w07o.roa
Signing time: Thu 25 May 2023 23:37:24 +0000
ROA not before: Thu 25 May 2023 23:37:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59888
IP address blocks: 212.1.204.0/23 maxlen: 23
212.1.200.0/21 maxlen: 21
212.1.200.0/23 maxlen: 23
212.1.202.0/23 maxlen: 23
2a07:7600::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:55:46:35:5e:20:9c:9f:30:ce:b2:fc:78:84:92:1a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
Validity
Not Before: May 25 23:37:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7dd4664e279191c159a8674edaa52cdee70d3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:35:b1:64:c8:ec:3f:1d:95:89:5d:8f:9b:fd:
73:cd:28:58:42:2e:3f:36:a9:bd:b8:bb:c7:f1:b8:
7c:f6:5c:88:d1:af:12:9d:53:34:d2:dc:02:fa:25:
88:2f:b3:6b:ac:46:77:02:d8:bb:89:8d:df:c4:1a:
b1:2b:ab:93:e4:75:86:f6:85:20:84:82:e3:47:0d:
5a:0d:bb:1e:46:1e:8a:98:c0:a5:80:73:df:d7:70:
ae:55:86:8c:c4:d6:4e:9b:dc:bc:98:6d:23:99:1f:
94:f0:b0:70:3d:fa:21:22:d2:cf:9f:48:9f:c9:d6:
9d:74:e3:00:f6:d1:79:0b:0c:92:a6:12:6d:b1:4f:
62:e6:cc:7f:47:cc:e9:16:5c:0e:86:bf:e9:77:8e:
47:ae:26:d6:c2:e8:0d:6d:0d:90:e8:89:75:89:d3:
57:84:6a:84:46:90:f8:08:8d:5c:05:d5:f1:dd:1f:
25:2b:d2:8b:b3:af:c7:2b:0e:ee:7d:03:47:9a:33:
c4:7a:ed:2f:47:d2:6d:f7:61:8d:f3:59:2c:0a:07:
d6:d4:95:fb:6c:0d:ce:b6:70:51:01:c5:73:51:82:
0f:9e:d5:e6:75:45:34:fe:5e:82:3f:a1:6b:d3:ba:
c2:0c:db:05:b1:58:9b:b6:67:f1:bc:2c:26:4e:e6:
6f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DD:46:64:E2:79:19:1C:15:9A:86:74:ED:AA:52:CD:EE:70:D3:BA
X509v3 Authority Key Identifier:
keyid:C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/191GZOJ5GRwVmoZ07apSze5w07o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.1.200.0/21
IPv6:
2a07:7600::/29
Signature Algorithm: sha256WithRSAEncryption
4c:57:8d:5b:f4:83:5e:13:22:79:07:e7:c7:99:f6:26:56:98:
a2:9d:a3:b3:8d:af:ae:21:8a:dc:2b:cc:97:b7:70:6a:95:cd:
86:a9:f4:83:96:6a:ce:8c:01:23:4e:86:7b:e0:fc:15:e0:82:
91:a0:5c:59:a3:dd:68:8f:10:f8:7d:48:e3:86:ef:3a:c7:87:
7e:5a:37:66:16:e4:ae:26:74:ee:8e:36:d4:69:22:b1:37:f1:
a7:83:0c:32:d6:09:64:bd:b6:03:0f:de:95:8e:1f:28:55:0b:
e0:be:3e:49:66:c2:b8:9e:54:94:e3:b3:94:e3:42:a1:53:53:
d6:08:8f:3d:e5:09:d3:4a:95:41:12:e9:8d:65:6a:f4:69:ab:
39:ef:2d:31:f2:1a:d2:23:03:ac:21:35:56:78:81:ae:36:c3:
c6:be:24:e4:53:9d:f4:5c:78:d6:57:5a:d7:bc:c0:80:fb:55:
4b:18:c7:e7:29:e9:fa:08:0c:9f:e8:ce:32:0f:49:4d:e5:77:
21:2e:01:d6:02:64:02:e1:b0:49:f9:31:f9:5a:5a:ba:ba:58:
43:84:b1:5a:a1:57:b6:40:5b:01:98:af:f8:f4:fe:d8:e9:c6:
c5:22:5b:a7:38:45:ff:b4:0d:23:42:19:3d:03:49:83:63:dd:
1c:87:6d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:35:47 2024 by rpki-client on console-fra.rpki-client.org