Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/bq_R7tzp277VkygwNA9d9h28Wok.roa
File: bq_R7tzp277VkygwNA9d9h28Wok.roa (raw, json)
Hash identifier: +3JYWDAVw+uCzjReRlKDJVO1aD3BzRS5CO8Q8Yrpo0Q=
Subject key identifier: 6E:AF:D1:EE:DC:E9:DB:BE:D5:93:28:30:34:0F:5D:F6:1D:BC:5A:89
Certificate issuer: /CN=cc215f58159ec576a2022776ea64f61c5bb00194
Certificate serial: 01856EEFD6D31731610806EAEBF1CFC964A2
Authority key identifier: CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/bq_R7tzp277VkygwNA9d9h28Wok.roa
Signing time: Sun 01 Jan 2023 20:04:49 +0000
ROA not before: Sun 01 Jan 2023 20:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25554
IP address blocks: 212.122.164.0/24 maxlen: 24
212.122.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:d6:d3:17:31:61:08:06:ea:eb:f1:cf:c9:64:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc215f58159ec576a2022776ea64f61c5bb00194
Validity
Not Before: Jan 1 20:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6eafd1eedce9dbbed5932830340f5df61dbc5a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d2:92:1c:ed:d2:17:ee:15:25:99:0e:22:c3:
a4:48:b7:d4:02:f4:33:b4:be:5c:8a:22:e9:3c:2f:
0c:41:e9:1a:7f:2f:08:02:97:9e:f3:1f:3f:9d:7f:
44:67:63:92:45:19:f1:d1:12:11:ac:12:1c:9a:52:
79:ac:04:55:a1:aa:76:87:e1:a1:4c:40:a9:31:c0:
50:79:97:a6:1a:ba:bf:95:9f:d3:c7:e1:79:ca:c2:
bf:a2:57:6a:69:e4:96:83:e5:d9:b8:2d:33:3f:2d:
82:b7:57:df:f9:cc:de:a9:a1:d0:62:e2:f5:a2:e0:
cb:c6:a5:9e:05:46:95:e5:a1:4f:b1:6b:58:4a:01:
57:72:ec:d6:78:c6:ec:3e:4b:bd:f3:ad:b6:12:15:
20:01:cf:0d:3c:9f:8a:3f:a2:1e:a6:1e:99:63:28:
b4:72:a9:56:14:28:e3:25:25:3c:7c:b2:63:5d:82:
3a:69:04:6f:76:48:6c:92:2b:94:58:c2:3d:d3:09:
72:db:de:b7:05:30:49:67:12:73:21:3d:ba:aa:7e:
28:bb:22:48:9d:28:47:98:ee:5d:80:72:2f:51:21:
0b:b8:f2:2a:ee:28:ed:75:11:6d:94:bc:f9:0b:39:
01:d9:5d:c7:39:d0:38:2f:03:22:ac:80:ad:7f:b5:
66:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AF:D1:EE:DC:E9:DB:BE:D5:93:28:30:34:0F:5D:F6:1D:BC:5A:89
X509v3 Authority Key Identifier:
keyid:CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/bq_R7tzp277VkygwNA9d9h28Wok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.122.164.0/23
Signature Algorithm: sha256WithRSAEncryption
77:e4:29:7e:ee:4b:cc:c8:1a:82:f5:5c:52:50:4a:c3:15:a1:
f0:6a:74:15:d3:14:f0:f5:0e:4c:6b:cc:67:31:1c:a7:4f:79:
17:eb:ef:d7:e7:b2:c0:81:6e:06:11:5d:85:26:8b:79:29:ff:
a9:8d:9e:99:d0:e8:fc:45:74:58:65:00:9c:45:5a:be:af:78:
5e:ee:6e:bf:11:e9:18:1b:df:0c:e2:95:fd:02:e3:c2:23:d7:
db:4a:b5:c0:91:bb:84:a0:d4:7a:26:56:11:29:0b:d6:b6:51:
50:45:dd:be:e9:c9:12:80:4b:02:05:7f:05:4c:d1:73:a7:71:
fb:30:c2:88:29:d7:66:4f:d4:74:4a:17:67:af:03:dd:95:08:
a2:db:06:9a:f0:a7:8f:88:e4:1a:1b:c9:0a:97:ea:28:bd:c9:
75:d6:76:4c:7e:27:7d:69:49:c3:63:d4:3b:dc:ef:17:d0:89:
99:ec:eb:f1:8f:44:72:8b:16:a9:6f:73:02:49:76:bb:64:e8:
1f:e0:42:09:ef:10:57:fa:04:74:1e:f1:66:6e:ec:37:4a:33:
90:42:29:fd:00:d5:e1:75:63:f6:fb:ab:4c:1c:57:90:be:3c:
23:32:d5:f8:87:bf:66:63:28:04:36:68:40:46:d5:d1:ae:12:
28:c1:00:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:40 2024 by rpki-client on console-fra.rpki-client.org