Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/r-EuopK7VU3gHcAbeHm8BCk5Dd8.roa
File: r-EuopK7VU3gHcAbeHm8BCk5Dd8.roa (raw, json)
Hash identifier: T9AweZIw3vLk7V6rQKJGoxRCa/MeneBAjY78FpKUor0=
Subject key identifier: AF:E1:2E:A2:92:BB:55:4D:E0:1D:C0:1B:78:79:BC:04:29:39:0D:DF
Certificate issuer: /CN=cc215f58159ec576a2022776ea64f61c5bb00194
Certificate serial: 01856EEFD7407A963617B789EF914EF072D6
Authority key identifier: CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/r-EuopK7VU3gHcAbeHm8BCk5Dd8.roa
Signing time: Sun 01 Jan 2023 20:04:50 +0000
ROA not before: Sun 01 Jan 2023 20:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49950
IP address blocks: 212.122.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:d7:40:7a:96:36:17:b7:89:ef:91:4e:f0:72:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc215f58159ec576a2022776ea64f61c5bb00194
Validity
Not Before: Jan 1 20:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afe12ea292bb554de01dc01b7879bc0429390ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:72:69:0e:4e:e5:2e:8f:63:e5:5a:89:f2:e8:
40:18:61:0b:4c:be:85:54:61:51:70:cb:c6:08:1e:
8f:6a:df:5d:cc:c3:ad:2c:70:f8:31:df:f7:d8:7e:
e0:57:b3:ca:4d:74:d2:98:1a:73:3b:52:1f:56:12:
c4:2e:cc:17:66:29:4c:9e:99:cb:1c:d4:5b:b6:e5:
aa:3d:8e:bc:87:a9:41:da:8c:79:21:e0:75:d5:e1:
70:a0:47:b7:25:c0:81:5c:04:52:ec:79:9c:d9:60:
36:30:23:f1:59:81:6c:bb:5f:d9:23:2b:16:7d:5a:
fe:a2:c3:c5:3b:13:f0:0c:bd:f3:75:e8:e5:0c:0c:
56:c8:ac:f5:d5:09:04:c4:13:42:39:30:2a:9a:34:
99:23:3e:45:80:7f:ba:7e:1d:a1:36:0b:e2:7c:ad:
78:bd:ae:38:cc:e4:e9:61:cb:8a:56:da:b7:c6:7a:
9e:a9:c7:12:0d:06:5e:62:ed:a2:17:de:c4:3f:5a:
84:7e:47:56:bb:d9:06:0d:f5:ea:7c:03:a7:6e:d9:
42:96:31:12:23:c1:bc:2e:48:37:ae:2f:f4:9b:15:
61:33:39:ee:90:b9:f8:86:82:39:23:34:9e:3a:98:
93:5e:c9:83:5a:01:34:fb:77:d0:9e:e9:7c:77:c8:
6b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E1:2E:A2:92:BB:55:4D:E0:1D:C0:1B:78:79:BC:04:29:39:0D:DF
X509v3 Authority Key Identifier:
keyid:CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/r-EuopK7VU3gHcAbeHm8BCk5Dd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.122.166.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:2c:0b:d3:96:30:f6:9a:0e:a3:24:f7:8e:b8:ed:e3:a0:45:
a3:a4:0c:0d:3b:2f:b5:89:b4:b6:0c:b4:d2:d1:df:7a:d8:c2:
15:13:ca:a9:46:57:45:3a:a3:57:3d:f5:84:9d:c6:01:db:fe:
45:a1:a1:a3:88:0c:47:2e:81:8d:9d:34:2e:d9:59:d5:8c:f1:
bb:9d:cf:db:0f:82:75:54:01:6e:1d:43:cd:cd:c0:ef:0f:59:
6d:cb:74:ec:36:4c:4e:7f:f1:c2:e9:d9:5f:98:ce:b8:c0:9f:
cb:74:3a:66:44:09:b6:2a:26:de:a6:97:13:d4:e8:23:b6:1f:
08:9e:77:8a:ac:a0:b0:e2:2b:8a:03:38:e7:94:2b:ba:c6:07:
5c:f9:f6:70:f0:a4:be:78:fc:c0:b0:a1:52:eb:57:e2:b7:00:
0b:fe:66:28:92:18:09:09:65:e1:19:79:4d:99:ff:40:a5:a1:
02:5f:98:62:f5:3e:e7:1b:95:7b:f6:b9:29:dc:71:15:43:ed:
c7:34:08:bb:cb:8a:e4:75:64:08:93:4e:44:38:3b:c5:6e:f3:
2f:50:91:8f:fe:2b:2a:d9:68:ef:a5:03:13:6d:7f:cb:49:f5:
12:9c:f1:92:35:35:6c:76:c2:98:f6:e9:da:68:70:ce:c7:ba:
cb:2e:96:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:40 2024 by rpki-client on console-fra.rpki-client.org